Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/8_sVC0qCjNABsOUdV32a4OzhG_8.roa
File: 8_sVC0qCjNABsOUdV32a4OzhG_8.roa (raw, json)
Hash identifier: sCBukh3sgDc7nqHZ2R4pv2Eob5/yyBKPOM1x4DRQN88=
Subject key identifier: F3:FB:15:0B:4A:82:8C:D0:01:B0:E5:1D:57:7D:9A:E0:EC:E1:1B:FF
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 0185E4F3178D312A870677B35B57F3AF0B11
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/8_sVC0qCjNABsOUdV32a4OzhG_8.roa
Signing time: Tue 24 Jan 2023 18:03:34 +0000
ROA not before: Tue 24 Jan 2023 18:03:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61980
IP address blocks: 83.220.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:f3:17:8d:31:2a:87:06:77:b3:5b:57:f3:af:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jan 24 18:03:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3fb150b4a828cd001b0e51d577d9ae0ece11bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:8a:ed:fc:d7:bf:86:31:bd:74:d1:4b:49:
b6:2c:f5:19:3e:aa:98:a7:42:b2:68:06:f6:71:61:
5f:75:ef:0d:ad:58:79:97:c2:38:27:80:82:f5:ad:
9f:15:98:bc:9c:26:cc:99:c3:b8:ae:f6:da:64:99:
a8:8d:58:65:9a:fb:aa:8d:2a:25:24:28:75:9e:22:
49:28:3d:0c:5a:81:64:07:62:f4:b1:c3:33:e3:88:
98:f5:00:88:0a:f8:2f:6d:ce:93:19:de:90:18:bd:
09:64:96:75:60:c4:e0:4d:72:99:bc:f8:53:86:96:
f4:58:a6:3d:a3:70:1e:7f:ef:61:de:c5:12:e9:1f:
a0:2d:a4:2b:b6:97:84:5c:c0:82:1e:39:d1:a3:ea:
8f:bf:e0:0e:c6:78:e9:76:b7:58:be:e3:3c:b9:84:
9c:c1:b5:d3:83:89:62:ad:d6:cc:5b:36:df:39:43:
0c:8b:cf:90:7a:64:96:e9:8e:a0:b7:62:ab:90:53:
c3:e8:83:97:c0:8f:f4:35:33:73:51:dd:5b:9e:8d:
2b:c1:cc:67:1b:7b:64:1a:4d:a5:db:f5:e2:5c:41:
34:3c:e7:4a:b0:b9:c0:50:4a:85:57:b8:fe:94:f5:
5b:e8:fd:a9:b6:6a:4c:bc:59:60:d3:7a:30:04:6b:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:15:0B:4A:82:8C:D0:01:B0:E5:1D:57:7D:9A:E0:EC:E1:1B:FF
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/8_sVC0qCjNABsOUdV32a4OzhG_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f1:18:f6:33:f2:9d:f5:00:bc:01:0c:0f:c2:d0:dc:c2:39:
c5:18:d3:5c:b3:a3:5d:f1:02:e9:dc:22:6c:91:d5:3e:b3:d6:
d6:83:93:30:cd:8a:e6:fd:73:18:5f:3c:46:5e:61:4a:a1:4f:
4f:85:f0:6e:a4:db:d8:b4:d4:4c:db:fc:f7:8c:73:c8:e0:f3:
2b:40:4c:67:84:66:37:dd:fc:82:16:a5:8b:17:97:f1:8b:dd:
d9:74:7e:4f:97:0e:7a:0c:4d:32:a5:ff:19:4a:36:fd:8b:ac:
40:06:ad:57:e9:34:3f:79:ff:62:7c:cc:72:2f:e3:d6:38:48:
98:c7:44:7c:1d:c3:0c:5d:eb:05:a9:e4:00:1f:fb:5a:ba:af:
57:fa:06:92:87:87:c2:f7:ec:a8:16:d3:e1:9e:e6:60:2f:26:
66:47:a6:b0:e7:ce:c3:c6:5f:5d:d8:8e:5a:fa:8c:f8:dd:e9:
2b:80:8f:41:18:9d:ef:32:4b:8d:c5:3d:68:ec:06:05:86:b2:
bc:24:10:ac:b1:00:d2:e2:60:d7:79:49:fa:48:25:53:84:81:
8b:bf:f9:26:5e:db:26:7b:fe:9b:32:bc:66:00:c1:3f:1c:43:
fa:fc:6c:62:6f:16:a4:29:1e:c9:c6:88:35:c0:e6:82:d6:25:
28:c2:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org