Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/8HJj9_ZSJhrJGWuRexrhG9zOoIY.roa
File: 8HJj9_ZSJhrJGWuRexrhG9zOoIY.roa (raw, json)
Hash identifier: 2liZel8YEy06oeBgkkfMd8/Z7hEqFbKLtHmN6mksyig=
Subject key identifier: F0:72:63:F7:F6:52:26:1A:C9:19:6B:91:7B:1A:E1:1B:DC:CE:A0:86
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 01856C25C125B2F98226584046AE43CE7DBE
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/8HJj9_ZSJhrJGWuRexrhG9zOoIY.roa
Signing time: Sun 01 Jan 2023 07:04:51 +0000
ROA not before: Sun 01 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29663
IP address blocks: 193.201.116.0/24 maxlen: 24
2001:67c:5e8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:c1:25:b2:f9:82:26:58:40:46:ae:43:ce:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Jan 1 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f07263f7f652261ac9196b917b1ae11bdccea086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:5e:40:89:0e:34:24:1f:e9:d0:73:cc:c7:
b8:74:c9:1d:6b:17:b8:7a:15:8a:27:98:52:a3:9a:
02:80:30:c6:4b:8b:38:64:10:1a:ac:d2:4f:b1:b1:
f1:67:75:b9:0c:79:a9:8f:9c:44:26:6b:57:48:7c:
7a:ac:eb:fc:a5:4a:09:b8:f1:02:ef:8d:99:2e:95:
50:f5:b5:b9:e2:96:3c:4d:82:cf:54:f6:8a:74:a4:
8d:64:4d:ff:41:f2:bb:22:16:10:7b:db:bd:ff:e0:
7c:71:26:f7:d2:e0:11:cb:62:0b:12:c0:bf:96:cc:
05:0d:e7:49:80:99:28:8f:53:48:b5:e1:af:5b:ae:
31:2a:72:47:ea:43:e4:8a:9b:2b:5c:d3:1e:6d:44:
e2:97:eb:ba:28:7e:45:3f:7d:8f:5b:74:30:83:63:
8b:0e:77:de:20:c2:da:b3:25:19:f7:37:4a:4b:23:
03:69:e6:3d:4b:e1:39:24:56:60:8f:b4:ab:48:29:
59:46:db:15:2b:86:d0:dc:4a:f3:d6:37:41:e4:5d:
14:3c:ac:f2:09:f0:21:e2:e2:31:b4:65:be:0c:e8:
64:93:51:df:7a:e3:59:09:53:ca:b3:96:bb:f5:a0:
c7:17:df:29:0f:a9:e6:98:0d:23:ac:2e:9a:60:6a:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:72:63:F7:F6:52:26:1A:C9:19:6B:91:7B:1A:E1:1B:DC:CE:A0:86
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/8HJj9_ZSJhrJGWuRexrhG9zOoIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.116.0/24
IPv6:
2001:67c:5e8::/48
Signature Algorithm: sha256WithRSAEncryption
9a:3f:95:03:96:15:c6:9e:3b:9d:1f:cd:3f:4f:20:4c:27:9a:
32:dd:6e:b2:9c:99:50:e6:4b:41:c1:26:44:3b:dc:4e:43:47:
5d:22:8a:60:e4:3b:26:51:59:63:e5:d7:d8:e3:43:d8:de:f5:
38:ca:a8:ba:ce:f0:6f:79:b9:46:a0:1f:8e:79:c8:81:7e:29:
88:12:db:3e:b4:e1:99:6c:72:24:c5:df:56:05:72:0a:74:76:
fb:38:c8:84:82:a0:1b:1b:5d:79:a8:b7:4c:cf:8e:d3:30:81:
49:90:8c:cf:1d:7a:4d:5a:38:b9:33:35:2c:a0:c6:42:e7:be:
15:6d:79:d6:0d:d5:96:4e:0a:08:9f:ea:56:08:e7:70:6e:3d:
fd:da:c0:81:23:8e:ac:72:48:83:28:8f:ff:d7:d3:94:bb:b9:
4b:2e:d9:0e:fc:7e:52:cb:55:97:8f:51:b9:65:29:04:00:8d:
81:ca:69:22:7e:60:3f:bd:e6:b6:c4:cd:40:14:29:10:e9:c1:
4a:6b:a3:00:26:29:80:45:e4:b6:71:5f:46:d9:4a:17:d9:7c:
75:17:e1:d0:f9:5b:7a:34:e3:66:86:3b:ef:12:5b:c0:9f:be:
54:94:04:5e:b0:cc:cb:84:9c:6e:37:c0:7a:db:5c:56:00:bd:
a9:4b:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:45 2024 by rpki-client on console-ams.rpki-client.org