Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/fK_pJlPV_zzFnEVfxwbMcFVS6AA.roa
File: fK_pJlPV_zzFnEVfxwbMcFVS6AA.roa (raw, json)
Hash identifier: kmqghdF9vEaMUbk6w4c8Cdfh7YgQXQxw0fGJEPGffHc=
Subject key identifier: 7C:AF:E9:26:53:D5:FF:3C:C5:9C:45:5F:C7:06:CC:70:55:52:E8:00
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01856F42C7348D0F16D1A675ECC4EA4C23BF
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/fK_pJlPV_zzFnEVfxwbMcFVS6AA.roa
Signing time: Sun 01 Jan 2023 21:35:25 +0000
ROA not before: Sun 01 Jan 2023 21:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8038
IP address blocks: 45.8.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c7:34:8d:0f:16:d1:a6:75:ec:c4:ea:4c:23:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 21:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cafe92653d5ff3cc59c455fc706cc705552e800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:a3:e2:88:87:70:ec:6e:2d:bd:34:aa:01:
24:02:a5:9e:80:60:c4:33:24:63:45:43:a9:b4:77:
e6:34:c4:67:93:fd:4c:f7:b2:23:26:92:19:a8:58:
33:0d:e7:3c:b3:4f:43:61:4e:92:91:c5:fa:b5:44:
b8:6b:26:f4:a8:97:ad:79:64:d4:f3:6f:53:38:00:
46:86:3c:46:24:d1:70:cb:47:d6:66:b7:ce:05:2f:
6f:59:bb:28:68:ad:ff:03:00:58:10:80:27:8d:63:
2f:5f:5c:0d:0b:ae:10:47:61:5d:c9:95:f5:49:24:
78:ca:62:42:c6:aa:8e:e0:53:0b:8a:b9:9c:ee:d6:
89:fe:74:a1:0e:bd:10:0b:85:e4:58:bb:2c:ff:b6:
63:17:9c:e0:16:03:46:15:f5:2b:2d:eb:11:ba:cb:
b8:77:7f:16:d1:ee:0e:76:9b:e2:27:ac:db:50:b3:
9e:7f:d0:41:60:93:10:6e:6a:01:cd:24:58:9a:cb:
35:fd:72:44:d3:ca:03:14:f0:24:e4:9f:e8:39:8e:
65:f7:55:d8:ec:80:13:81:cd:6d:5e:ed:2f:e3:ed:
ad:71:d0:83:71:27:0f:53:49:ad:60:8b:7b:76:7a:
58:84:b7:41:84:f7:15:54:80:be:fa:40:f9:8d:0f:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:E9:26:53:D5:FF:3C:C5:9C:45:5F:C7:06:CC:70:55:52:E8:00
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/fK_pJlPV_zzFnEVfxwbMcFVS6AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:63:6e:86:77:67:f3:98:7a:f1:0f:d4:71:36:28:f7:fc:d5:
5c:8b:5c:eb:16:b6:52:9c:84:92:15:1b:01:e8:f8:fb:ee:7a:
a4:60:61:69:b3:d0:56:fc:72:8b:ed:0a:d8:fb:e1:96:23:b3:
3a:0a:bf:f8:85:b2:e9:be:bb:0d:54:ac:ab:5e:99:3a:e0:1e:
a8:3c:3f:49:a5:5b:72:4a:ee:16:fc:39:d2:5d:a8:bd:82:48:
c8:a5:ba:90:97:13:d8:2e:bb:7d:03:fe:49:d7:62:3d:b0:86:
b3:a7:41:4f:92:71:7d:57:74:73:32:c7:3d:b8:75:e5:c8:42:
92:bb:7d:71:ca:8e:6f:08:42:35:2a:cb:b9:e5:75:41:ec:1d:
03:67:ce:80:8d:56:f1:76:67:32:63:23:71:9b:03:59:e5:c9:
ba:3f:5a:d7:11:11:97:33:fd:3c:f2:74:e8:72:b2:0e:95:61:
38:df:2f:77:3f:b7:32:78:c6:95:5c:3a:cf:8e:de:b1:0a:49:
61:2e:c2:70:c1:b0:3e:67:00:8b:74:a2:ff:1d:0d:c0:e3:b3:
0f:4f:66:c4:b0:25:ed:de:d8:9c:2a:a0:47:80:9f:34:a3:08:
55:c0:9c:ac:2f:b0:ae:1f:21:c1:7c:c1:54:dc:c8:6d:d6:5e:
ce:79:79:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQsc0jQ8W0aZ17MTqTCO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjMwMTAxMjEzNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2FmZTkyNjUzZDVmZjNjYzU5YzQ1NWZjNzA2Y2M3MDU1NTJlODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozmj4oiHcOxuLb00qgEkAqWegGDE
MyRjRUOptHfmNMRnk/1M97IjJpIZqFgzDec8s09DYU6SkcX6tUS4ayb0qJeteWTU
829TOABGhjxGJNFwy0fWZrfOBS9vWbsoaK3/AwBYEIAnjWMvX1wNC64QR2FdyZX1
SSR4ymJCxqqO4FMLirmc7taJ/nShDr0QC4XkWLss/7ZjF5zgFgNGFfUrLesRusu4
d38W0e4OdpviJ6zbULOef9BBYJMQbmoBzSRYmss1/XJE08oDFPAk5J/oOY5l91XY
7IATgc1tXu0v4+2tcdCDcScPU0mtYIt7dnpYhLdBhPcVVIC++kD5jQ/rlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyv6SZT1f88xZxFX8cGzHBVUugAMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvZktfcEpsUFZfenpGbkVWZnh3Yk1jRlZTNkFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgaMA0G
CSqGSIb3DQEBCwUAA4IBAQCLY26Gd2fzmHrxD9RxNij3/NVci1zrFrZSnISSFRsB
6Pj77nqkYGFps9BW/HKL7QrY++GWI7M6Cr/4hbLpvrsNVKyrXpk64B6oPD9JpVty
Su4W/DnSXai9gkjIpbqQlxPYLrt9A/5J12I9sIazp0FPknF9V3RzMsc9uHXlyEKS
u31xyo5vCEI1Ksu55XVB7B0DZ86AjVbxdmcyYyNxmwNZ5cm6P1rXERGXM/088nTo
crIOlWE43y93P7cyeMaVXDrPjt6xCklhLsJwwbA+ZwCLdKL/HQ3A47MPT2bEsCXt
3ticKqBHgJ80owhVwJysL7CuHyHBfMFU3Mht1l7OeXlb
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:58 2024 by rpki-client on console-ams.rpki-client.org