Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/8kWN1vzRZ9ugOYapwJf3POUVF2Q.roa
File: 8kWN1vzRZ9ugOYapwJf3POUVF2Q.roa (raw, json)
Hash identifier: fYvgQbcyQzMDJ4BqsN/Fe24JNnAGpj9+5J1Op17lax4=
Subject key identifier: F2:45:8D:D6:FC:D1:67:DB:A0:39:86:A9:C0:97:F7:3C:E5:15:17:64
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 01856CE635787D2D7A1BA2F9D264A52124FA
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/8kWN1vzRZ9ugOYapwJf3POUVF2Q.roa
Signing time: Sun 01 Jan 2023 10:35:04 +0000
ROA not before: Sun 01 Jan 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.33.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:35:78:7d:2d:7a:1b:a2:f9:d2:64:a5:21:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jan 1 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2458dd6fcd167dba03986a9c097f73ce5151764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:e9:19:49:52:1e:da:9d:dc:c7:df:97:c9:
5d:98:31:00:26:d3:3a:90:33:f6:e6:67:b9:45:14:
b5:3d:7a:d1:19:89:55:31:d9:0c:1a:e2:28:da:ca:
88:1f:4f:f4:24:e7:12:bc:e3:7a:97:3a:74:c7:1e:
75:ce:de:1b:69:3e:6d:13:96:a3:a9:b3:af:12:82:
4f:77:ff:f8:46:36:e3:e1:a7:cd:9b:c3:61:67:32:
f4:b2:cb:38:96:9b:23:a1:22:4d:c6:de:4c:76:09:
0b:0a:ec:1e:eb:54:80:ea:15:44:bb:7b:28:14:16:
0e:d8:23:22:f5:57:ee:0a:9f:3c:2a:d9:af:e9:5d:
1e:c4:80:c0:0a:97:cb:45:d7:fe:35:a6:58:f8:30:
f9:7b:06:a3:86:b0:2a:e0:5d:a5:31:56:b5:80:7a:
56:66:4a:51:8c:8e:21:0f:8b:35:f0:b0:36:a9:4b:
ae:55:bb:57:dd:3b:ad:56:af:6d:25:8a:66:26:7e:
8a:8c:0a:24:ea:87:5b:43:a4:9d:de:59:82:df:a5:
8f:92:85:f0:b0:7f:ba:0d:40:41:90:94:1c:84:26:
ba:50:ae:89:4a:d4:c7:9c:59:e9:a7:86:5a:6d:cf:
8f:c2:12:8f:eb:3b:47:14:50:61:98:78:45:0c:d9:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:45:8D:D6:FC:D1:67:DB:A0:39:86:A9:C0:97:F7:3C:E5:15:17:64
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/8kWN1vzRZ9ugOYapwJf3POUVF2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:bb:b8:c6:b5:45:a4:9e:8e:2f:40:19:04:7d:08:06:aa:e1:
f1:eb:ac:e7:7c:32:6f:11:25:bd:c8:bc:62:3b:07:28:2f:23:
be:cf:f2:10:76:44:f7:1f:ce:48:94:05:d5:2d:ad:82:60:6a:
0b:53:0d:04:37:32:19:58:92:2f:b9:98:8d:c2:ce:a3:06:86:
74:38:cb:ee:6e:e9:32:c9:5f:10:93:52:89:44:1a:ad:92:22:
f7:fb:b7:39:a1:8b:e2:c9:89:bc:89:0b:d7:5b:25:ea:00:e8:
6d:88:d8:49:8f:58:42:61:3f:55:7b:a3:18:d6:28:f2:6e:bd:
84:08:05:af:b9:11:d0:24:fd:cb:4d:18:ed:c4:36:e0:01:a6:
59:40:2b:3c:7b:43:ce:87:bb:f5:4a:ef:78:22:d8:54:d6:0d:
74:31:ff:0e:6d:fc:46:10:11:a3:0f:2f:fc:31:74:28:df:a8:
57:d0:cb:11:fd:e6:99:3b:68:e7:1a:3c:e8:00:3b:03:4e:ea:
ee:3c:66:56:4c:eb:37:11:fc:a6:e9:23:f5:c0:54:45:ec:0f:
04:30:9f:7d:7e:56:b5:cc:14:ab:c7:8c:9e:a5:19:70:57:d8:
2a:ad:7a:a5:02:9c:0b:fa:a5:f9:b4:7c:51:95:e3:a8:c1:10:
94:01:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:35 2024 by rpki-client on console-fra.rpki-client.org