Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/bo_IlyMMA3yZcMriWlgklLlZkgg.roa
File: bo_IlyMMA3yZcMriWlgklLlZkgg.roa (raw, json)
Hash identifier: 9NKWxoZFCwnpgJP8iX4L6FDLb+O4mv1BTc+SCIj4vU0=
Subject key identifier: 6E:8F:C8:97:23:0C:03:7C:99:70:CA:E2:5A:58:24:94:B9:59:92:08
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 01856E01E62AE57D52AD06F4D1D61C7F5216
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/bo_IlyMMA3yZcMriWlgklLlZkgg.roa
Signing time: Sun 01 Jan 2023 15:44:56 +0000
ROA not before: Sun 01 Jan 2023 15:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39702
IP address blocks: 194.127.208.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:e6:2a:e5:7d:52:ad:06:f4:d1:d6:1c:7f:52:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Jan 1 15:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e8fc897230c037c9970cae25a582494b9599208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:c0:23:e5:c6:9e:b7:76:88:40:3f:41:74:
1b:fc:0f:2b:c1:1d:10:e7:69:41:b6:7f:01:27:62:
41:98:c5:7f:35:35:81:1f:83:6b:a5:e5:9e:8b:2a:
25:32:5d:a3:ae:d5:5a:d1:f9:c3:36:a1:b0:6f:15:
e2:e5:51:eb:8b:77:da:ae:13:30:f1:35:a2:94:91:
da:74:69:39:f5:49:e8:a2:67:96:cb:9a:08:6b:74:
3c:a4:a1:14:e6:6d:12:75:36:8d:45:66:2b:93:bd:
f2:c8:6e:3c:e5:09:92:f4:f9:3c:2a:7b:33:80:a2:
32:5e:05:3a:ab:56:d0:a7:b4:35:17:26:63:94:47:
be:1b:2c:a7:37:c4:56:62:db:ce:11:d3:ae:c6:2c:
74:82:e7:29:fe:f6:4b:6f:97:c7:6d:33:c2:d2:4d:
de:e9:f2:a1:fb:a9:83:21:a6:0e:55:33:67:c4:bf:
25:3e:d9:ea:01:e6:84:27:f3:c3:f0:35:5e:fa:22:
4e:95:ee:bb:ba:ce:ad:59:7a:ff:6b:c5:29:93:d4:
d8:4c:cc:3f:fd:31:6a:b6:02:70:7e:6d:25:c8:78:
ab:d1:57:ee:af:82:c0:92:6b:67:7e:c1:b4:d6:00:
37:82:d7:6c:c2:f2:04:49:53:14:9b:80:46:0a:31:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8F:C8:97:23:0C:03:7C:99:70:CA:E2:5A:58:24:94:B9:59:92:08
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/bo_IlyMMA3yZcMriWlgklLlZkgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.208.0/22
Signature Algorithm: sha256WithRSAEncryption
00:43:58:b7:02:63:4c:f7:87:8d:1c:5e:f5:6c:99:18:d0:ae:
6e:58:b8:ab:67:a1:94:31:f7:7c:b5:de:9e:91:23:2e:0e:e5:
f4:9a:42:be:6e:18:f2:cd:72:44:29:f1:91:8a:30:53:8d:4e:
d8:05:c2:74:e7:b9:a5:4b:12:5a:a7:84:e7:da:39:9e:cd:bd:
11:5f:61:a3:da:c9:a7:2c:74:f8:68:97:32:fd:77:73:43:29:
73:ab:64:fb:f0:30:37:d1:48:7d:e0:3a:91:82:c1:a9:3d:08:
d2:7b:1b:ec:4c:48:71:1e:fe:29:0d:86:2e:62:68:8f:d4:f2:
24:2f:30:d5:15:50:0c:0b:d2:21:b0:36:a6:35:3f:9b:02:1d:
00:e6:43:60:e8:35:8f:38:aa:d8:e6:03:3f:96:3c:ca:9e:11:
4e:8f:e3:de:49:06:ce:12:40:a5:e0:1d:06:5e:e5:ff:24:10:
cc:e4:0f:97:39:ad:40:c5:71:79:5d:4c:61:10:c2:35:9b:d7:
d5:fb:58:0c:ea:53:b3:2f:4d:5f:4d:27:02:6b:87:7c:75:b1:
e3:67:94:b9:ff:72:be:8d:46:c2:ad:c2:33:8a:18:78:a6:42:
07:7b:22:97:f7:df:63:b2:41:62:dc:81:f6:36:40:bb:e2:b4:
d1:43:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:42 2024 by rpki-client on console-ams.rpki-client.org