Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8h8_keh_rRiSHEJ5_ZUAsYDqIQo.roa
File: 8h8_keh_rRiSHEJ5_ZUAsYDqIQo.roa (raw, json)
Hash identifier: GEbxd8NNpEbDnn27MZwKGiUe5QK3RqfJJ1J77rE9PDw=
Subject key identifier: F2:1F:3F:91:E8:7F:AD:18:92:1C:42:79:FD:95:00:B1:80:EA:21:0A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572470DB56F6BBA84BDCABCD2DA09EA58
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8h8_keh_rRiSHEJ5_ZUAsYDqIQo.roa
Signing time: Mon 02 Jan 2023 11:38:57 +0000
ROA not before: Mon 02 Jan 2023 11:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 193.93.192.0/22 maxlen: 24
91.243.88.0/22 maxlen: 22
91.243.92.0/22 maxlen: 22
31.184.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:0d:b5:6f:6b:ba:84:bd:ca:bc:d2:da:09:ea:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f21f3f91e87fad18921c4279fd9500b180ea210a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:7b:5e:0a:05:80:27:65:5d:31:76:a1:94:
e4:ed:1f:e6:94:81:a6:71:3f:b1:b4:27:59:a7:42:
d4:3f:a9:db:9a:1f:d1:21:80:e4:3f:25:3e:4e:ad:
ab:d1:f0:5d:7b:f4:43:b1:2a:f9:ba:df:79:17:fe:
2f:55:89:83:d7:af:36:6e:fd:16:ac:04:22:b2:d9:
f8:a8:b9:a6:6b:c3:1c:e2:2f:62:53:e3:cd:d7:4e:
60:e8:b3:25:a1:09:ef:b2:a4:71:07:a8:77:22:31:
00:06:56:53:ca:23:26:26:36:a2:9f:a3:a7:98:92:
a4:1c:e5:01:76:85:49:d3:7f:8f:16:e6:9c:d5:d8:
10:91:98:57:ef:8c:7c:42:6a:b4:1f:42:3e:3a:0b:
ae:ff:62:78:b0:15:62:14:d9:22:57:3c:11:66:ca:
5d:57:6d:33:d3:e9:c5:e3:93:89:8c:75:87:97:a5:
d0:1e:4b:01:4a:13:85:b6:0e:bb:ab:e6:17:74:e3:
84:cb:db:28:8a:b7:cf:b6:72:24:c3:68:9b:24:6b:
78:28:da:49:65:7c:2f:db:94:d3:51:89:52:d0:41:
2a:fd:a2:4c:3e:ff:a2:b2:95:4b:6f:e7:01:30:de:
99:72:26:dc:bf:d5:ed:c5:06:c3:44:9a:9d:77:f9:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:3F:91:E8:7F:AD:18:92:1C:42:79:FD:95:00:B1:80:EA:21:0A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8h8_keh_rRiSHEJ5_ZUAsYDqIQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.242.0/24
91.243.88.0/21
193.93.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:54:52:f0:ed:4b:72:1d:5a:a1:a4:e4:81:2a:14:d4:54:34:
79:72:aa:96:60:a0:f6:ff:ed:f1:ae:9c:f9:17:33:60:d9:1f:
2f:44:a8:9b:1c:27:ff:f5:2d:05:ab:82:84:27:1a:2c:3e:1d:
83:7b:80:a2:f5:4a:45:45:dd:49:83:39:bb:9f:c6:f5:c8:34:
81:da:3b:92:54:21:04:7f:71:fe:13:16:62:90:07:73:02:60:
c5:48:b9:ea:e9:05:2c:fb:4c:d9:b5:a3:19:2c:c0:1f:b4:e6:
5f:3b:78:6f:4e:73:3a:3a:b0:94:c0:d9:2f:35:a3:39:46:e0:
f3:04:f6:59:32:0b:b9:b2:df:5d:35:4a:eb:81:51:7c:8e:c2:
2e:1e:bf:13:de:e9:5e:dc:d6:37:c5:fb:c0:9a:5c:1c:6c:a9:
c5:fa:30:ab:3a:8d:42:12:44:48:35:0c:63:63:ff:ff:6b:08:
a3:18:ab:91:fd:7c:53:5f:5d:56:6b:82:89:1c:38:4f:a8:a5:
ea:2d:56:0a:eb:2a:4e:41:7f:a1:cd:20:87:18:fe:dc:78:89:
9b:06:06:ad:74:fd:d7:24:99:37:e9:d3:7c:8c:0d:a8:e2:2d:
25:d2:94:59:bb:29:8e:0b:70:be:d9:27:1c:09:0f:d3:41:99:
2c:80:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org