Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/i8vhfhbxssAQ2YAwaJUNAOfMSpQ.roa
File: i8vhfhbxssAQ2YAwaJUNAOfMSpQ.roa (raw, json)
Hash identifier: WXo4M9GMaqveAxYY4hL9iliQwD+WWGLnS6sTQUivUQ4=
Subject key identifier: 8B:CB:E1:7E:16:F1:B2:C0:10:D9:80:30:68:95:0D:00:E7:CC:4A:94
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01856E1421EE8C5736C68430018F437E232A
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/i8vhfhbxssAQ2YAwaJUNAOfMSpQ.roa
Signing time: Sun 01 Jan 2023 16:04:51 +0000
ROA not before: Sun 01 Jan 2023 16:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 193.111.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:21:ee:8c:57:36:c6:84:30:01:8f:43:7e:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 16:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bcbe17e16f1b2c010d9803068950d00e7cc4a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:11:bd:05:da:32:a6:d5:4b:02:7e:d5:6d:
48:ce:70:64:d0:68:3f:f5:45:d5:9a:99:74:3c:f3:
40:d6:e2:2e:17:93:d5:9b:50:f5:b7:c2:0b:34:af:
0c:57:a9:c6:75:d1:73:23:f7:b4:81:2b:7f:8f:ec:
59:ff:52:b4:dc:45:8e:be:20:25:db:ee:03:bb:d5:
83:10:6b:00:a2:92:f1:6d:87:2f:31:08:33:65:08:
69:af:c0:d0:bb:f6:ca:eb:43:57:4c:25:7a:8c:f6:
fd:15:ae:da:82:85:4d:89:1f:63:fc:cb:41:10:89:
65:40:64:c7:c3:d6:4d:99:a1:ec:25:b3:5b:38:13:
f1:98:a6:12:99:76:4e:54:0e:d3:97:58:96:d0:47:
f7:9e:4f:dc:a4:cc:12:08:7d:bb:f8:35:e6:2b:2b:
b2:ed:95:ad:10:25:56:dc:67:18:0b:5d:a9:08:3d:
77:76:ea:fe:f6:95:aa:ce:91:40:18:98:5f:7a:84:
23:98:10:28:95:93:34:60:96:97:25:37:b9:60:f7:
ea:18:7c:68:5d:d3:ba:df:55:5c:79:92:01:72:49:
0b:c8:c7:10:58:f9:5f:2e:e7:67:97:1a:9c:ed:53:
ee:08:9d:40:42:f7:6f:63:49:e5:17:6b:0e:11:07:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:E1:7E:16:F1:B2:C0:10:D9:80:30:68:95:0D:00:E7:CC:4A:94
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/i8vhfhbxssAQ2YAwaJUNAOfMSpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.77.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f8:19:2a:27:c7:08:3c:e3:a3:20:2b:2b:58:b9:de:cf:6a:
cb:13:ca:62:71:1a:20:61:f0:8e:67:89:f4:6d:ff:1a:9a:68:
11:33:e4:f7:ce:62:59:a4:b9:5e:b4:e8:c2:7c:86:f1:55:1e:
b3:79:87:a6:6a:b0:17:a9:98:b4:33:a2:f5:47:9f:db:88:94:
20:3e:b5:1d:49:ea:88:62:38:95:e5:19:24:93:6f:60:53:5b:
f0:8a:f1:32:e9:20:6f:64:55:06:78:0b:ea:9b:2d:04:4b:f9:
53:a9:ad:82:27:16:aa:4d:59:46:57:fc:a7:58:fe:9c:38:47:
0b:9c:03:38:51:42:f2:49:aa:89:50:1e:37:c8:bc:3f:62:87:
9d:a0:7f:34:b2:36:65:8c:ba:a4:7a:a7:ec:41:14:00:56:3e:
8c:ea:27:da:2d:d0:f3:1f:4e:a4:57:bd:84:d3:8f:73:bc:45:
5a:9b:43:fc:4c:e2:f9:83:b9:80:f0:94:b2:c5:c4:62:67:87:
e4:86:29:68:2b:ee:fc:56:1d:a9:f1:80:b1:1e:a4:e3:59:7b:
58:f9:1f:e9:38:aa:75:e3:c4:68:3e:e5:12:65:2e:7a:59:16:
73:dc:03:02:b4:c9:a5:e2:39:00:e9:7d:a8:51:bd:d2:ff:68:
0b:d9:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 19:18:44 2023 by rpki-client on console-ams.rpki-client.org