Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/8G7IgkVav4AH484rXRuJHMi_AaY.roa
File: 8G7IgkVav4AH484rXRuJHMi_AaY.roa (raw, json)
Hash identifier: I+jiGJQSmDy41j/Qjt/PGf/z9briLPwfaRjqMZG53/c=
Subject key identifier: F0:6E:C8:82:45:5A:BF:80:07:E3:CE:2B:5D:1B:89:1C:C8:BF:01:A6
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 018A8DA0F3038B129C823394EB634D46EA3A
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/8G7IgkVav4AH484rXRuJHMi_AaY.roa
Signing time: Wed 13 Sep 2023 08:20:50 +0000
ROA not before: Wed 13 Sep 2023 08:20:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 195.88.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:a0:f3:03:8b:12:9c:82:33:94:eb:63:4d:46:ea:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Sep 13 08:20:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f06ec882455abf8007e3ce2b5d1b891cc8bf01a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:a7:5b:b8:0f:78:b2:50:02:e4:34:63:c4:
b9:00:7a:93:63:e4:8e:6f:e6:af:7d:66:c3:ea:b5:
54:0d:56:d8:ed:76:dd:66:fe:22:5f:b1:40:22:0a:
3a:e6:10:d6:50:17:35:25:1a:17:e9:d8:f4:52:58:
98:4b:3a:04:ba:30:22:dd:5a:fd:5e:8c:45:5c:19:
e0:d7:c8:f3:93:b5:6d:48:ba:63:a1:b4:db:da:6f:
d6:88:9b:c1:47:df:73:74:e0:93:31:73:85:bf:ef:
e3:59:ae:b2:3a:11:7e:2d:7d:08:01:6c:d7:3b:ab:
e8:a4:b5:31:f4:1b:17:17:0e:cc:6b:57:30:9b:2e:
0a:c8:c6:34:fd:f4:08:e9:52:b6:c7:77:03:e7:4e:
f5:b3:2a:a3:9c:dd:d4:57:dc:4d:6d:a1:4f:43:c3:
81:d3:73:e2:ea:bf:5e:bc:c3:91:bd:9b:d5:ff:01:
65:d7:20:56:1a:62:43:32:8f:cb:5f:65:e9:83:02:
a7:e7:48:6d:44:80:b7:bb:11:ce:15:b5:3f:6d:42:
60:8d:49:c4:a4:38:7c:7d:49:eb:bc:1b:f2:3f:11:
1c:b0:a5:e9:7e:09:cf:53:7e:f3:eb:2a:57:9c:eb:
b6:c0:81:56:94:4e:3e:29:de:f9:e2:15:62:a6:09:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6E:C8:82:45:5A:BF:80:07:E3:CE:2B:5D:1B:89:1C:C8:BF:01:A6
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/8G7IgkVav4AH484rXRuJHMi_AaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:38:8e:0d:76:96:3d:0e:71:80:7c:c5:82:e9:42:ab:76:16:
f2:0e:bb:48:be:58:0b:6c:e3:55:1c:5c:b8:63:04:7b:4f:e5:
de:2a:4d:98:de:99:39:d8:b7:f9:5d:b9:bf:7a:11:12:52:31:
02:6d:89:1c:f9:f7:3e:36:88:dd:fa:91:49:19:c0:97:9f:06:
51:e3:b9:be:b8:e6:8b:0e:28:c2:1a:a4:af:7d:01:02:02:70:
a7:15:4f:16:46:12:7c:d4:41:f8:46:74:39:fe:3b:4e:25:0b:
7b:a9:3d:65:79:b6:82:02:75:75:9e:95:0f:3b:77:04:22:c1:
78:e2:73:0a:00:e5:0a:23:09:85:ed:7e:f7:53:34:a8:d6:70:
b6:78:12:d7:af:f8:f4:4d:41:e7:f2:35:40:a4:56:0f:5c:7b:
a6:ef:b1:1e:d4:59:d2:53:01:6a:7a:30:5e:09:4a:e0:4a:5f:
b6:5b:38:f6:ed:bf:ab:8c:3a:29:e1:9c:f9:c6:3f:68:ce:09:
6d:1e:6c:a2:e7:76:84:53:10:4a:0e:42:22:3c:8c:dc:f5:3f:
50:f6:55:87:20:9c:22:71:08:a3:e8:30:4a:16:9b:ba:db:c3:
07:ae:9a:35:2f:79:1e:3b:a8:e3:c5:ff:d2:28:fd:7f:c7:43:
72:77:3e:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqNoPMDixKcgjOU62NNRuo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzE1MDA3NGVhNmZkZDFlODRkZDk1ZTBiMDY4MzY0MDdl
OTQxMWIwHhcNMjMwOTEzMDgyMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDZlYzg4MjQ1NWFiZjgwMDdlM2NlMmI1ZDFiODkxY2M4YmYwMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid6nW7gPeLJQAuQ0Y8S5AHqTY+SO
b+avfWbD6rVUDVbY7XbdZv4iX7FAIgo65hDWUBc1JRoX6dj0UliYSzoEujAi3Vr9
XoxFXBng18jzk7VtSLpjobTb2m/WiJvBR99zdOCTMXOFv+/jWa6yOhF+LX0IAWzX
O6vopLUx9BsXFw7Ma1cwmy4KyMY0/fQI6VK2x3cD5071syqjnN3UV9xNbaFPQ8OB
03Pi6r9evMORvZvV/wFl1yBWGmJDMo/LX2XpgwKn50htRIC3uxHOFbU/bUJgjUnE
pDh8fUnrvBvyPxEcsKXpfgnPU37z6ypXnOu2wIFWlE4+Kd754hVipgl9nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBuyIJFWr+AB+POK10biRzIvwGmMB8GA1UdIwQY
MBaAFIpxUAdOpv3R6E3ZXgsGg2QH6UEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQt
M2M5M2JiNmNmZWUxLzEvOEc3SWdrVmF2NEFINDg0clhSdUpITWlfQWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDYzZjctZTRiNi00ZDNjLTgwNDQtM2M5M2JiNmNmZWUx
LzEvaW5GUUIwNm1fZEhvVGRsZUN3YURaQWZwUVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1jQMA0G
CSqGSIb3DQEBCwUAA4IBAQDCOI4NdpY9DnGAfMWC6UKrdhbyDrtIvlgLbONVHFy4
YwR7T+XeKk2Y3pk52Lf5Xbm/ehESUjECbYkc+fc+Nojd+pFJGcCXnwZR47m+uOaL
DijCGqSvfQECAnCnFU8WRhJ81EH4RnQ5/jtOJQt7qT1lebaCAnV1npUPO3cEIsF4
4nMKAOUKIwmF7X73UzSo1nC2eBLXr/j0TUHn8jVApFYPXHum77Ee1FnSUwFqejBe
CUrgSl+2Wzj27b+rjDop4Zz5xj9ozgltHmyi53aEUxBKDkIiPIzc9T9Q9lWHIJwi
cQij6DBKFpu628MHrpo1L3keO6jjxf/SKP1/x0Nydz5N
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:17 2024 by rpki-client on console-fra.rpki-client.org