Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/f8ewVXfv1Wffow0PwXKCnPOsi8I.roa
File: f8ewVXfv1Wffow0PwXKCnPOsi8I.roa (raw, json)
Hash identifier: zSGftDRtlSHlRs9NL+9N9zydzQkhS7kquGIyVVePvKY=
Subject key identifier: 7F:C7:B0:55:77:EF:D5:67:DF:A3:0D:0F:C1:72:82:9C:F3:AC:8B:C2
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 01857139B2965EB17CC42A6C7360325447CE
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/f8ewVXfv1Wffow0PwXKCnPOsi8I.roa
Signing time: Mon 02 Jan 2023 06:44:44 +0000
ROA not before: Mon 02 Jan 2023 06:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31500
IP address blocks: 194.110.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b2:96:5e:b1:7c:c4:2a:6c:73:60:32:54:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jan 2 06:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc7b05577efd567dfa30d0fc172829cf3ac8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:23:10:f8:85:0e:08:88:aa:a8:64:f1:76:
79:1b:bd:ad:71:5c:91:d6:9a:5d:8e:25:43:7d:00:
47:d5:19:99:70:3b:6c:56:38:c3:1e:8a:db:01:c5:
6e:9a:8c:98:f8:f0:fb:a7:9d:04:74:f1:ef:43:a5:
ce:d3:bd:33:b2:cf:66:eb:d6:39:c2:b4:32:5f:c6:
97:37:d2:05:a8:7f:f8:07:ec:1f:c7:ad:30:bf:1c:
ed:b1:f1:88:a5:a5:a5:7f:3a:7a:93:d8:82:14:fd:
1f:45:5f:0d:01:bd:5d:0b:6e:e4:00:0f:97:5a:41:
15:ee:e4:cb:ca:fe:62:cd:47:b6:4e:3c:20:ed:93:
8d:2c:9a:87:58:50:95:4e:ea:4c:7d:2e:ab:15:9a:
e4:c5:c6:bc:e8:fc:6a:c4:4f:36:a5:0c:01:89:35:
ec:8b:d9:a7:f3:4d:a3:b6:28:59:0f:4a:22:da:52:
37:0a:b5:9e:e7:59:d5:5c:26:b9:9c:ba:3c:00:65:
fe:f0:85:c8:8e:ac:ef:27:c0:2f:40:63:d8:71:f2:
d2:87:70:58:80:1d:3d:d6:95:92:70:dd:f2:fa:56:
94:46:28:c2:ea:c2:b6:d5:44:70:99:6d:ba:5d:df:
7e:7d:66:cf:67:38:71:76:5e:8e:4a:6e:a8:d5:26:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:B0:55:77:EF:D5:67:DF:A3:0D:0F:C1:72:82:9C:F3:AC:8B:C2
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/f8ewVXfv1Wffow0PwXKCnPOsi8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ac:ff:6d:66:53:10:85:8d:59:16:ac:f7:b4:3e:35:82:34:
77:de:90:c8:7b:97:fb:a5:25:b1:5d:db:3d:dd:9e:ef:02:58:
7e:8a:c0:f9:02:a5:bb:90:75:22:18:2d:86:9b:d5:70:fd:0c:
3c:41:e4:f1:c8:49:ce:b6:3b:27:81:f8:8f:b6:34:aa:84:7d:
a0:8d:c8:c3:3f:71:a8:26:55:5b:e0:ec:e7:d6:fc:54:98:5e:
fd:c7:db:54:69:e0:96:04:ac:8c:92:ce:ef:42:b0:0e:06:b8:
a7:61:99:47:b7:96:8c:5f:79:76:da:7d:d3:d4:65:a3:f7:a0:
d0:a6:70:60:67:b9:ee:d6:fb:da:4f:d4:2e:33:67:6e:0d:5e:
6c:25:e7:fd:e9:b2:49:d2:ce:09:b8:b2:8d:78:a8:cf:fb:b6:
7b:cb:df:46:a8:55:66:f8:2b:4c:f7:64:e9:4d:0d:1e:58:ae:
6f:c5:87:4a:e0:d5:59:08:2c:d2:d3:fe:d3:fd:63:4d:ad:34:
8c:b3:b7:de:45:c8:e8:0e:ba:0a:f6:cf:64:fc:ea:b0:a3:49:
bc:b5:d7:d1:a8:55:ea:fb:bc:63:fc:19:c4:38:83:41:2a:49:
bc:15:d3:5d:83:1f:79:1f:2c:7d:a4:01:08:d4:09:c1:f9:7d:
e8:99:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:26 2024 by rpki-client on console-ams.rpki-client.org