Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/ivSac8Ueey1ErFYyyuU03acyKG8.roa
File: ivSac8Ueey1ErFYyyuU03acyKG8.roa (raw, json)
Hash identifier: zXftLTTPgx4P3T45N4ZweJObmMVtL6HT40F5Sl/HWwE=
Subject key identifier: 8A:F4:9A:73:C5:1E:7B:2D:44:AC:56:32:CA:E5:34:DD:A7:32:28:6F
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 0188772B96DC23211C706CF32E54A12DDC45
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/ivSac8Ueey1ErFYyyuU03acyKG8.roa
Signing time: Thu 01 Jun 2023 13:35:25 +0000
ROA not before: Thu 01 Jun 2023 13:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 185.113.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:2b:96:dc:23:21:1c:70:6c:f3:2e:54:a1:2d:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jun 1 13:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8af49a73c51e7b2d44ac5632cae534dda732286f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:68:ec:e9:14:48:ad:3b:4f:c2:e4:ce:a2:
22:ff:8c:b5:73:e8:de:f3:15:2b:87:f8:d6:12:e7:
7b:85:ad:0f:cf:fe:45:82:73:0e:1e:a9:34:82:b9:
3d:0b:5d:38:fd:9c:e0:76:30:68:a7:a1:6c:f7:e7:
fa:a0:f1:27:27:97:b0:39:00:7b:4a:99:e2:76:04:
93:0d:97:61:b1:c3:c3:7a:3f:80:b1:73:47:72:86:
e5:d2:db:80:63:74:37:7a:2b:1f:0d:01:d5:75:8e:
b2:e9:85:87:1b:d8:59:21:e3:97:56:52:77:6d:19:
9a:a3:9a:1e:ba:09:fb:54:d6:a3:05:05:82:98:10:
e5:de:4b:1c:59:0f:35:bf:01:2b:f7:30:e0:89:e5:
ca:16:d3:c5:9a:a2:d3:d7:cb:9e:a2:ff:65:c3:21:
44:7d:30:6d:47:1e:af:d8:96:f7:b4:d4:c0:61:7e:
a5:c4:c6:a7:27:66:43:19:2f:e1:41:35:3d:62:e4:
bb:13:cb:25:3e:8c:ea:cf:4d:12:c7:8f:bb:92:1b:
0c:4a:b6:f0:c2:c6:80:ea:63:a4:19:41:b6:cd:d1:
1c:61:07:e0:84:97:ff:4c:2a:fb:c5:3b:f8:17:09:
ba:af:4f:40:02:5e:16:6a:fd:54:cc:d3:61:b9:89:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:9A:73:C5:1E:7B:2D:44:AC:56:32:CA:E5:34:DD:A7:32:28:6F
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/ivSac8Ueey1ErFYyyuU03acyKG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
32:dd:85:e2:a7:09:2f:da:2f:d2:0a:bf:b0:69:0e:8a:85:9f:
0a:98:07:a7:4d:aa:17:83:15:96:e4:e0:a8:a1:0f:24:8f:d6:
ba:61:0c:c3:85:5c:57:6c:21:08:db:26:fc:fd:77:53:5d:90:
65:0c:b4:27:74:fd:5c:bb:48:b1:75:cf:71:e7:d2:af:8b:ab:
ec:9e:82:e8:bc:db:12:d0:fc:c8:0e:59:8e:96:d9:68:d5:37:
d3:d1:a9:72:de:c4:f4:88:e3:0c:18:d9:49:e1:1a:ef:f5:8a:
32:d6:2d:8a:be:3c:ce:82:b8:0e:0c:79:31:21:85:fd:92:8e:
f7:85:d1:54:79:9f:9d:cc:f8:8d:35:7d:73:44:72:5b:ba:9d:
54:67:65:31:1c:83:fd:5b:fc:3a:c0:91:a4:7f:42:6f:2a:29:
f0:db:5a:c8:cf:b7:37:58:9c:ce:b8:6f:4e:73:a3:7b:59:99:
43:e5:36:51:e4:68:9b:c2:ff:eb:57:36:0c:1a:39:a9:b4:b1:
97:3a:9d:d5:ff:a2:b3:a1:78:73:04:fe:8b:81:e2:08:bf:26:
d4:c9:52:de:41:22:79:cc:e5:b4:e4:12:c1:e4:e6:e9:ae:ca:
1c:45:ad:4c:6e:2e:6c:23:3b:ef:49:f2:7f:68:e6:21:b9:6e:
9e:6f:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-ams.rpki-client.org