Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/8mqS3ee4RyyAT8dDgb36XxKr8SM.roa
File: 8mqS3ee4RyyAT8dDgb36XxKr8SM.roa (raw, json)
Hash identifier: 6WGUihlV/IIa/ppfzZdvXRwY+3DB2zPT/06rED1nCkk=
Subject key identifier: F2:6A:92:DD:E7:B8:47:2C:80:4F:C7:43:81:BD:FA:5F:12:AB:F1:23
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01856C011DF022C155B57758B25BC099A37F
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/8mqS3ee4RyyAT8dDgb36XxKr8SM.roa
Signing time: Sun 01 Jan 2023 06:24:50 +0000
ROA not before: Sun 01 Jan 2023 06:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 178.159.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:1d:f0:22:c1:55:b5:77:58:b2:5b:c0:99:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 06:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f26a92dde7b8472c804fc74381bdfa5f12abf123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:7b:15:86:dd:f1:61:ab:dd:0b:45:9d:e8:
f1:39:e7:84:5e:35:21:d6:31:ba:19:c3:c4:4e:08:
79:4a:e8:bb:d9:67:96:76:0a:06:9e:19:13:79:ce:
ad:ad:0c:40:8f:0d:95:43:ce:b0:01:b5:ce:cc:87:
2c:8d:46:04:d0:26:a2:2e:0c:ed:10:58:17:06:4c:
e8:d7:00:15:f4:f0:46:b6:51:81:c2:99:0c:71:1b:
de:dc:92:b7:2f:c2:e7:8f:48:c5:10:1c:30:ec:d9:
7f:71:02:a1:28:9d:f2:84:1d:26:c6:26:a3:e8:13:
37:95:6e:30:1f:f7:23:b0:c1:f9:51:78:29:66:cc:
ba:62:4a:8b:f6:10:89:a0:4a:45:a7:c9:f0:4d:69:
12:72:26:90:ed:66:73:c2:93:55:51:34:9b:56:87:
97:1c:11:05:bd:d0:c5:56:c9:12:62:32:96:1f:f7:
57:19:e2:5c:0d:a6:d0:2d:07:d2:8c:15:c1:87:31:
ad:02:f1:7a:9a:ec:b5:6e:89:4d:65:4a:f0:09:4f:
1f:2e:f0:99:22:11:84:a4:47:bc:4d:83:ef:e3:3f:
6c:96:06:ad:52:f3:b0:9a:82:6f:95:2f:22:0c:59:
cd:f2:f1:a5:be:95:31:39:a6:1f:8e:69:56:d3:b5:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:92:DD:E7:B8:47:2C:80:4F:C7:43:81:BD:FA:5F:12:AB:F1:23
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/8mqS3ee4RyyAT8dDgb36XxKr8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2f:49:88:73:05:45:36:ef:18:79:e7:b9:08:78:bd:13:bf:
02:c2:c5:c2:fe:7c:d4:34:c3:05:64:9f:91:12:7c:27:2f:b0:
32:37:0e:2f:90:2a:64:92:56:1f:74:1a:df:96:e2:d5:81:7f:
a5:30:78:b6:d4:d9:38:51:b7:09:eb:5e:fd:87:ff:29:0e:ef:
d7:28:fd:25:d3:32:35:2c:df:37:b8:6d:55:2a:1f:b0:06:35:
3d:22:d4:78:46:62:c7:6a:e9:42:ea:53:90:12:c8:65:a2:e8:
ae:22:2c:21:eb:15:cb:4d:20:16:07:a1:70:5e:da:04:f5:a1:
ab:90:05:d4:18:f2:6e:13:ee:ce:6d:92:2d:41:f2:54:0f:9b:
ce:b0:80:06:5b:e6:33:2a:f6:30:ee:c4:f1:74:6e:23:b6:b1:
b2:24:fc:46:06:6e:ce:be:47:0d:5c:34:c0:8d:3c:68:a8:b6:
3d:b5:f4:32:fa:cb:73:8c:bd:37:c9:17:ae:74:46:ad:d6:c9:
26:43:5e:d0:ac:ce:b5:23:c4:62:be:33:69:0c:c3:ec:87:48:
3f:8b:39:91:1d:e4:d0:a3:9a:32:7d:06:af:2e:26:a7:aa:ef:
fd:26:96:11:b4:32:ef:2b:53:2e:eb:b6:19:0b:31:f1:3a:4b:
35:f8:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:38 2024 by rpki-client on console-ams.rpki-client.org