Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/8po9NKFGZz53lLS7Dxd1FjCZ_PA.roa
File: 8po9NKFGZz53lLS7Dxd1FjCZ_PA.roa (raw, json)
Hash identifier: TWoQHFLTSTTXJyAs7F7Ia9y9T3wENme6K1upVQUmN4E=
Subject key identifier: F2:9A:3D:34:A1:46:67:3E:77:94:B4:BB:0F:17:75:16:30:99:FC:F0
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 018B37F43B8BB3B552F53B664F7C62985F95
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/8po9NKFGZz53lLS7Dxd1FjCZ_PA.roa
Signing time: Mon 16 Oct 2023 10:07:14 +0000
ROA not before: Mon 16 Oct 2023 10:07:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60565
IP address blocks: 185.28.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:f4:3b:8b:b3:b5:52:f5:3b:66:4f:7c:62:98:5f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Oct 16 10:07:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f29a3d34a146673e7794b4bb0f1775163099fcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:b3:0e:b2:a6:a3:66:ec:a5:d7:a0:b3:51:
9c:e9:6e:48:49:72:92:78:f7:b2:0e:59:b5:cf:53:
c8:60:33:4b:e7:e3:c5:da:af:22:d1:72:f3:4e:7f:
d1:7f:85:f7:af:b9:6b:91:aa:8b:a0:7f:4a:97:de:
22:74:10:e9:61:72:e1:c3:35:2e:c0:47:0e:a3:a6:
5e:39:33:7e:50:83:d1:f2:c8:cc:9c:15:85:2b:e3:
e5:72:7e:4b:89:3a:98:3c:8d:a2:25:b7:6a:44:fd:
8f:38:08:0a:ae:d7:e5:ac:19:a0:9e:a9:61:7c:bc:
9e:8b:b3:29:5d:2d:52:43:cf:70:5e:35:27:46:97:
58:8e:0c:88:98:87:44:ac:21:f6:4c:51:35:26:0d:
d1:f1:bc:80:3e:c4:d8:72:9e:46:a7:1a:d6:c4:6d:
56:7e:f6:bb:08:66:df:fa:ba:da:0e:4d:d6:4e:9c:
c5:f1:16:24:19:a3:4a:c5:a9:e2:81:1d:0e:8a:77:
ff:a6:48:76:ea:dc:15:06:98:5a:3d:f1:b1:46:47:
14:89:ec:c5:5f:06:7c:9b:e0:f5:8a:65:f0:5e:ec:
7b:e2:01:d2:53:a3:c9:b8:2c:0b:2a:ab:eb:b5:34:
64:d8:0c:23:0a:ff:75:30:47:dc:65:ec:90:27:08:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:3D:34:A1:46:67:3E:77:94:B4:BB:0F:17:75:16:30:99:FC:F0
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/8po9NKFGZz53lLS7Dxd1FjCZ_PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9c:d6:ea:a8:cc:39:3a:36:61:fb:14:24:12:99:7f:7d:12:
da:e6:71:11:30:d7:db:c9:f7:3f:49:22:8c:0a:be:c5:0e:82:
f9:bf:15:63:9a:80:8e:9a:1d:1e:1d:26:26:25:50:8a:9c:de:
f7:d3:8c:67:5b:d9:2c:6a:d9:a0:b5:8c:ce:1a:e5:9e:66:2f:
80:d2:6a:00:42:5b:74:6b:32:27:64:d5:46:71:f7:ab:3d:77:
1c:56:d4:d0:e6:f5:25:d4:8d:ce:6b:2d:8e:15:02:25:00:dc:
a4:e9:86:3d:0c:36:8e:95:f5:60:28:9b:08:de:c9:de:7b:97:
93:c0:66:e3:7f:5f:b6:22:7d:7c:7b:e8:65:1a:0f:01:c1:8c:
fe:73:bd:df:4f:6e:ca:4b:d6:f2:d1:14:a9:b9:27:59:d2:79:
0f:02:4d:5e:c5:e4:a4:65:1e:02:5e:8e:df:95:0d:e2:0c:2d:
e4:4d:b9:5e:bc:c3:f5:9b:6c:88:04:1b:d2:79:2a:18:63:8e:
80:c3:d1:44:75:01:00:b0:24:9e:3b:e6:fe:52:c7:d9:6c:52:
f6:07:8a:40:89:fb:eb:c4:e9:4e:4d:00:5e:40:56:23:9e:b4:
88:65:73:27:32:2b:72:ca:03:53:2b:e8:aa:2e:43:77:4c:14:
7c:99:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:01 2024 by rpki-client on console-fra.rpki-client.org