Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8KOXQuZbh0bLqTeS5U06_NwsSo.roa
File: k8KOXQuZbh0bLqTeS5U06_NwsSo.roa (raw, json)
Hash identifier: nHESaMle+LWU0PXCjeHePlhryYEa3cKcvX5MM5XPDps=
Subject key identifier: 93:C2:8E:5D:0B:99:6E:1D:1B:2E:A4:DE:4B:95:34:EB:F3:70:B1:2A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C4E31925B2CB7243EB3A5BF8097E1027B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8KOXQuZbh0bLqTeS5U06_NwsSo.roa
Signing time: Sat 09 Dec 2023 10:48:40 +0000
ROA not before: Sat 09 Dec 2023 10:48:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 94.176.214.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Dec 2023 16:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:31:92:5b:2c:b7:24:3e:b3:a5:bf:80:97:e1:02:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 9 10:48:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c28e5d0b996e1d1b2ea4de4b9534ebf370b12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7e:3b:64:dc:26:c5:49:94:b7:e7:6a:01:a0:
ce:44:47:2c:fb:28:05:96:15:82:98:b9:1c:30:cd:
9c:40:c8:ef:88:22:4c:d9:0e:c5:32:a9:cb:43:f6:
dd:95:b8:72:cd:45:1e:68:dd:5c:0d:5a:63:d1:b8:
ee:19:bc:cd:42:42:42:7a:0e:c9:eb:ef:63:3a:ac:
15:45:69:a2:6c:58:c6:29:19:95:cf:ee:b6:23:d3:
4d:2e:6b:5c:75:e2:38:e5:be:7c:c2:fc:96:d0:cf:
51:ef:6d:b2:5e:9b:0b:ef:07:af:24:20:fe:b9:13:
a4:44:d0:76:a7:12:07:64:b9:28:50:7d:cb:04:9b:
b8:a9:57:84:34:12:d0:bc:ff:e0:b1:ed:5d:81:d5:
57:28:c7:dc:c5:37:f5:3e:0d:65:8c:7f:93:ed:56:
cf:c9:8e:71:a8:4f:c4:61:1e:a1:73:3e:64:22:39:
7d:06:a8:d9:f0:83:15:8f:7a:e0:3b:52:7a:37:35:
11:21:80:9c:f6:d1:eb:2b:5b:44:9e:4b:76:2a:31:
2a:22:f9:a7:6d:06:2d:12:97:2a:ba:7b:31:22:a1:
61:05:cb:cf:5a:b5:11:8e:27:2e:bc:d5:24:c9:4f:
78:c6:ad:16:e5:6b:25:23:4a:bb:6a:db:8f:7c:9c:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:8E:5D:0B:99:6E:1D:1B:2E:A4:DE:4B:95:34:EB:F3:70:B1:2A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k8KOXQuZbh0bLqTeS5U06_NwsSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ce:3f:da:73:f6:10:71:73:bc:08:c9:da:cb:54:ed:7e:d0:
65:8b:43:34:c5:b6:5f:2b:77:eb:1b:84:7c:f4:42:66:28:64:
00:6a:0c:5f:37:66:e8:64:18:04:7d:58:0d:82:06:2f:93:d0:
df:bb:83:6b:c5:e9:51:c4:27:83:25:8e:63:2f:e9:f3:b6:79:
af:a9:63:9f:99:1d:84:a1:83:19:0f:92:43:f7:c4:ab:71:56:
98:c3:9f:61:08:eb:c7:37:80:94:41:db:39:b5:ef:1e:70:4a:
b7:a6:41:5c:bd:6e:c0:3c:f4:f8:ba:b3:45:8c:67:5b:10:bf:
65:8f:9a:65:80:0a:84:a9:8e:50:09:8c:a6:63:4f:6f:32:23:
76:33:61:2e:7b:de:49:59:42:87:af:22:8f:c7:f8:8f:92:37:
c0:63:da:9e:9d:d1:5e:ed:63:ef:e6:ea:cd:94:7e:66:33:c5:
96:93:91:bd:ec:d4:2e:58:e4:44:52:e7:4f:ba:6b:5b:05:6d:
b2:00:a8:23:64:25:61:6a:99:9e:3e:ac:d8:5f:1a:9d:4c:1f:
0d:71:32:ed:56:07:5d:d9:af:56:f4:cc:e7:23:70:fe:3c:2c:
54:56:a0:13:b4:cf:23:2d:bf:3c:45:de:9b:7d:71:b4:7a:25:
a5:2a:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org