Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa
File: 8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa (raw, json)
Hash identifier: FR5h0jDHWcMoWX45N9FLgXzv7TyMd5jsQGJEo0fVpEE=
Subject key identifier: F3:EC:B5:35:15:BA:11:12:67:35:B7:28:24:1C:D2:CF:99:05:07:39
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 018570797ADF0307EB5E7F24566E21ED6F5C
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa
Signing time: Mon 02 Jan 2023 03:14:47 +0000
ROA not before: Mon 02 Jan 2023 03:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41584
IP address blocks: 193.164.80.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:7a:df:03:07:eb:5e:7f:24:56:6e:21:ed:6f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Jan 2 03:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3ecb53515ba11126735b728241cd2cf99050739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:8b:15:78:cf:91:e5:98:69:c6:f4:3a:ab:
ed:80:ee:cd:25:43:3b:7d:a4:46:48:e5:09:3f:c2:
3b:75:c7:b6:71:db:01:bd:d9:cc:c9:7c:d6:68:b6:
1b:8e:7e:82:83:8c:14:4d:3a:2f:b2:e8:22:ea:69:
70:4f:26:71:65:c0:10:6e:68:20:1e:eb:0e:dd:07:
16:d2:ed:c8:02:42:72:e0:fd:6b:e9:8e:fb:ce:7f:
c6:59:7b:8d:df:2b:86:df:c3:38:a8:ca:02:50:4c:
5b:ca:58:fd:7d:46:2a:e7:e7:1b:fc:a2:4a:7d:f1:
a6:87:ca:3f:8b:32:fe:86:d6:ef:26:4d:68:cf:0d:
5c:2f:55:77:a1:f7:b2:94:10:0e:70:4f:17:c7:d7:
db:9c:6a:ef:ac:1f:64:67:01:e4:5e:3f:40:c4:53:
63:fe:d4:13:b0:0b:76:5a:d2:a0:7c:10:6d:f9:a7:
e3:81:4f:b2:20:ac:1f:24:7b:4a:d5:ff:9e:39:ed:
61:94:1f:aa:66:fa:c8:0d:f7:c8:e4:7f:85:e1:05:
9a:f9:bd:97:22:24:a1:3d:cb:8f:fd:18:7f:f0:a7:
85:eb:ce:57:a4:bc:cd:7c:5e:0c:d3:2a:d1:f3:4e:
a5:ba:d7:bb:ac:ac:95:9f:11:0e:a5:c4:f6:66:77:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:B5:35:15:BA:11:12:67:35:B7:28:24:1C:D2:CF:99:05:07:39
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.80.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:93:8c:53:be:2b:c7:78:a3:cc:9a:7e:b2:17:a8:78:5d:0b:
2f:82:97:b3:66:cd:35:29:d1:2a:7f:1d:b0:21:d8:a3:e5:c5:
21:ab:64:0f:b5:e6:15:52:fb:b7:d8:60:8c:32:a9:bf:c3:6b:
c5:27:cd:0b:78:41:68:c1:57:7f:8b:c9:4b:16:70:8e:56:fa:
f7:cc:cc:2f:53:bb:bd:05:49:df:f7:1b:0e:1a:2e:81:6d:3d:
76:44:99:11:73:a7:39:e5:75:1c:51:d6:94:e7:84:72:38:3d:
32:c4:b4:72:72:ad:14:98:63:23:e9:af:92:2f:ba:e4:88:33:
84:a7:d2:17:6f:a2:2d:f7:91:ee:28:97:83:ab:ed:35:cb:30:
25:46:29:21:49:b2:60:8b:36:23:ab:60:2f:0f:71:0a:98:62:
1a:8f:8a:86:8b:7a:55:7f:92:2a:4b:92:0b:29:0b:13:32:f6:
2d:27:d1:cf:9b:4a:ef:3b:ed:06:a0:9c:ae:33:35:55:78:e8:
68:58:3c:c3:74:a0:b1:09:9e:cf:25:98:60:fd:70:e5:3b:ad:
47:79:e2:2a:72:5d:e1:07:a2:62:ec:62:81:46:80:60:23:a2:
68:1c:88:2c:0f:81:ce:9a:00:eb:5b:57:a3:da:1b:68:65:65:
2e:0e:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:45 2024 by rpki-client on console-ams.rpki-client.org