Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/fNSwW2GM-OrmIUjDkdTE7EAZnIY.roa
File: fNSwW2GM-OrmIUjDkdTE7EAZnIY.roa (raw, json)
Hash identifier: ruy4a1fMgbYvUHXqy+aWduujZyXvCMlk0SK5JQMZbqs=
Subject key identifier: 7C:D4:B0:5B:61:8C:F8:EA:E6:21:48:C3:91:D4:C4:EC:40:19:9C:86
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 018901D70A315E2292DF59EBF46DF920DA2E
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/fNSwW2GM-OrmIUjDkdTE7EAZnIY.roa
Signing time: Wed 28 Jun 2023 11:50:17 +0000
ROA not before: Wed 28 Jun 2023 11:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.113.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:d7:0a:31:5e:22:92:df:59:eb:f4:6d:f9:20:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jun 28 11:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd4b05b618cf8eae62148c391d4c4ec40199c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bf:42:b4:1b:10:3d:cb:2b:d8:03:48:63:8f:
d5:4b:64:b6:cf:88:21:5b:20:b2:9f:99:11:cc:f2:
89:7b:f1:d1:b8:21:8e:ed:4f:32:6f:93:6e:6b:f2:
a6:f5:f0:ca:97:73:09:47:a0:8e:8a:cf:85:d1:d1:
f4:16:c6:d7:65:8c:3b:aa:9f:84:ff:ea:8f:75:6f:
bb:56:0b:6f:f3:32:fb:11:b0:8c:4a:5d:a8:82:d3:
46:50:09:70:d6:87:35:0f:c5:13:8f:9b:14:ae:8e:
b3:c3:59:b3:aa:ee:26:ba:ba:f1:10:7a:cd:19:cc:
38:8a:dd:b8:5a:e2:d7:2d:e6:3e:85:d9:41:2f:72:
f1:03:8a:8d:42:c5:0b:fb:a6:0b:47:fa:81:c0:75:
9f:4c:1f:c1:d2:b1:3d:b1:7d:91:8b:34:15:7a:ad:
c7:70:3d:88:2d:0e:04:44:1d:d9:15:df:c0:ef:91:
49:59:f4:f4:5b:03:53:13:d3:8f:b3:b0:85:30:7b:
dc:76:7d:25:29:3e:f0:d5:f8:0b:72:26:dd:3d:60:
2a:eb:23:57:57:76:9d:89:ca:f3:e4:eb:79:b8:01:
9f:4f:c7:b4:c5:27:da:3a:de:80:68:9c:5c:9c:a8:
98:4e:81:a4:fc:65:09:b2:60:2d:31:b0:e3:1b:dc:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:B0:5B:61:8C:F8:EA:E6:21:48:C3:91:D4:C4:EC:40:19:9C:86
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/fNSwW2GM-OrmIUjDkdTE7EAZnIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
74:26:3a:52:7d:dc:bf:84:b7:cc:97:ad:e1:26:77:7c:00:ce:
f2:79:0e:00:11:83:da:ff:8b:a3:0d:c7:28:18:8d:80:6e:0c:
65:99:90:e2:2a:d1:88:71:cf:5d:7c:45:cc:c5:c2:8b:16:73:
fa:86:20:86:b1:44:06:1d:f5:22:88:f6:e2:7b:d1:7a:ef:58:
d8:f7:6f:d9:e1:08:19:25:eb:37:ab:f0:16:5f:d1:26:70:1f:
6a:b3:85:e4:39:57:1a:89:a3:0f:da:a4:22:ac:f6:d7:a2:04:
65:23:8b:93:8a:72:e6:43:cc:19:d4:ab:e9:ef:ce:93:73:42:
77:d3:22:0d:11:b3:6f:ba:9d:54:b8:e7:16:7d:30:80:93:7c:
e8:40:9a:f2:99:04:83:0f:0f:58:01:c4:37:e3:44:13:26:2d:
55:0d:d6:0c:8c:80:dd:84:29:8a:3b:71:38:44:47:6a:52:62:
f2:5e:80:1b:4f:ca:22:0c:1a:bb:ff:30:a3:12:8f:26:46:33:
17:e9:6f:1e:53:72:e8:88:b5:bf:ff:cb:29:e8:8f:b1:52:00:
d3:25:ee:54:ba:f9:81:38:7d:cb:b1:08:ca:34:d7:ab:b2:8b:
3f:94:ff:71:0e:34:9c:30:9c:5e:2f:74:3f:23:7e:0d:fa:df:
a6:e1:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:22 2024 by rpki-client on console-fra.rpki-client.org