Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i28eutyvON8XS_i4vRaaIRi7lzo.roa
File: i28eutyvON8XS_i4vRaaIRi7lzo.roa (raw, json)
Hash identifier: dHLmP9qMQgRHlODWZiyiXnxuGG+41TySrnU/M5cHiKE=
Subject key identifier: 8B:6F:1E:BA:DC:AF:38:DF:17:4B:F8:B8:BD:16:9A:21:18:BB:97:3A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018A93F76ECA0F9EDCA5EA3F384A25DFF98F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i28eutyvON8XS_i4vRaaIRi7lzo.roa
Signing time: Thu 14 Sep 2023 13:53:01 +0000
ROA not before: Thu 14 Sep 2023 13:53:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206068
IP address blocks: 86.104.192.0/24 maxlen: 24
86.104.195.0/24 maxlen: 24
86.104.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:f7:6e:ca:0f:9e:dc:a5:ea:3f:38:4a:25:df:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 14 13:53:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b6f1ebadcaf38df174bf8b8bd169a2118bb973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2d:8c:23:ae:a8:22:66:ed:26:fd:bd:19:e4:
32:65:9b:31:49:ac:28:ba:40:1b:3c:ef:6e:57:f1:
d3:6c:0f:15:3d:9e:ee:a1:92:88:7a:05:e3:f4:1c:
5b:65:02:49:94:3a:33:80:cd:a4:4b:e4:fe:50:26:
80:f7:30:fa:8d:d0:65:ba:8e:b3:16:cf:6e:c5:d2:
be:aa:f5:56:36:6c:1a:cb:f9:cc:5f:88:13:f7:fe:
2c:9e:1b:9a:b2:f9:96:ef:89:d8:05:0a:8e:01:c9:
3b:f2:96:11:7b:d5:d1:8c:1a:ce:72:d3:e1:f6:b6:
9b:1d:2e:07:0f:1b:36:c5:7f:9f:02:55:be:fd:ad:
03:49:e5:c2:9f:5b:fa:f4:1f:fc:f9:91:ca:3a:56:
81:79:c2:13:45:62:d6:97:47:5b:bf:5f:00:4c:cf:
32:5d:42:3f:a7:8a:30:31:cc:0e:ed:89:df:9b:cc:
06:09:98:9b:fc:81:2d:67:61:d9:fc:f0:0c:4d:a9:
ef:c1:6b:58:7e:3b:71:db:df:83:86:a0:d9:fe:e0:
26:75:94:df:1e:00:34:b9:ce:b9:80:8a:8b:38:a0:
62:4d:99:db:56:46:04:09:3c:1e:13:8f:26:e6:b0:
38:b4:27:29:84:f9:62:13:19:0b:3a:99:bb:e3:e3:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6F:1E:BA:DC:AF:38:DF:17:4B:F8:B8:BD:16:9A:21:18:BB:97:3A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i28eutyvON8XS_i4vRaaIRi7lzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.19.0/24
86.104.192.0/24
86.104.195.0/24
Signature Algorithm: sha256WithRSAEncryption
27:37:99:50:e9:c5:2b:2f:4a:07:59:4c:e9:4d:7c:2a:e1:82:
3c:56:9b:be:ad:c9:24:89:43:c3:2f:b5:42:f9:18:51:fe:db:
99:39:9e:20:ee:04:ea:2b:1e:2b:ed:43:2d:80:46:af:c8:3a:
96:12:e5:85:ad:e3:1c:bd:9b:49:e6:ac:5f:c5:4b:81:85:b1:
a4:55:ac:e1:77:4f:f6:27:76:98:26:d1:06:a5:53:e5:b6:50:
c8:0a:39:ae:f8:90:0e:bb:15:7d:d0:9a:90:a1:de:45:40:c9:
53:09:c6:07:f0:b4:e1:f4:7e:ef:f9:42:07:be:8e:80:31:7c:
1a:7a:57:c0:af:d4:30:7d:c3:8d:5c:fa:4d:16:9f:65:3b:a8:
4c:3f:1f:c4:27:2b:a3:9a:a6:11:dd:e4:55:70:d7:8e:bd:95:
15:ce:ce:83:21:7e:b4:09:7b:81:2e:39:93:80:d3:46:3d:e6:
b1:85:81:11:5c:a8:e3:e2:78:01:ed:90:fb:d0:57:1f:bc:48:
12:76:fe:c6:2a:ef:7d:42:16:d8:47:0c:77:d1:ba:c3:b3:29:
f2:f7:bd:e2:be:ea:70:53:9e:6a:54:39:64:29:08:ec:80:c6:
57:0f:d0:a1:2d:d5:70:ae:b9:60:6b:8f:0a:e9:12:7f:a5:ac:
37:69:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 16:39:46 2023 by rpki-client on console-fra.rpki-client.org