Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/1oxK9DrQxGosUV2UO34R9X18A1o.roa
File: 1oxK9DrQxGosUV2UO34R9X18A1o.roa (raw, json)
Hash identifier: SUQYXE/ccdVhb7KSZ3akk3sW7xq97Gv9exaYvZGdzKo=
Subject key identifier: D6:8C:4A:F4:3A:D0:C4:6A:2C:51:5D:94:3B:7E:11:F5:7D:7C:03:5A
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 018572B3FEA48DD6E26D6247B8D164015661
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/1oxK9DrQxGosUV2UO34R9X18A1o.roa
Signing time: Mon 02 Jan 2023 13:37:56 +0000
ROA not before: Mon 02 Jan 2023 13:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 193.186.86.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:fe:a4:8d:d6:e2:6d:62:47:b8:d1:64:01:56:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Jan 2 13:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d68c4af43ad0c46a2c515d943b7e11f57d7c035a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:61:92:bc:a1:79:64:83:8a:b0:0c:16:d1:
f6:79:e0:02:0b:84:42:3b:c3:c0:78:28:57:a9:32:
fe:60:84:6d:84:ff:f2:8f:e8:c1:c9:c9:6d:27:e0:
0d:7c:95:72:91:c1:7b:97:ae:43:9c:a7:af:4e:28:
e4:d3:23:29:1a:67:69:b9:15:cb:18:66:d2:e1:34:
0c:cc:f4:c0:35:ab:f3:4d:be:d5:c2:f1:81:11:a9:
f4:f1:8b:2a:f7:19:bf:32:f1:b2:7c:d2:b3:4b:70:
86:ab:91:cf:6d:03:5d:32:4f:1b:07:5c:03:d6:c2:
9e:70:b5:70:dc:9d:ee:d6:5c:51:c8:20:be:e7:14:
7c:b0:00:31:72:aa:d5:a9:21:40:f1:de:c3:0f:7e:
31:61:3a:64:02:d6:05:4e:0c:0b:84:96:7d:aa:de:
62:8d:22:97:fc:60:16:7e:9a:24:ec:d2:e4:96:17:
b0:00:4d:2d:a9:9f:38:0b:f8:4e:01:b2:e9:8e:56:
4f:f0:2d:eb:96:7e:41:29:45:ac:b9:80:09:40:22:
08:14:3d:a7:b2:a1:6f:05:99:25:e7:80:8e:e0:dd:
86:0a:c9:1e:18:d4:41:a4:f4:84:8b:fa:07:45:8d:
9a:51:81:06:c1:74:2a:ef:02:7f:5c:ac:d2:1a:db:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8C:4A:F4:3A:D0:C4:6A:2C:51:5D:94:3B:7E:11:F5:7D:7C:03:5A
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/1oxK9DrQxGosUV2UO34R9X18A1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.86.0/23
Signature Algorithm: sha256WithRSAEncryption
87:05:d9:d6:60:1f:cc:80:17:fd:76:c3:1f:57:9e:d2:8b:04:
4a:8f:f8:e0:50:b5:01:7a:b3:58:73:cb:db:b9:38:c6:8a:37:
e6:af:67:c2:3b:11:4f:30:b1:3a:a5:22:24:16:91:b6:a0:50:
1b:93:a3:3f:24:40:1c:06:7a:e0:51:e9:72:34:01:36:9d:3a:
80:33:94:e2:5b:59:6a:86:0e:c5:1d:9f:6b:13:cf:ae:4a:b9:
fa:7c:4a:5c:28:88:ea:6e:a8:39:2d:cb:72:23:77:9b:f1:43:
59:a3:4f:e3:a4:f4:38:ed:4b:d7:e7:16:b6:fc:d8:25:95:07:
19:33:c1:e3:8c:f7:a9:8d:c4:ef:58:68:8c:39:af:9b:a5:b0:
1e:b6:3e:7e:6f:0e:05:3c:db:34:7a:74:31:e8:c6:d3:16:a2:
c8:e9:91:1c:4d:89:1b:3e:3a:ac:17:f9:6f:af:0a:56:30:79:
67:33:e4:2f:52:be:c5:6b:f8:17:96:79:e5:4a:99:89:68:46:
87:c2:66:6b:1e:68:6d:1c:dc:7c:ac:27:4b:07:e3:ea:a1:52:
6d:c4:c8:4d:21:a8:a8:06:22:ee:a6:cd:02:d8:88:94:44:63:
37:98:30:e0:ab:75:07:a9:ba:03:6f:0c:0d:c4:4f:a7:00:66:
ac:e6:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:26 2024 by rpki-client on console-ams.rpki-client.org