Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8Ks8Es2lLDDulOzJpiGygkHRZlM.roa
File: 8Ks8Es2lLDDulOzJpiGygkHRZlM.roa (raw, json)
Hash identifier: 8wJ8qk1qMz1Bw0RSNu1NpMw2005ww4unm18NgraZ67w=
Subject key identifier: F0:AB:3C:12:CD:A5:2C:30:EE:94:EC:C9:A6:21:B2:82:41:D1:66:53
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A8A6725BCE576E8F3800BC54817296C04
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8Ks8Es2lLDDulOzJpiGygkHRZlM.roa
Signing time: Tue 12 Sep 2023 17:18:50 +0000
ROA not before: Tue 12 Sep 2023 17:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 91.242.108.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:67:25:bc:e5:76:e8:f3:80:0b:c5:48:17:29:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 12 17:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ab3c12cda52c30ee94ecc9a621b28241d16653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:4f:64:54:d9:f4:87:4d:db:43:77:85:0d:
c7:61:84:97:29:94:7e:2c:77:f4:e9:d3:8b:14:ae:
9e:f9:1f:aa:ba:b7:95:6c:97:29:d5:b2:11:09:2a:
32:74:15:a2:cd:44:a4:6e:da:68:b3:43:63:d9:c9:
4f:f2:8a:07:1a:37:97:4f:fd:b1:2e:61:70:ea:ea:
f4:9c:2c:ff:2d:04:28:b5:50:9f:29:15:af:25:b0:
6f:b9:14:bc:0b:bf:ba:cd:33:a7:54:88:0f:42:44:
ea:b6:21:34:18:46:40:2a:2d:c3:c9:0c:5a:07:98:
70:43:fe:65:6a:34:46:95:4d:ab:aa:dd:e7:cd:44:
5d:2f:d3:d2:70:37:e9:d8:ce:6d:be:08:b3:04:a9:
31:a5:cf:97:e9:ef:24:7b:4e:26:7a:eb:38:0e:0a:
1f:3e:bd:4d:4f:4c:16:fb:c5:95:24:e2:f4:72:61:
d1:4a:93:75:ed:fe:e2:aa:7a:84:92:e8:2b:92:f9:
35:20:ef:77:a2:ea:cc:9d:b0:0b:ed:62:b1:f5:1f:
47:a7:33:d7:24:be:4a:0b:a7:ed:c8:68:6d:cc:eb:
57:64:fc:68:b1:ef:67:6b:a9:30:44:a3:3f:9c:f7:
bb:1d:ec:14:fb:6f:21:e2:84:f3:79:42:5d:e8:1b:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:3C:12:CD:A5:2C:30:EE:94:EC:C9:A6:21:B2:82:41:D1:66:53
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8Ks8Es2lLDDulOzJpiGygkHRZlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.108.0/22
Signature Algorithm: sha256WithRSAEncryption
44:2c:52:cf:10:28:a5:6d:39:37:22:ff:6c:b1:b3:82:16:a4:
38:90:ce:6e:e1:6e:82:6c:73:79:79:0c:3b:18:a5:b5:40:77:
67:dd:0c:0b:5e:e1:6e:3e:1a:6a:70:97:c4:a7:e2:6d:bb:f1:
1d:c1:82:31:20:d2:e5:88:1d:4d:68:ec:ab:b9:81:ef:61:14:
d4:a5:47:c1:d8:96:e8:e7:47:66:28:9f:3f:cc:ba:de:32:66:
b3:65:0c:eb:3d:2d:86:cd:3c:6a:c0:dc:fa:4d:b1:dd:17:f8:
4a:29:99:9e:56:8c:d8:ed:80:cd:14:0b:4f:c6:b8:62:ea:ae:
54:f4:0d:40:7b:54:ed:ad:2a:9a:6b:49:ad:e1:46:43:46:a4:
8c:ce:81:27:78:d9:89:9e:24:68:9f:4d:b6:d0:a5:b5:f7:0c:
74:a2:c2:6b:62:bb:3d:66:1a:38:4c:00:9e:d2:c7:69:cc:4d:
a1:f4:37:d4:34:0b:7c:f3:f6:2d:e4:1b:e7:89:a4:bd:b5:c9:
48:9b:5c:83:68:1e:ab:95:dc:22:f2:e2:40:b1:fb:2e:ae:2b:
fc:b9:5c:d4:cb:bd:5d:bd:48:f0:5b:2c:c8:c0:93:43:39:29:
b3:f6:9b:a4:09:8c:12:7c:1d:c9:17:19:ea:a5:b8:f7:6d:27:
0e:c1:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org