Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8eLMGvH3_DDxax0GUnY4jX3ehXo.roa
File: 8eLMGvH3_DDxax0GUnY4jX3ehXo.roa (raw, json)
Hash identifier: vW0+/6g5OMp/GBeTI8POQmsR2/e6wWBV/hIfLNkvrMQ=
Subject key identifier: F1:E2:CC:1A:F1:F7:FC:30:F1:6B:1D:06:52:76:38:8D:7D:DE:85:7A
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 01856B810341B23DD7E8BA66EE34CFE319CF
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8eLMGvH3_DDxax0GUnY4jX3ehXo.roa
Signing time: Sun 01 Jan 2023 04:04:55 +0000
ROA not before: Sun 01 Jan 2023 04:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59645
IP address blocks: 193.104.168.0/24 maxlen: 24
195.191.196.0/23 maxlen: 24
2a06:d1c0:dead::/48 maxlen: 48
2a06:d1c0:deae::/48 maxlen: 48
2a06:d1c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:03:41:b2:3d:d7:e8:ba:66:ee:34:cf:e3:19:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jan 1 04:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1e2cc1af1f7fc30f16b1d065276388d7dde857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:ac:ab:3b:11:eb:f2:26:f4:d4:95:bb:06:
93:73:7d:1c:3f:4f:34:96:67:d6:db:81:e4:ab:09:
6d:3c:35:8e:ce:f5:70:4c:15:c9:b9:2d:55:fd:2f:
3a:2b:fa:c2:21:9e:7f:07:dd:04:3e:a8:d5:67:66:
5b:d0:b4:4e:27:dd:c8:be:22:ff:7e:58:c8:b0:d2:
46:79:1a:7a:b2:b6:45:28:af:4a:20:33:8d:9c:ce:
34:da:2b:e9:58:a4:7d:fc:0b:7d:90:ba:82:84:85:
87:76:ce:df:af:76:c7:f9:98:4b:69:9a:cb:21:5a:
39:fc:2a:6c:3a:fc:a2:f2:29:d7:d8:f8:47:77:ba:
96:de:10:80:5b:4f:e8:53:47:cc:82:94:c3:cb:ff:
85:fd:0f:66:06:90:8c:87:36:9a:4a:da:8e:84:e5:
43:c8:17:91:fb:c2:a8:28:b9:85:ca:1c:af:6e:de:
54:99:bb:93:06:b1:13:6e:19:d6:b3:24:40:63:cb:
aa:58:90:7e:dd:73:e6:bb:8f:27:83:ff:28:11:31:
0c:0b:76:2f:64:89:1f:f1:f8:34:f9:9a:57:e6:5c:
cd:dc:2d:56:10:32:d5:57:7a:ed:68:7b:ef:4a:39:
f0:a8:44:0a:3e:20:06:9b:71:bc:85:38:82:99:3c:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:CC:1A:F1:F7:FC:30:F1:6B:1D:06:52:76:38:8D:7D:DE:85:7A
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8eLMGvH3_DDxax0GUnY4jX3ehXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.168.0/24
195.191.196.0/23
IPv6:
2a06:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
33:ce:24:47:14:6d:5c:b0:b1:c8:97:72:10:8b:3d:40:62:99:
b8:bc:02:fb:b3:ad:47:d5:b2:0b:79:46:a5:53:44:f2:36:9b:
66:8b:ee:33:ab:6b:db:3a:a2:5c:89:6e:e7:35:11:23:f2:f2:
2a:f5:fc:1e:12:15:f1:ae:29:5d:a9:44:51:e6:0d:1c:79:40:
86:0a:57:0d:09:a1:f9:a8:48:ac:49:ea:e3:8d:26:d1:05:d0:
5c:a9:a1:af:ed:98:97:08:9d:be:63:d5:a9:44:25:78:95:13:
d1:c3:a2:24:a4:de:e0:21:b9:b0:f3:9b:63:20:8d:ff:01:1f:
b2:76:b1:d9:6d:11:66:7e:0b:f5:9e:c2:e1:c9:99:01:25:62:
39:15:74:e6:62:97:b3:c6:6e:67:4e:31:9e:65:49:af:df:8d:
b0:ea:b5:45:cb:49:c2:38:a6:b0:f7:0c:38:f1:d5:5c:bf:2c:
ac:e0:6a:90:54:0f:ff:29:8d:ef:5d:00:93:81:36:73:9f:d1:
1e:cc:1e:85:74:2f:51:58:5b:44:56:60:11:ff:4d:e8:98:b4:
2f:ac:f9:da:16:a3:36:97:52:7b:ee:44:f1:87:43:19:1f:e1:
b4:d7:c3:10:25:ac:73:0c:5f:48:bb:b3:db:ca:79:f6:07:74:
ae:2b:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:23 2023 by rpki-client on console-ams.rpki-client.org