Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/8tq4esxzfNVRLSOHMKFdwBeYbtE.roa
File: 8tq4esxzfNVRLSOHMKFdwBeYbtE.roa (raw, json)
Hash identifier: s8RRjtuaSMbyFhXlzEnM6C5XKS7+Dx6r0wOSfM57Ua0=
Subject key identifier: F2:DA:B8:7A:CC:73:7C:D5:51:2D:23:87:30:A1:5D:C0:17:98:6E:D1
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 018573684A9D01E989407EE9B36EF3D8255A
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/8tq4esxzfNVRLSOHMKFdwBeYbtE.roa
Signing time: Mon 02 Jan 2023 16:54:52 +0000
ROA not before: Mon 02 Jan 2023 16:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28883
IP address blocks: 195.237.80.0/24 maxlen: 24
194.240.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:4a:9d:01:e9:89:40:7e:e9:b3:6e:f3:d8:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 2 16:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2dab87acc737cd5512d238730a15dc017986ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:11:0c:58:a8:02:f2:2b:ae:77:4a:3d:1d:
b2:fb:6e:06:98:95:03:ce:b1:a4:0b:66:29:69:2f:
2c:2a:02:ec:3b:17:2c:ae:e7:ef:8c:f4:dc:5b:8b:
e9:2c:28:87:09:58:74:94:58:a0:64:71:85:f6:8a:
9b:e4:1b:90:b1:a4:5e:72:b1:d6:1f:ef:34:03:52:
0a:34:6e:03:1f:9d:74:3e:b0:b7:62:10:33:5f:ac:
f8:28:61:b6:8f:70:87:12:b7:2a:9b:76:a3:59:e0:
1b:fe:70:89:be:45:76:0c:eb:c0:5e:b4:db:c1:f1:
32:9f:d7:bc:35:76:16:73:db:1f:5b:c8:62:94:1f:
42:dc:7d:c0:1e:cc:85:f5:66:36:90:9e:69:11:5a:
8f:06:06:1d:26:2a:ca:f2:4e:a5:46:3d:04:ae:09:
cb:aa:14:92:95:75:1a:c8:eb:43:bf:c6:e9:37:dc:
10:ce:d0:e9:d1:be:d7:dd:87:90:4b:6c:2d:24:c8:
33:ea:c6:bd:a6:b9:94:21:30:92:a2:28:25:b0:2f:
99:3c:53:3d:ec:cb:f3:2c:ca:2d:44:d0:73:3e:5a:
cf:44:b5:20:ab:39:ba:89:b2:d7:a0:8b:27:a1:90:
dd:71:7e:b0:8d:a0:c9:8f:28:3c:4d:67:fe:6e:e2:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:B8:7A:CC:73:7C:D5:51:2D:23:87:30:A1:5D:C0:17:98:6E:D1
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/8tq4esxzfNVRLSOHMKFdwBeYbtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.240.69.0/24
195.237.80.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a6:44:39:43:db:16:c3:e4:99:ea:48:fd:96:91:17:cf:a2:
b0:a8:54:3f:40:28:72:9f:ea:5d:2e:1c:f7:cb:2b:3f:24:00:
9f:a7:e1:1b:0b:75:54:fa:d5:91:48:b8:ba:be:d3:f7:06:5f:
96:39:70:01:56:98:a5:ff:ac:ea:7c:de:72:0b:86:4d:ba:e0:
7c:37:b9:70:f1:d4:c7:da:b8:03:c8:6e:a1:6a:d8:82:42:5a:
49:cb:2e:04:7a:61:b8:2a:3e:b1:54:0c:28:05:35:9b:f6:8d:
9b:46:c5:36:d6:62:f1:02:56:5f:44:f9:42:63:5e:97:7d:eb:
eb:48:d2:af:9c:65:c4:ff:df:13:37:24:12:89:fd:d9:d5:62:
ee:f1:6b:d0:7d:bf:67:da:90:cb:6a:ab:d0:8e:0c:f5:10:2c:
39:9e:2e:e8:0b:6c:b9:44:d6:b9:01:8a:1d:0b:99:91:5d:f0:
b8:65:96:1c:f6:6a:f9:b7:52:e6:1b:ac:6a:bf:4c:77:25:45:
f5:a2:55:83:4b:8e:2f:21:c4:46:c4:a1:bd:7a:21:29:8f:3a:
13:d7:53:d1:f7:b7:0a:32:a1:e0:4a:c1:b3:66:7d:12:ef:4a:
4a:06:d6:6d:0c:be:df:8a:a1:f5:29:03:86:0f:d0:c0:76:0b:
cc:5a:35:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org