Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/8kRUhpUvHx180wdaxvpa_rw0l3Y.roa
File: 8kRUhpUvHx180wdaxvpa_rw0l3Y.roa (raw, json)
Hash identifier: jef9kF9//NkrcxlCc89GdGAJZ/Ly6551U+fOv58X2jw=
Subject key identifier: F2:44:54:86:95:2F:1F:1D:7C:D3:07:5A:C6:FA:5A:FE:BC:34:97:76
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EFD11C26A30B4D68C6ADEB2D6713B
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/8kRUhpUvHx180wdaxvpa_rw0l3Y.roa
Signing time: Sun 01 Jan 2023 08:24:51 +0000
ROA not before: Sun 01 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57691
IP address blocks: 93.174.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:fd:11:c2:6a:30:b4:d6:8c:6a:de:b2:d6:71:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2445486952f1f1d7cd3075ac6fa5afebc349776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:d9:5c:28:dd:95:14:e3:40:bc:b9:78:f1:
4e:aa:3f:2a:ae:b6:e1:b3:c4:05:5c:3f:aa:0d:11:
fa:2b:bc:5c:e0:8a:e8:78:9d:95:cc:43:ee:0f:4c:
a5:f0:d8:11:ac:cc:cc:01:ea:c0:33:ee:65:09:fb:
16:07:4a:f5:0e:6f:e2:45:76:cb:31:cd:bd:fa:e6:
37:4e:7d:6f:7b:e3:49:83:24:ef:93:34:24:fa:31:
99:d9:35:aa:95:ad:25:4b:88:37:db:96:75:dd:4b:
84:f4:f0:06:98:f5:55:b1:ab:84:03:60:e1:0c:64:
8f:c3:70:0b:16:36:81:c1:2c:ec:f7:67:57:4e:15:
7c:97:4e:7e:ed:47:04:4e:82:0d:af:c6:17:ba:89:
fb:9a:b6:c1:b7:89:bc:5e:41:fa:ca:1e:d0:a2:d2:
5e:cd:dc:37:d9:01:e2:28:c0:ab:b4:8d:1f:d9:cf:
06:a7:29:ce:5e:e7:65:c7:ca:2f:f7:90:6d:73:da:
1f:a1:b5:67:f1:13:89:81:6d:63:8a:56:2d:ca:75:
22:e3:db:c3:aa:48:f7:cb:92:6a:24:e8:b3:0b:7d:
b7:2d:ad:22:f5:70:77:ac:25:09:0a:cd:f6:46:f0:
1b:7c:5d:7a:59:55:35:4b:fa:62:f3:6c:11:9a:69:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:54:86:95:2F:1F:1D:7C:D3:07:5A:C6:FA:5A:FE:BC:34:97:76
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/8kRUhpUvHx180wdaxvpa_rw0l3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.162.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d5:0b:9a:c5:01:f0:64:2f:9b:57:88:8f:39:c3:0f:1b:e5:
ab:ed:be:9c:c1:51:d2:12:4f:31:53:d9:d0:88:9a:08:8b:36:
c2:b8:0c:50:1b:7f:1e:43:a4:64:ff:44:63:ab:8e:8a:20:32:
0d:79:4a:76:f7:5e:96:86:85:a5:a7:ca:16:5c:7d:df:bd:3a:
4c:00:35:60:55:83:ae:e8:2e:98:68:7d:92:1c:f7:f6:01:e7:
1c:53:4e:c2:58:53:3d:3c:83:f3:d4:4c:91:34:8f:ff:46:0a:
60:05:13:c4:6c:e9:21:48:b6:c2:5b:96:30:b6:08:b5:d8:52:
15:87:06:80:72:39:0d:df:c2:1b:67:6c:62:60:02:a1:02:ea:
68:33:90:2a:5a:f4:09:28:7d:c8:79:3f:b6:63:6f:eb:ed:0f:
fd:61:61:be:fc:11:a1:59:9c:11:25:8f:12:be:ad:2d:44:3a:
71:df:b1:95:25:42:f6:b1:78:43:60:cd:57:46:9c:cc:86:99:
83:57:b0:be:f0:45:d4:2e:0e:1c:94:0e:3c:c8:25:e1:c4:d2:
69:73:c3:5f:dc:2a:3f:d0:22:7d:93:0a:6a:db:f5:57:c1:ad:
9b:10:ac:2d:c6:b3:e7:eb:a3:2d:5c:96:ca:d4:b6:16:e2:c2:
cb:6a:7a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org