Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/P8-QJshfxK8Kx4E2dv6d-0vY6aA.roa
File: P8-QJshfxK8Kx4E2dv6d-0vY6aA.roa (raw, json)
Hash identifier: jf7I7wA2uY0z4wq6tr0Te+pVIG94dAX4U5VN06Y0PRY=
Subject key identifier: 3F:CF:90:26:C8:5F:C4:AF:0A:C7:81:36:76:FE:9D:FB:4B:D8:E9:A0
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018B1A7CEA040CF7D8F03E7482B5B209BD13
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/P8-QJshfxK8Kx4E2dv6d-0vY6aA.roa
Signing time: Tue 10 Oct 2023 16:47:55 +0000
ROA not before: Tue 10 Oct 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 123.253.212.0/24 maxlen: 24
46.175.130.0/24 maxlen: 24
185.110.62.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
141.98.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:7c:ea:04:0c:f7:d8:f0:3e:74:82:b5:b2:09:bd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Oct 10 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fcf9026c85fc4af0ac7813676fe9dfb4bd8e9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:f4:94:7f:6e:71:28:7b:f9:68:9a:aa:a0:
bb:d9:2e:a9:c7:e2:43:3e:31:db:b3:1d:a8:3a:3c:
fe:1c:b6:92:b6:4d:2b:ce:1b:85:78:36:3e:e7:6c:
87:15:53:78:23:f4:fe:53:04:60:07:98:4e:bd:f3:
72:30:59:e6:53:f0:60:d4:29:4b:1b:96:a3:00:82:
1a:56:b3:62:76:d6:81:70:ed:ec:8a:cd:8f:5b:f6:
d0:db:24:03:e0:5a:0a:f6:db:fe:01:f2:8b:43:f8:
44:4d:6f:0b:db:d0:36:e8:70:20:f1:dd:35:a3:ae:
39:80:57:2a:27:25:79:a3:39:10:75:92:30:b0:c4:
0a:da:32:f1:5c:18:24:80:66:d1:82:85:05:a4:58:
39:00:cb:0d:1d:5c:88:19:16:5c:03:a4:ea:3b:75:
7d:f6:60:d6:23:e5:26:a5:55:01:09:e5:22:7e:d4:
a7:f8:7e:bc:df:29:99:5b:59:b4:1e:a0:f2:e0:b5:
55:f1:78:6a:df:88:d9:db:e9:a8:f3:22:18:ca:8e:
ed:f4:ca:73:63:d1:1f:48:10:6b:cf:48:66:e4:e1:
ad:5b:b1:b9:f6:15:76:9c:f0:40:a5:05:34:3c:f7:
1c:72:6a:ff:fb:ac:ef:d9:42:da:a6:49:e2:9e:3f:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:90:26:C8:5F:C4:AF:0A:C7:81:36:76:FE:9D:FB:4B:D8:E9:A0
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/P8-QJshfxK8Kx4E2dv6d-0vY6aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
123.253.212.0/24
141.98.137.0/24
141.98.139.0/24
185.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6c:02:9f:25:43:a9:80:45:21:85:55:12:8f:7f:ff:0e:5b:
cc:c4:10:fa:ca:cf:e2:10:16:56:0e:fc:92:e3:35:f9:9b:70:
5f:4c:23:f7:9d:e7:d9:c8:65:48:49:b6:9a:76:09:b8:6f:01:
d9:02:f2:54:46:5e:25:6a:e5:2e:70:23:16:35:60:6d:04:55:
85:a0:45:6f:02:9e:65:a0:8a:17:e9:f4:eb:56:2b:46:84:a0:
17:ed:a4:1c:8f:6e:3b:92:fa:5b:6b:69:f9:1a:2f:f7:d6:ea:
3e:ae:6f:e7:06:60:dd:61:f2:c9:f1:67:3c:6a:a3:6a:08:11:
ba:38:bb:60:9d:74:ea:38:7a:d5:bc:eb:37:43:52:c4:6a:28:
8a:80:5f:b3:88:30:72:0f:66:e8:4d:ae:5f:cd:61:39:62:aa:
a1:5a:c3:7a:3e:46:30:04:d8:19:03:77:14:e8:54:52:fa:7d:
70:69:74:bf:ba:61:70:16:b6:e6:d0:62:0e:b7:1d:bb:bc:50:
b9:a6:6a:77:8a:3f:81:5e:98:07:7e:fd:18:ff:b8:15:8f:89:
2f:c9:24:41:a3:b4:69:c2:c0:98:6b:e5:f5:de:d0:a3:ae:77:
49:86:5c:fc:a0:fd:d4:fb:7f:05:e1:f9:10:ef:b1:ba:20:60:
32:d3:64:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 13:07:14 2023 by rpki-client on console-ams.rpki-client.org