Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/a8NsQkv969_mktsQUm506A79-xo.roa
File: a8NsQkv969_mktsQUm506A79-xo.roa (raw, json)
Hash identifier: Rgk7s7n/VrxtFWBUiMv3mZAnMNKGUlOFnopyJSElnjY=
Subject key identifier: 6B:C3:6C:42:4B:FD:EB:DF:E6:92:DB:10:52:6E:74:E8:0E:FD:FB:1A
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305A335BB21F63C03AC7087DBE212C
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/a8NsQkv969_mktsQUm506A79-xo.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8990
IP address blocks: 195.228.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5a:33:5b:b2:1f:63:c0:3a:c7:08:7d:be:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bc36c424bfdebdfe692db10526e74e80efdfb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:c6:14:51:6d:8b:1e:1a:c5:8a:17:8b:ef:
d5:6a:3f:3d:22:8c:04:f4:0c:93:76:3b:c2:e1:d6:
92:49:30:c1:bb:a1:3a:66:86:84:9d:c6:b2:c4:7a:
83:a4:41:de:63:af:10:7b:cf:50:9b:8b:a6:7c:4e:
d5:0e:7d:cc:98:0d:9e:11:6e:79:6f:5e:b4:bb:0d:
a8:25:a3:e8:70:0c:8c:f6:ec:88:90:f6:5d:39:33:
c8:f6:11:3d:06:fb:3f:3d:14:fd:d6:e3:87:f2:a8:
fe:32:3f:5f:ae:b3:cd:0a:fa:65:46:40:6f:f5:8b:
4e:12:9c:84:21:83:30:8a:97:85:b2:8d:aa:9c:52:
97:86:64:dc:28:0d:e4:c4:c7:49:75:1f:42:f3:7a:
1f:c0:c8:3f:8f:73:46:cc:23:23:4d:63:3b:47:e0:
57:76:51:1e:29:d4:5b:a9:d2:c3:96:ab:f8:ef:3e:
1a:2f:ae:11:b6:a2:2a:ba:9c:d5:97:82:1d:fe:00:
84:b7:97:bb:14:b7:bc:63:01:e7:3b:53:30:f5:16:
a0:b1:9c:92:43:e8:35:e3:17:ba:2e:dd:52:1c:af:
ce:f1:c7:9b:cb:39:ec:a7:3f:93:8f:03:28:df:87:
6f:63:a6:26:87:1d:aa:c5:ad:38:96:35:1b:c4:05:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C3:6C:42:4B:FD:EB:DF:E6:92:DB:10:52:6E:74:E8:0E:FD:FB:1A
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/a8NsQkv969_mktsQUm506A79-xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:08:39:7a:d0:63:ba:16:8f:e0:7f:ff:6e:aa:53:ba:31:93:
a6:a7:65:eb:e2:0d:aa:d9:bc:df:3a:28:2a:91:fa:5b:ac:e2:
f8:90:24:73:41:d2:83:8a:42:35:59:a5:f1:a0:df:45:02:23:
d3:a8:dd:c9:c5:33:0e:53:0b:b8:82:54:e4:25:f3:31:4c:e0:
50:19:dc:cd:26:c4:f9:25:ec:58:14:60:ee:1c:00:e5:67:bf:
51:a1:b3:db:5d:a0:ac:9d:ba:47:db:ce:6c:0a:32:69:e8:5c:
25:93:4f:e4:f1:8b:e0:cd:13:a2:47:f4:a4:2e:14:55:fa:73:
4c:74:94:02:6e:41:ef:21:7b:80:61:94:31:1f:f6:d1:c7:89:
c0:fe:1c:56:89:6d:a7:2b:91:4b:6c:ba:31:b0:b8:12:55:98:
51:d9:62:ec:c3:c7:75:97:85:3c:a9:76:6d:56:80:07:fc:a6:
07:09:4c:34:11:1f:a4:58:90:a1:4b:90:a1:8a:dd:91:e9:5c:
cc:c2:89:67:20:4f:16:1d:41:9d:95:0f:9f:04:dd:24:68:d1:
99:58:d7:bc:9e:ea:cc:89:c3:3c:ec:b3:4b:38:f1:c9:94:0f:
fa:f3:d2:8d:b1:38:bc:a6:61:e4:aa:6e:87:4d:49:6d:c3:85:
38:dd:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org