Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/r2ph_i_Vox-6FzxbCBZJce5yCOI.roa
File: r2ph_i_Vox-6FzxbCBZJce5yCOI.roa (raw, json)
Hash identifier: vc3CNB91XeeaUiNfdn0tTz3WcjUVhHYAkDSBrO/73/o=
Subject key identifier: AF:6A:61:FE:2F:D5:A3:1F:BA:17:3C:5B:08:16:49:71:EE:72:08:E2
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 018570E755024966F25E75C4BDB066C3D2B3
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/r2ph_i_Vox-6FzxbCBZJce5yCOI.roa
Signing time: Mon 02 Jan 2023 05:14:46 +0000
ROA not before: Mon 02 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8253
IP address blocks: 192.108.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:55:02:49:66:f2:5e:75:c4:bd:b0:66:c3:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Jan 2 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6a61fe2fd5a31fba173c5b08164971ee7208e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:9a:3b:c9:f4:c1:85:20:d3:22:f0:64:d8:
a5:a9:49:10:f1:99:f0:34:72:de:82:76:b0:f3:87:
15:7d:93:08:37:80:16:fc:af:1f:c5:be:33:e0:80:
43:7e:20:7b:10:18:45:3f:a4:69:eb:0c:0e:2b:b2:
05:26:4a:84:20:ec:7b:29:f6:19:b2:62:73:45:d7:
73:86:1d:98:e8:69:58:77:d9:39:fe:e4:c2:9a:33:
08:9d:f1:a9:c6:b6:ca:fb:d1:30:3f:aa:5f:f5:a5:
fc:22:10:f2:0c:5f:2e:2a:9b:d8:c0:00:cc:46:df:
5e:83:df:8c:73:bd:2f:2c:4f:54:05:fa:65:35:96:
bf:97:cd:80:f8:70:62:27:b4:56:dd:c1:02:f0:60:
a6:dc:2c:a2:ea:e6:7c:f1:af:31:8a:ca:d3:27:81:
dd:ad:bc:79:bc:0f:ae:fd:fb:96:c1:38:5e:50:b1:
e6:ee:ad:5e:b1:2d:ee:00:b8:b2:11:36:4f:d0:77:
f1:e7:f6:77:7b:b2:21:7e:84:08:1d:da:ab:5e:32:
43:66:f4:a4:bb:da:34:28:a2:53:dd:f6:c9:9f:8d:
f2:3d:18:97:8b:c3:a0:bd:1a:0b:10:99:61:7a:c0:
7a:9a:6d:3f:e0:4c:e3:0c:86:3b:ac:ce:ed:6b:19:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:61:FE:2F:D5:A3:1F:BA:17:3C:5B:08:16:49:71:EE:72:08:E2
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/r2ph_i_Vox-6FzxbCBZJce5yCOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4a:28:b3:db:b1:9a:fd:45:25:f1:bf:a7:87:7f:68:dc:a2:
42:08:33:c3:f8:d7:94:1f:cc:ed:e9:fd:60:6e:88:81:fb:f0:
5a:4e:89:e5:72:96:3b:fd:b7:07:ad:12:5d:09:f2:38:cd:00:
2f:b9:e4:1a:13:8c:55:7b:43:3e:15:89:0b:8f:e1:3f:50:ba:
ab:90:b7:3b:11:1d:1e:ad:0f:25:ad:41:51:0f:c9:33:16:3a:
1b:85:74:17:d7:70:c4:14:50:83:c2:9c:d3:32:87:78:bc:5e:
64:12:b6:45:95:a1:ad:b7:8e:a0:df:53:25:60:0f:75:65:10:
54:b8:91:17:86:70:d3:b3:b3:c8:5d:87:ab:fc:27:73:c6:af:
40:e2:db:c4:ec:a0:a2:3a:4b:09:7c:7f:0d:05:51:39:58:05:
5c:e0:45:57:12:12:54:51:b4:18:9e:3f:bf:34:87:a6:b7:ae:
2e:b6:2c:a1:ae:3c:dd:5f:2c:0f:72:05:a6:2f:06:96:45:c1:
8b:d0:8c:00:70:91:ac:cc:8e:10:3e:9a:cd:11:3f:d8:ee:88:
ba:b1:15:f5:a3:2d:f0:2a:45:99:d3:0a:a8:25:9b:c5:5b:d1:
a2:d1:7a:10:1e:ea:eb:85:f0:95:6a:2b:a3:c5:c5:4c:5f:65:
8e:f3:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:41 2024 by rpki-client on console-ams.rpki-client.org