Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/pc8u-UQ4L_pY2MVRQxheFqm52zY.roa
File: pc8u-UQ4L_pY2MVRQxheFqm52zY.roa (raw, json)
Hash identifier: tqtmUqb0wEFZ1JnczJ02gj/KDwbgwLyWwvRmuaN3vNk=
Subject key identifier: A5:CF:2E:F9:44:38:2F:FA:58:D8:C5:51:43:18:5E:16:A9:B9:DB:36
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 018B47245A2140ACA321789CCCF33407E064
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/pc8u-UQ4L_pY2MVRQxheFqm52zY.roa
Signing time: Thu 19 Oct 2023 08:54:06 +0000
ROA not before: Thu 19 Oct 2023 08:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 193.8.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:24:5a:21:40:ac:a3:21:78:9c:cc:f3:34:07:e0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Oct 19 08:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5cf2ef944382ffa58d8c55143185e16a9b9db36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:ba:3b:b6:1b:c3:86:94:60:aa:70:bb:e5:
eb:4f:46:c3:78:f4:e8:86:4f:1d:d5:a9:82:56:68:
7e:49:ac:aa:2a:34:20:68:3d:33:d6:d9:cb:36:74:
cc:d8:77:fe:a8:4f:a6:b9:4b:96:dc:0c:fe:01:1c:
e1:bb:6c:d8:59:6a:0b:28:19:32:fd:62:83:85:2a:
6c:f3:4d:f6:38:e7:fb:35:9a:54:52:c4:9c:4e:24:
56:60:7d:1c:a7:b4:b2:d0:6d:5e:c1:23:e4:d5:85:
ce:9c:1c:0f:6a:57:55:a1:98:93:08:22:41:1e:30:
27:15:41:c9:27:2d:02:75:d8:f0:1e:08:6e:db:00:
f7:c3:3a:8e:f3:84:a8:a0:98:55:70:90:a2:28:57:
5c:71:88:12:66:77:9d:1e:e3:cc:f0:45:de:19:ed:
b6:db:c9:3c:69:9e:4b:39:25:b2:de:57:e6:91:cd:
26:a4:09:fa:f1:57:29:c8:35:f5:f1:de:05:5c:2e:
ee:8a:23:0e:dd:59:7a:bb:22:fe:23:ac:b1:fa:0e:
4d:68:79:a2:23:70:ba:db:8c:ee:69:60:fa:4d:f3:
35:07:b3:9d:12:48:2a:94:e5:67:a7:34:78:74:ae:
63:07:7c:5a:6f:ce:3c:b3:12:ec:53:fc:fe:1d:1d:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:2E:F9:44:38:2F:FA:58:D8:C5:51:43:18:5E:16:A9:B9:DB:36
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/pc8u-UQ4L_pY2MVRQxheFqm52zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ca:aa:9e:61:a6:50:9f:eb:f8:11:ff:8b:da:9a:e8:4e:2f:
19:dc:6c:31:9f:e4:42:30:5b:50:09:50:38:62:8c:6e:f8:87:
fc:56:11:2a:70:8a:01:e4:e0:46:e1:e9:24:c6:e1:69:31:98:
cd:15:de:4c:03:49:2e:de:d2:80:a0:8f:05:e2:27:e7:b2:2d:
37:6d:dc:33:10:96:42:b4:b1:e4:a5:21:1f:f0:be:5b:dd:53:
d0:13:70:29:9e:27:ca:00:9d:7c:b5:34:a9:3d:3e:e1:5e:28:
87:96:b0:c5:df:9a:65:c4:21:67:80:db:16:f8:99:e6:cf:5c:
58:a1:9a:bf:97:91:7e:36:99:4b:3c:d0:43:1c:b9:15:b4:5a:
54:08:66:27:91:33:28:17:7a:40:ff:71:f4:9f:8f:48:c3:30:
37:7d:4a:b5:9d:f3:cd:4f:d5:eb:84:8d:27:18:5a:26:8c:58:
5e:08:67:73:70:a3:f6:79:0a:a4:fe:c4:8a:b7:0f:11:5b:77:
d1:74:a3:0c:f6:e7:fe:22:41:4f:45:9f:6f:7a:ac:1f:18:2b:
61:d0:72:fb:fa:5f:f9:03:ec:78:b5:29:78:dd:84:c9:8f:65:
ff:af:fe:4a:72:79:da:44:49:a4:b3:8b:7a:40:1c:e2:3e:76:
30:da:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:30 2024 by rpki-client on console-ams.rpki-client.org