Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/8tGk5hzajMb1O95Sk3pua25DiGY.roa
File: 8tGk5hzajMb1O95Sk3pua25DiGY.roa (raw, json)
Hash identifier: AITmcNq4htH7UQK0FSncFj/3uL2ExFjI7IsdbeuUpqU=
Subject key identifier: F2:D1:A4:E6:1C:DA:8C:C6:F5:3B:DE:52:93:7A:6E:6B:6E:43:88:66
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 0185708C9E0BB62F3ABFAC73ED52DBA3DF47
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/8tGk5hzajMb1O95Sk3pua25DiGY.roa
Signing time: Mon 02 Jan 2023 03:35:41 +0000
ROA not before: Mon 02 Jan 2023 03:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200387
IP address blocks: 194.49.11.0/24 maxlen: 24
194.49.8.0/24 maxlen: 24
194.49.9.0/24 maxlen: 24
194.49.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:9e:0b:b6:2f:3a:bf:ac:73:ed:52:db:a3:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jan 2 03:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2d1a4e61cda8cc6f53bde52937a6e6b6e438866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:ce:05:a2:c6:dc:f7:03:f9:5b:c7:7e:07:
15:f6:9e:fd:ad:51:4c:97:7b:9f:67:a0:53:da:a4:
4a:90:87:92:0e:61:eb:a7:a5:5b:95:96:cf:b4:59:
85:b9:8a:5c:12:91:f9:d1:b7:ea:04:2d:fe:a8:82:
89:ab:3a:c4:e3:c5:81:4c:ac:8e:28:13:ed:21:91:
05:34:d6:45:86:cd:1e:75:b2:88:e0:96:e6:43:93:
41:cd:83:cb:aa:03:2b:68:fc:69:0c:89:1c:af:59:
a8:43:c7:79:91:ca:04:5d:30:96:48:af:70:86:4a:
d2:ef:33:f5:c3:88:c7:e8:0e:ef:3a:1f:d6:a9:8c:
f5:ff:0c:3a:e9:ea:d0:ef:55:67:25:f5:6e:2e:98:
a1:1d:e2:e1:73:ba:98:36:d7:7d:7f:ef:81:e6:42:
16:d1:09:e5:c3:3a:c3:1b:4f:e9:87:7b:f3:de:d6:
50:47:84:31:37:f3:44:66:d9:52:16:fd:1e:ce:33:
23:74:56:68:b5:52:f8:34:99:36:7a:c6:b4:47:ad:
fa:97:2c:3b:7b:6d:00:d5:a7:ba:20:4c:6b:7c:95:
fa:2c:3b:d1:b7:68:22:38:d2:42:00:04:db:aa:63:
51:e3:b1:0b:b1:97:48:ba:4e:78:58:e7:0e:6d:8a:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:A4:E6:1C:DA:8C:C6:F5:3B:DE:52:93:7A:6E:6B:6E:43:88:66
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/8tGk5hzajMb1O95Sk3pua25DiGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.8.0/22
Signature Algorithm: sha256WithRSAEncryption
72:dc:23:05:8f:1e:bd:dd:90:57:89:67:7b:ed:e7:28:3c:8c:
d1:8f:28:df:23:e5:9a:37:a2:cb:c3:6a:cd:b1:08:38:65:3c:
b3:f0:8b:1b:83:5e:ca:90:32:0e:c1:1f:44:9a:40:69:26:71:
cc:93:27:48:d1:55:89:5c:1a:f7:91:d1:f5:19:09:94:30:57:
8a:c3:c4:15:0f:8e:2b:53:2b:f7:50:ec:f6:4e:31:e0:f5:e4:
a1:09:34:8c:97:43:b1:dd:63:44:8a:1f:d2:b2:2a:91:44:c5:
8c:f5:eb:92:b4:76:76:6a:c1:da:6f:6a:2a:cb:2d:11:04:96:
89:1b:5e:86:23:50:d5:77:ac:fa:bd:db:94:c7:c5:4c:3a:ea:
1c:af:d8:34:60:11:96:d6:4e:da:51:52:ed:cc:5b:8b:e3:72:
35:1b:b8:38:6a:db:58:8d:ef:06:de:af:7a:16:e0:fa:10:c0:
15:78:d2:88:9b:42:7f:a4:7e:8b:78:d3:45:30:2c:55:f7:5e:
d1:1f:7a:91:f6:a5:b4:80:17:a8:c8:e0:f6:17:bb:f3:7a:2a:
ef:e5:ec:aa:89:dc:c2:d3:d7:be:af:d1:e4:7c:e9:00:fb:4c:
c2:4c:60:c7:c2:cd:b2:42:f4:2d:70:94:44:4c:d1:e1:66:9d:
9c:d7:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:31 2024 by rpki-client on console-ams.rpki-client.org