Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/s8dlm7l7hwfEEwGTGJj-g20HF-4.roa
File: s8dlm7l7hwfEEwGTGJj-g20HF-4.roa (raw, json)
Hash identifier: 6dCe/VKSj5CMBg4FJ6DDns6fzARU9Cl1VBsk0jQprNI=
Subject key identifier: B3:C7:65:9B:B9:7B:87:07:C4:13:01:93:18:98:FE:83:6D:07:17:EE
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 0185967DD4893F4BB650FDDE23E278C7D815
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/s8dlm7l7hwfEEwGTGJj-g20HF-4.roa
Signing time: Mon 09 Jan 2023 12:25:06 +0000
ROA not before: Mon 09 Jan 2023 12:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51660
IP address blocks: 84.1.44.0/24 maxlen: 24
145.236.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:7d:d4:89:3f:4b:b6:50:fd:de:23:e2:78:c7:d8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 9 12:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3c7659bb97b8707c41301931898fe836d0717ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:08:fe:e6:fc:42:7d:d5:b0:aa:3d:6f:d6:
cb:ac:2f:d6:2e:16:61:59:43:c3:64:c7:24:bc:b7:
95:ee:77:50:0f:cf:a2:fc:7e:9d:56:8e:c5:c9:e7:
b9:28:7e:89:c4:bc:8b:af:89:ed:cd:c4:be:6b:50:
79:15:e2:10:00:bc:31:4c:9d:3e:dc:65:4e:55:b4:
c1:26:4b:43:2c:46:33:f9:04:bd:b9:64:92:34:d8:
23:41:cb:2c:c5:a3:9a:0d:7a:3c:ce:e5:b0:16:b3:
d6:dc:bf:15:66:50:45:18:f6:e8:b6:a5:97:44:e1:
ef:17:37:7c:9f:a3:c0:a5:84:a7:3a:3e:4e:00:9c:
85:10:70:20:34:b7:ca:9a:fc:18:e2:34:30:25:50:
4b:5a:81:2f:ca:8d:ea:e4:26:81:94:10:56:4f:76:
66:24:6c:b7:08:10:0b:d7:b0:17:73:95:54:b6:48:
30:bd:31:bb:35:01:7c:6e:75:ff:67:e3:1f:19:b9:
bf:aa:48:d0:8c:af:06:01:93:9b:8b:71:92:d1:28:
b5:31:e2:a7:ba:c4:b9:59:a4:92:25:1c:1c:8c:07:
2d:c8:54:54:2a:87:7c:73:bd:a6:94:3e:52:f7:4e:
46:c4:ed:9f:ea:cb:92:fc:96:ef:a5:f6:95:42:13:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:65:9B:B9:7B:87:07:C4:13:01:93:18:98:FE:83:6D:07:17:EE
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/s8dlm7l7hwfEEwGTGJj-g20HF-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.44.0/24
145.236.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:49:38:51:e7:b5:33:13:87:87:67:60:8d:b8:3b:1c:ab:03:
36:fe:21:3a:53:07:4c:29:17:da:f6:34:22:ae:a7:fc:ec:ac:
58:e4:61:b0:b4:5c:9e:6d:87:41:18:5c:c5:ca:59:fa:1e:3e:
2b:4e:47:6e:24:a0:5f:fc:ae:92:22:22:52:19:f6:69:be:c8:
3c:3d:6a:ae:84:6b:36:96:b1:b3:5f:f3:01:b9:26:8e:2f:d3:
9f:37:34:6e:40:b0:9e:04:58:eb:e7:f8:05:90:5b:6c:04:b9:
89:af:aa:48:f7:fb:f8:28:2d:bd:e3:07:46:f3:43:75:e8:42:
71:ce:a0:7f:3c:96:36:55:04:b9:64:b0:cb:ad:44:dc:0b:8a:
2f:40:89:b7:17:d1:a4:f7:f0:ae:a6:0f:c8:64:b1:5c:90:d8:
76:f5:5d:69:bf:16:06:53:ba:3f:cb:3c:92:53:0c:3d:02:89:
37:07:56:ce:67:4c:f5:74:57:2a:d8:29:6c:5a:a2:89:39:cd:
36:75:22:07:45:2d:58:cd:74:ea:31:d3:64:81:2b:2d:83:33:
39:ea:fd:69:94:78:dc:f6:9a:7f:80:2e:2d:bd:d7:d7:61:f3:
3f:f7:da:9d:12:b4:4e:32:50:b5:cc:cf:f7:6b:da:fd:1e:61:
1a:f1:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:04 2024 by rpki-client on console-fra.rpki-client.org