Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8FoEprOujexyoftv4ULX2sFl6XU.roa
File: 8FoEprOujexyoftv4ULX2sFl6XU.roa (raw, json)
Hash identifier: S/Q1UjNl6LwsjQbHGUtA6ju7QZTYDHRyl3Q2jWgpIiA=
Subject key identifier: F0:5A:04:A6:B3:AE:8D:EC:72:A1:FB:6F:E1:42:D7:DA:C1:65:E9:75
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF69B866E01954EAAC654F14A1D0F5
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8FoEprOujexyoftv4ULX2sFl6XU.roa
Signing time: Sun 01 Jan 2023 14:14:50 +0000
ROA not before: Sun 01 Jan 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 2.57.168.0/24 maxlen: 24
45.8.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:69:b8:66:e0:19:54:ea:ac:65:4f:14:a1:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05a04a6b3ae8dec72a1fb6fe142d7dac165e975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:58:cd:8b:a8:e8:28:b9:d9:ef:8a:1a:ce:
0f:83:4c:0f:67:5e:c3:de:22:40:aa:1d:2c:ce:c2:
d7:21:e5:62:8f:d0:f5:ad:19:fc:a1:a3:e1:83:95:
d1:20:b9:4a:b3:21:52:a9:61:e7:42:f5:43:95:31:
e7:e0:22:19:22:14:cf:f9:a8:ff:62:2f:02:de:88:
42:f1:95:b3:79:e3:3c:de:d1:38:ef:3c:71:b7:0f:
68:ac:04:59:3b:c6:09:50:8d:1b:1c:30:4e:76:0e:
7f:43:5f:9e:30:4e:9f:be:c1:0e:72:8a:0f:9a:d0:
09:de:37:d4:22:1d:6f:66:9a:18:49:1b:0e:1d:18:
de:4f:44:14:ab:26:77:2e:30:be:b2:62:b3:65:0d:
76:e5:7e:72:a5:2f:c2:71:23:88:8b:3e:5a:24:ce:
01:94:c8:64:cd:36:45:3a:48:d1:ec:06:ba:67:d4:
b4:9b:bf:e7:e2:3a:7d:2f:a5:9b:42:ac:54:36:94:
08:49:25:b9:17:b0:ab:26:e1:78:7a:bc:a8:00:ca:
1c:53:0a:90:2e:0a:d8:9e:b9:44:3a:00:5f:d8:6d:
85:76:b6:d2:9f:36:b0:4e:81:53:57:14:6d:8e:2d:
9c:76:34:6a:19:12:ba:97:41:21:45:48:dc:a1:d7:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:04:A6:B3:AE:8D:EC:72:A1:FB:6F:E1:42:D7:DA:C1:65:E9:75
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/8FoEprOujexyoftv4ULX2sFl6XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.168.0/24
45.8.17.0/24
Signature Algorithm: sha256WithRSAEncryption
46:85:0c:9f:4f:60:37:46:08:e8:c3:e5:33:db:8d:63:27:fc:
a9:fe:11:a5:82:d3:5e:1e:39:9d:80:04:67:a3:41:b0:6d:c6:
91:ef:ac:53:91:2d:fa:74:64:e2:88:81:20:da:2c:14:ad:f3:
cf:d1:7e:da:da:78:cc:21:9a:9b:30:84:64:d9:92:c9:15:10:
c9:eb:cf:a0:1d:48:86:12:a0:fa:cf:8c:51:89:66:cd:29:92:
ea:4f:ec:cf:1f:f8:39:9a:d6:04:43:0a:8e:62:4a:77:14:79:
a6:dd:54:7c:ab:50:60:6c:90:1f:24:2e:8f:02:d4:d1:9b:64:
f2:81:8a:e4:89:9c:dd:ab:92:38:fc:6a:1e:f9:58:b4:2e:b7:
23:3d:57:2d:5d:4e:76:3b:80:2e:fd:df:d1:7a:ec:6d:1e:0e:
0c:e2:0b:cf:92:17:9f:60:bc:20:3f:e7:d9:a7:cd:1c:d7:c8:
2a:67:0f:24:35:4e:21:13:0d:f9:31:45:19:8e:cc:dd:2d:8b:
36:a9:89:5d:9f:d3:c9:5a:b8:46:e9:d9:d0:d9:1e:e4:7f:b6:
16:3c:1d:fa:8e:92:8c:68:62:2c:ee:80:f3:33:b9:d0:27:49:
26:82:54:52:7a:fd:a9:fe:41:0e:44:55:41:6b:00:cb:70:eb:
18:72:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org