Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8ft4e56eGusSvfzX_nNJEoUREb8.roa
File: 8ft4e56eGusSvfzX_nNJEoUREb8.roa (raw, json)
Hash identifier: IqLHud9YfERPj/fYpoRL7rPxXSuhSP6okUE4yMOb6zw=
Subject key identifier: F1:FB:78:7B:9E:9E:1A:EB:12:BD:FC:D7:FE:73:49:12:85:11:11:BF
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01899918816517254C0A6A1C1D7EBD248070
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8ft4e56eGusSvfzX_nNJEoUREb8.roa
Signing time: Thu 27 Jul 2023 20:44:27 +0000
ROA not before: Thu 27 Jul 2023 20:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 82.163.60.0/22 maxlen: 24
31.186.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 07:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:18:81:65:17:25:4c:0a:6a:1c:1d:7e:bd:24:80:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 27 20:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1fb787b9e9e1aeb12bdfcd7fe734912851111bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:ad:26:0e:09:75:91:90:b5:a0:ae:77:8f:
6c:92:8e:d8:47:a7:83:07:9f:2b:85:bd:e5:d6:a2:
09:3f:dc:c3:7c:67:12:7b:af:19:1a:19:64:02:a0:
02:4c:33:54:16:fd:e6:36:31:82:ed:7f:ba:27:85:
c6:ad:19:4b:1c:8b:1e:93:51:2b:0e:85:1f:f4:2a:
ff:91:d8:71:5a:47:46:ac:a4:26:11:13:c7:eb:ca:
73:07:c6:e0:ad:1b:a0:fd:d5:e4:8d:01:83:de:8e:
ae:dd:19:12:1a:5b:09:7c:ae:a7:27:1d:1d:9a:a2:
9c:4f:e2:fe:56:0b:e0:cc:a3:8f:fa:ad:79:df:37:
f8:36:1a:5a:f4:0d:dc:ca:5c:19:e1:63:0b:af:25:
fc:03:39:39:c7:f3:c2:ba:24:58:f0:de:be:dc:c8:
d9:14:fd:c2:d8:db:e6:ef:4e:19:21:56:f8:20:cc:
30:0d:69:fa:d8:9d:de:5d:83:bb:79:04:56:8f:20:
ee:cb:d1:82:2b:0c:f7:1f:24:71:49:52:3e:9b:f5:
7d:62:5b:2b:84:b1:10:d7:5a:ce:a3:ee:85:4c:9e:
31:72:59:94:54:08:83:5f:93:6f:28:2f:80:c3:2b:
53:ae:82:3f:a7:aa:18:4f:d8:0a:8b:bb:28:8b:7a:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FB:78:7B:9E:9E:1A:EB:12:BD:FC:D7:FE:73:49:12:85:11:11:BF
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8ft4e56eGusSvfzX_nNJEoUREb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
82.163.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:21:0e:84:c5:27:0f:d4:2a:58:2e:92:47:cd:02:89:d3:79:
0e:dd:14:46:2c:1e:ad:10:c7:35:b7:c3:9b:6b:2a:49:6c:95:
5f:50:83:16:c7:1b:de:bb:fd:7e:d2:f6:0f:58:b5:f7:8e:c8:
7d:77:e4:26:bc:21:f4:a7:b6:95:3c:52:34:dc:35:d9:74:12:
06:5a:85:87:b2:1c:6b:c2:d3:b1:34:00:5d:21:fd:0f:ac:f9:
7f:c9:2f:5f:84:6d:0c:01:0a:5b:0d:ce:17:b1:30:44:e9:73:
fa:d8:2d:42:54:96:ce:39:16:90:9f:4a:ee:16:0c:41:85:7e:
24:1d:99:c2:f8:d7:e5:45:78:33:fc:5a:3b:c9:a8:b5:5e:53:
76:7a:36:80:90:f0:d9:74:13:38:6c:71:da:a1:cc:5e:4f:36:
0c:ae:43:9c:87:ba:84:8a:6b:15:c3:2a:80:48:ef:44:c9:19:
0d:64:1a:f3:22:1b:f6:b4:bc:be:bf:44:c0:64:1e:94:5a:af:
da:6c:09:9f:73:40:d8:3a:37:18:7b:51:1f:39:9d:c4:de:87:
e6:a8:4c:b3:dc:23:d1:3c:29:5a:83:1d:5d:61:78:45:c1:81:
9f:89:fa:11:14:d4:8f:33:e0:1e:90:6e:38:d0:2b:5d:65:3b:
19:8f:f9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org