Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/v16jYsMxjNcur5YwOeoOC1_jErc.roa
File: v16jYsMxjNcur5YwOeoOC1_jErc.roa (raw, json)
Hash identifier: CEeQu1bZRwraqh8dDXLq001hqU2qHRS/bY1nTCoeRWE=
Subject key identifier: BF:5E:A3:62:C3:31:8C:D7:2E:AF:96:30:39:EA:0E:0B:5F:E3:12:B7
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 01856FC263D5C736366B8E9052CB7616DCB7
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/v16jYsMxjNcur5YwOeoOC1_jErc.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48472
IP address blocks: 94.247.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 29 Sep 2023 05:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:63:d5:c7:36:36:6b:8e:90:52:cb:76:16:dc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf5ea362c3318cd72eaf963039ea0e0b5fe312b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:ba:15:e9:52:39:a0:d0:4e:3e:e2:93:b1:
05:e5:ae:11:90:87:e7:56:2a:85:bd:df:d8:20:ee:
15:0e:90:98:29:22:ef:5c:15:99:67:6f:87:06:c1:
3c:c8:0d:f2:0d:ab:d2:1e:79:32:22:90:03:18:81:
e8:ce:b7:38:4a:95:d6:66:15:dc:08:69:6c:d7:01:
69:b1:ba:fc:e1:6d:dc:70:17:92:be:e8:fe:f0:d1:
58:c7:55:25:24:f3:4e:f7:7f:41:a1:dd:bd:e1:ef:
ff:b6:34:1b:c7:ff:c8:9f:1d:a5:0b:e9:fe:e5:55:
09:03:5d:e2:b7:76:a3:bc:2c:1e:fb:f4:ab:20:d7:
be:dc:d1:a4:5a:90:2f:2e:22:6a:b6:f7:02:17:c1:
6b:ee:70:08:01:40:e5:26:c4:7c:88:9b:cc:d8:3b:
da:83:91:7f:71:29:ae:35:d3:7c:ba:fb:05:6f:ef:
14:74:53:9a:89:b9:69:25:16:35:33:fd:be:96:89:
27:35:a2:48:46:61:15:de:5f:21:fd:a9:57:18:21:
88:5a:ce:84:e0:db:17:9e:f8:c0:6e:62:e2:b8:f6:
38:3f:34:08:a5:6e:a6:93:02:ee:24:99:47:85:c5:
fd:f9:59:d3:d0:fa:d6:2c:35:50:76:bb:55:27:75:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:A3:62:C3:31:8C:D7:2E:AF:96:30:39:EA:0E:0B:5F:E3:12:B7
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/v16jYsMxjNcur5YwOeoOC1_jErc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.104.0/23
Signature Algorithm: sha256WithRSAEncryption
08:eb:85:43:f9:b9:be:9f:14:72:c6:c8:de:eb:10:7e:a3:43:
ee:0b:09:ec:2a:93:82:3a:12:61:74:09:58:6a:57:a0:71:72:
ae:01:71:bd:89:4f:d5:70:30:d5:04:c7:de:85:f1:92:9a:a8:
ec:26:77:28:b0:5a:93:a6:7e:db:8a:4e:b4:47:5d:3f:bf:9d:
b2:84:c3:de:38:56:5b:65:d6:6a:6d:40:60:2b:b3:0d:1a:8b:
a7:bf:8b:d3:99:6d:7b:71:6c:ec:7b:9b:7d:e6:c3:2a:49:8c:
91:8f:6e:91:ff:5e:b5:7f:f5:d2:8e:5e:a3:ed:7b:30:09:63:
e1:97:1c:0b:ac:de:6f:71:63:98:bd:57:5f:02:ec:4e:b8:0b:
32:49:68:be:1a:e8:8a:22:32:f1:a0:c7:e2:40:c9:c6:cd:81:
c2:1a:12:b7:b8:d9:d4:6c:7a:ca:03:44:a1:60:4a:b4:a7:b6:
ea:bf:80:1e:b8:7b:7b:64:13:46:c1:b2:e7:3b:2a:cb:fb:85:
42:2b:4c:84:54:17:04:59:37:b2:8c:bd:5a:b0:24:22:7d:b4:
cb:03:bf:41:a9:c1:d1:ad:75:45:47:c4:dd:da:3c:cc:f8:1e:
d3:05:19:c9:45:fa:73:fd:7e:0b:41:33:35:45:44:d0:52:01:
0c:30:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:50 2024 by rpki-client on console-fra.rpki-client.org