Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8rtJf1dAuJjZcCO14wbAzrWin30.roa
File: 8rtJf1dAuJjZcCO14wbAzrWin30.roa (raw, json)
Hash identifier: bGsZBuCFiepKaXQ38GSbaARzQ7hOej8TQgZ+dzOJ8OA=
Subject key identifier: F2:BB:49:7F:57:40:B8:98:D9:70:23:B5:E3:06:C0:CE:B5:A2:9F:7D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01877AFC5377B8B9C41AFD7AF601705A40D9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8rtJf1dAuJjZcCO14wbAzrWin30.roa
Signing time: Thu 13 Apr 2023 14:19:29 +0000
ROA not before: Thu 13 Apr 2023 14:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:fc:53:77:b8:b9:c4:1a:fd:7a:f6:01:70:5a:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 13 14:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2bb497f5740b898d97023b5e306c0ceb5a29f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:4a:20:98:e6:e0:69:98:f4:eb:c5:79:a3:
ce:f3:62:d6:63:68:43:7d:57:3b:c5:d1:b0:0a:61:
96:47:03:62:07:71:90:b1:6e:4f:ad:73:6b:f6:9d:
af:08:4e:cc:61:88:72:7f:f8:a1:94:06:9b:79:4c:
7b:ca:bd:a6:0a:74:8c:b5:17:8b:15:dc:a0:d3:35:
bf:70:22:86:ce:db:71:e5:71:1b:6a:58:56:43:db:
12:78:66:2c:cd:a0:2d:3f:fe:f5:51:df:13:f1:b6:
28:86:b2:2a:09:19:d8:79:c0:8c:8a:16:e2:03:9f:
21:ef:ff:42:f5:86:0f:3a:b3:9e:49:0a:da:f8:1f:
4f:47:5c:db:99:1a:85:cc:1d:93:bf:59:7c:6c:d5:
a7:32:76:30:de:6f:4f:8e:0e:d6:d7:1f:98:5a:00:
fc:4c:13:6e:de:cd:86:79:de:c5:11:c9:0f:08:ff:
45:d6:d5:cb:d6:52:e2:16:d3:40:ba:a6:e5:6a:94:
3f:96:68:2c:00:47:9d:9a:17:12:e3:f0:b5:8d:9d:
bf:73:c5:f9:35:01:70:c0:73:46:a0:c8:c8:2d:58:
2b:67:88:84:f2:b1:dc:07:9b:be:16:ce:f8:35:d4:
40:d2:6d:22:54:4c:50:9f:82:f5:f3:04:d3:d0:2f:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:49:7F:57:40:B8:98:D9:70:23:B5:E3:06:C0:CE:B5:A2:9F:7D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8rtJf1dAuJjZcCO14wbAzrWin30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:11:b0:6f:13:55:58:6f:ba:28:5f:dc:8e:18:34:2d:aa:9a:
64:74:e2:0a:49:2d:91:31:b2:89:91:0b:fd:45:be:d8:81:62:
df:96:4c:a8:b3:39:c6:fa:46:1d:a8:0b:70:c3:b4:88:d3:d8:
8c:2d:68:b9:00:b4:f6:66:78:16:33:f1:ec:64:99:05:f2:5b:
51:08:a6:a4:55:c6:78:fc:44:7c:d8:fb:41:85:df:eb:0c:42:
f8:98:4b:17:7f:3c:fe:44:a5:38:40:d7:4a:44:e9:ba:8c:ed:
23:4a:b8:ac:ce:24:9d:99:30:ae:c8:21:17:1c:b1:a4:74:f4:
a4:7e:17:45:1f:1c:27:c3:36:8d:43:8b:ea:4f:16:4c:90:9d:
05:21:ae:1d:f7:61:84:8f:7d:8b:f9:87:85:3f:dc:55:3d:5d:
d4:29:75:b2:0b:16:69:94:eb:40:64:f3:3a:ce:88:d4:18:7a:
24:40:29:d6:b5:f5:54:b5:21:3d:03:80:b2:73:05:99:f9:90:
7f:4a:65:44:c9:99:38:29:f5:50:be:e1:5a:32:32:4a:af:61:
6f:a7:03:23:3a:3c:28:db:61:07:2a:d6:80:d6:55:bb:73:8b:
1d:6b:ab:30:09:dd:4c:4c:7a:b8:bb:d9:56:40:98:56:18:f7:
bc:28:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org