Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/8KhFvYRQquaprB9t50rF65zyPhU.roa
File: 8KhFvYRQquaprB9t50rF65zyPhU.roa (raw, json)
Hash identifier: alAIyxpQzZS8I2+7Qgi2vAXG12XRKvCoZYBhbkF47oc=
Subject key identifier: F0:A8:45:BD:84:50:AA:E6:A9:AC:1F:6D:E7:4A:C5:EB:9C:F2:3E:15
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 018570427E8DDCFAD12AA14DD6EB76580AFB
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/8KhFvYRQquaprB9t50rF65zyPhU.roa
Signing time: Mon 02 Jan 2023 02:14:44 +0000
ROA not before: Mon 02 Jan 2023 02:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 159.242.232.0/23 maxlen: 23
159.242.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:7e:8d:dc:fa:d1:2a:a1:4d:d6:eb:76:58:0a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 2 02:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0a845bd8450aae6a9ac1f6de74ac5eb9cf23e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:4c:fd:7c:ef:5d:98:75:3e:08:06:3e:c6:
95:48:b0:bb:27:5b:47:8d:05:1d:a1:19:38:72:2e:
84:a0:df:80:f4:ff:8a:81:d2:7c:29:47:d8:e7:f6:
61:d7:05:84:42:78:a3:db:b6:a1:28:b1:a9:cf:e6:
29:dd:ec:2d:bd:af:65:6d:69:98:dc:7b:1d:5d:73:
70:9f:82:27:1c:7e:1d:bc:03:54:37:5c:d8:b1:ca:
8e:1f:fd:1b:c7:0f:95:62:96:b1:ba:2a:37:f0:be:
b7:00:44:d4:72:2e:38:fe:e0:18:ec:f1:eb:c6:cc:
94:60:05:a1:b2:8b:40:05:d1:63:5a:35:d7:4e:15:
03:26:d4:19:76:1a:b2:aa:c4:16:b9:11:14:71:be:
98:cb:76:ee:94:09:1a:e7:e8:25:d9:2b:08:0c:06:
f6:8c:5a:7d:4a:dc:f9:bd:47:48:bc:5c:d5:46:85:
54:8f:9f:bf:7d:cf:e9:1e:a0:97:17:51:9f:b9:4e:
07:e5:de:59:85:60:32:02:c4:29:5b:76:82:ab:48:
e0:34:0d:02:4f:36:01:c4:17:e3:96:34:70:4e:23:
24:9f:8b:d1:f7:14:a9:ea:7b:d8:0d:37:3b:ce:bd:
eb:13:43:d6:d4:c5:42:26:25:c9:ce:31:f1:45:8e:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:45:BD:84:50:AA:E6:A9:AC:1F:6D:E7:4A:C5:EB:9C:F2:3E:15
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/8KhFvYRQquaprB9t50rF65zyPhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.242.228.0/24
159.242.232.0/23
Signature Algorithm: sha256WithRSAEncryption
52:83:da:da:1a:ed:42:e9:cc:ef:f7:12:ed:98:f2:af:2c:15:
e3:55:21:cc:46:33:cb:e1:a8:26:2c:7c:d7:6d:ef:18:92:d1:
8b:fb:f9:f3:cf:af:7b:3d:16:77:fa:11:bf:c1:ea:3d:70:74:
19:db:f1:85:cb:37:1e:9a:df:b5:dc:d9:e1:67:b3:79:8e:47:
62:92:60:36:2d:32:e3:48:a0:95:f1:7d:d6:77:f4:cc:46:6f:
7e:ff:45:f1:54:1c:1b:21:fd:a6:8d:96:76:4a:4d:67:15:db:
3b:a8:a1:58:81:9a:2f:04:e6:f5:80:c5:b7:f5:e5:76:26:d8:
8f:75:0e:e0:5b:0b:cc:19:2b:3c:72:5c:64:86:b3:d4:a7:79:
e2:84:3e:5f:7b:02:66:a1:51:e2:a0:73:45:78:2b:c4:63:51:
5a:1d:ed:9e:24:43:c7:1f:18:59:9f:c9:5b:ff:49:fd:6c:b5:
ff:3e:b3:a6:22:41:d2:6f:d6:65:8b:4d:7c:2d:c7:f3:f9:07:
0e:70:cf:03:30:49:3d:e1:15:be:91:b4:39:96:01:ea:bd:9a:
1e:5f:d5:7d:df:0c:a0:e6:37:de:7e:3c:50:b6:87:c7:66:13:
3f:a8:d4:2c:ef:0c:b2:8b:aa:21:39:1c:86:9a:1f:f2:93:f5:
3b:a0:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org