Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/B9sI_8-FsL6fxc6o4tVWWvqmx-8.roa
File: B9sI_8-FsL6fxc6o4tVWWvqmx-8.roa (raw, json)
Hash identifier: TxFeu4/ukn2p9Zrk+oCwX+CR0vjoKs27mg+81cIl++g=
Subject key identifier: 07:DB:08:FF:CF:85:B0:BE:9F:C5:CE:A8:E2:D5:56:5A:FA:A6:C7:EF
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018CC8021EF2FCEF03664186442A1F910BF7
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/B9sI_8-FsL6fxc6o4tVWWvqmx-8.roa
Signing time: Tue 02 Jan 2024 02:30:31 +0000
ROA not before: Tue 02 Jan 2024 02:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49549
IP address blocks: 193.0.230.0/24 maxlen: 24
2a0f:cdc4::/32 maxlen: 32
2a0f:cdc2::/32 maxlen: 32
2a0f:cdc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 12 Feb 2024 17:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:1e:f2:fc:ef:03:66:41:86:44:2a:1f:91:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 02:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07db08ffcf85b0be9fc5cea8e2d5565afaa6c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:5f:fa:36:9b:f1:e8:58:d2:6a:54:14:93:
cf:c6:fe:bb:06:20:38:b3:da:94:68:a1:66:42:ac:
e1:ea:5d:3a:3d:48:29:dc:2f:86:16:03:e5:d4:62:
17:b2:3b:f7:25:12:2d:ed:a8:0a:16:f1:20:32:d7:
ea:5f:fa:ff:f5:b2:76:17:f0:6e:d1:a0:1f:71:5e:
58:64:72:1a:d0:87:9e:d9:92:64:cb:40:ad:7a:17:
99:70:34:57:24:1f:cb:40:c1:9d:af:ec:0b:12:46:
4d:b8:bd:57:d2:21:11:e0:56:51:7e:fc:a0:a5:56:
8e:a6:0c:14:f1:7c:0d:ce:52:2a:63:11:ac:a1:bc:
98:b0:cc:f7:23:58:31:16:29:5b:12:ad:19:aa:3e:
58:c7:5a:79:82:8d:17:75:b5:c5:60:21:0e:33:c8:
5d:97:af:7b:cf:5a:87:7b:8f:f4:88:69:60:a5:c2:
97:95:6f:18:13:eb:95:3d:6a:07:a1:d0:07:c3:10:
66:d1:e9:94:f7:70:28:20:37:b7:b2:0c:1d:10:76:
11:b1:75:5e:ef:4c:62:aa:af:4d:18:95:65:04:6e:
b1:99:78:43:aa:1f:39:a3:3e:3c:f0:4b:f3:cc:8a:
1e:25:4f:4f:e7:96:fc:64:f2:12:df:f6:ca:46:fc:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:08:FF:CF:85:B0:BE:9F:C5:CE:A8:E2:D5:56:5A:FA:A6:C7:EF
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/B9sI_8-FsL6fxc6o4tVWWvqmx-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.230.0/24
IPv6:
2a0f:cdc2::/32
2a0f:cdc4::/31
Signature Algorithm: sha256WithRSAEncryption
89:f3:94:43:03:d5:71:b7:07:8d:88:3f:ea:1e:c4:9e:6e:f7:
a8:15:26:14:a5:ee:3a:9d:31:51:9e:42:48:a5:f2:34:d9:9e:
e2:22:4a:e8:08:ed:0e:4e:f4:67:8c:ed:fd:66:b2:f4:70:c1:
48:fe:95:0a:56:bd:5f:d9:c7:37:25:48:a9:b3:1b:6b:70:f5:
c3:d8:4f:87:ae:c1:bc:dc:8b:2f:fa:68:b5:16:8d:5b:7b:8f:
40:62:6b:c0:eb:76:29:d1:40:09:11:6f:0e:65:71:f8:ae:ed:
3b:25:13:7b:a6:d7:eb:9c:73:46:f1:8f:20:d3:71:9b:f3:80:
de:05:84:09:e3:12:3a:38:54:91:a6:41:df:06:98:b2:c5:b6:
2d:b4:df:a8:94:6f:bc:93:d8:10:b1:1f:04:21:ec:37:4b:49:
a2:f6:0d:f5:f4:79:f1:29:d0:20:e6:9a:67:9a:b7:07:1e:31:
8b:63:53:98:81:a0:f4:75:88:f8:d0:62:3a:ca:f0:f2:ab:c8:
72:90:fe:59:78:e3:6e:6a:4d:57:15:10:7e:d7:92:31:05:9e:
d1:81:9f:21:4e:ee:2a:ba:14:72:a1:cd:dc:5d:ad:f4:ef:30:
96:03:b8:12:b2:a2:2c:7a:71:ab:8e:43:56:d3:dc:ff:c5:ad:
c0:dc:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org