Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/wCLwRfhkt9PJ3-LXRYL8hd1jfoI.roa
File: wCLwRfhkt9PJ3-LXRYL8hd1jfoI.roa (raw, json)
Hash identifier: 8xbCNHrTfMWl4JjYdhBItKHcPIkw1G9wsk/iI0To92Q=
Subject key identifier: C0:22:F0:45:F8:64:B7:D3:C9:DF:E2:D7:45:82:FC:85:DD:63:7E:82
Certificate issuer: /CN=ae8b7ccf10bb849ff848e2841bb7c052812a501d
Certificate serial: 01857DC4671B452BBB494674DE69D0BD995B
Authority key identifier: AE:8B:7C:CF:10:BB:84:9F:F8:48:E2:84:1B:B7:C0:52:81:2A:50:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rot8zxC7hJ_4SOKEG7fAUoEqUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/wCLwRfhkt9PJ3-LXRYL8hd1jfoI.roa
Signing time: Wed 04 Jan 2023 17:11:41 +0000
ROA not before: Wed 04 Jan 2023 17:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31019
IP address blocks: 194.213.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:c4:67:1b:45:2b:bb:49:46:74:de:69:d0:bd:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8b7ccf10bb849ff848e2841bb7c052812a501d
Validity
Not Before: Jan 4 17:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c022f045f864b7d3c9dfe2d74582fc85dd637e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:b8:8e:7a:a0:82:7e:d8:f0:68:64:1f:a7:
ce:c9:1c:70:aa:0d:d8:de:c5:a0:3e:e3:c6:a4:2d:
0b:e7:b5:f9:4d:9f:c5:77:9a:6f:9c:b4:8d:94:45:
73:00:b5:21:20:bc:c3:20:fc:29:f7:57:56:a4:f2:
6a:ac:4b:18:09:f3:f4:b3:db:af:21:5f:68:7d:eb:
64:9a:40:25:86:0a:dc:97:df:7c:76:6e:e4:58:ae:
c5:bc:0d:3e:d1:3c:aa:9a:44:c5:d9:d2:e5:29:a4:
9f:f7:3c:24:c5:6b:60:1e:43:7b:e4:42:22:46:72:
85:36:53:67:fd:02:2f:75:36:6f:88:24:2b:b7:13:
37:d0:44:c9:70:00:45:e6:78:fc:e3:f9:67:ff:38:
97:8a:76:fa:04:39:3e:cc:a4:63:a4:75:58:7a:1b:
31:ed:d1:f8:4e:5a:fc:4a:26:fe:21:02:ed:5d:c2:
7c:66:3e:58:ba:cd:70:4f:b4:b5:f7:1e:e8:96:08:
80:dd:36:1f:ec:a5:02:83:9e:d2:e8:08:70:26:dc:
b9:4d:f8:89:26:88:70:37:d9:b9:be:8c:6b:e4:47:
9c:aa:36:4d:e7:33:4a:ba:a5:64:ea:c5:c3:cd:4f:
ed:80:06:e0:95:6f:c5:16:0e:b3:d0:73:b5:bc:34:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:F0:45:F8:64:B7:D3:C9:DF:E2:D7:45:82:FC:85:DD:63:7E:82
X509v3 Authority Key Identifier:
keyid:AE:8B:7C:CF:10:BB:84:9F:F8:48:E2:84:1B:B7:C0:52:81:2A:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rot8zxC7hJ_4SOKEG7fAUoEqUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/wCLwRfhkt9PJ3-LXRYL8hd1jfoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b078e-908a-41a9-b637-3db4a1d4b42c/1/rot8zxC7hJ_4SOKEG7fAUoEqUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.108.0/24
Signature Algorithm: sha256WithRSAEncryption
23:71:5d:81:d3:a8:e7:f6:ad:41:0b:b9:e2:40:0a:7c:39:92:
86:20:74:9b:50:40:fb:75:6f:04:d6:1a:71:e0:58:95:7b:bd:
26:59:33:43:d8:02:a8:1b:9a:94:70:77:ee:b9:0f:a2:33:1e:
3d:94:03:3b:96:2c:09:fe:9b:7b:70:18:4b:a1:f0:23:d2:75:
46:75:a3:9b:66:03:91:3f:cd:aa:61:9e:ea:df:c5:07:1c:cb:
f9:6d:13:89:57:bc:6a:9e:83:9e:4f:cf:d4:3a:37:29:f8:be:
01:28:7f:58:4d:23:8e:83:68:b6:42:5a:be:70:2c:47:64:12:
fa:25:9f:4b:94:44:09:fa:54:d9:25:5a:e7:ca:6b:26:c9:e7:
96:c2:20:08:5b:91:72:a4:9b:3b:6f:f0:ea:1a:09:df:44:b6:
8b:e3:23:13:98:34:bd:f4:d9:28:f3:66:64:77:30:3b:4a:6b:
2c:f1:fc:7e:58:18:7d:20:55:5d:35:c8:6a:35:ab:5b:9b:71:
0e:1a:2a:8b:3d:72:c4:42:93:00:4f:ca:dc:e4:3b:dd:19:6e:
07:f2:84:9c:d1:df:b1:17:81:f5:1f:43:80:3b:5d:63:5d:31:
c2:81:f2:1a:80:80:5b:7a:86:c7:60:89:3f:0d:65:98:9f:66:
83:e7:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:30 2024 by rpki-client on console-fra.rpki-client.org