Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/8UgjO76HLNUrCrVMHepU8PnqXKg.roa
File: 8UgjO76HLNUrCrVMHepU8PnqXKg.roa (raw, json)
Hash identifier: 8YKmsAWs6nF44R23+TuDp7aA+nHri+ZpYDkzk3BtTnY=
Subject key identifier: F1:48:23:3B:BE:87:2C:D5:2B:0A:B5:4C:1D:EA:54:F0:F9:EA:5C:A8
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01859D2533CACF61E04FE1C96E293668E442
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/8UgjO76HLNUrCrVMHepU8PnqXKg.roa
Signing time: Tue 10 Jan 2023 19:25:39 +0000
ROA not before: Tue 10 Jan 2023 19:25:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 185.255.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:25:33:ca:cf:61:e0:4f:e1:c9:6e:29:36:68:e4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 10 19:25:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f148233bbe872cd52b0ab54c1dea54f0f9ea5ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:1a:ae:8d:c3:05:8f:f3:c7:f7:86:bc:35:
74:02:14:db:b0:19:60:d9:a6:6e:8a:25:0e:62:fa:
30:1d:87:b1:62:62:4d:be:27:fb:a3:42:46:2e:3e:
a8:70:fa:34:dc:0b:83:f7:f7:58:1e:80:d0:ba:25:
88:1c:5f:cc:71:60:b1:cb:b0:3c:ce:14:8c:25:bd:
06:35:39:44:ef:af:b4:1c:e1:bc:56:7d:37:d1:74:
8d:fd:a6:39:d2:63:6d:68:b9:44:8f:43:24:91:60:
a9:18:a2:da:72:40:23:eb:c6:f3:48:1b:1b:1d:c4:
1c:fc:6c:b2:59:fe:cc:ed:a5:89:e9:59:5e:43:4b:
fa:c6:14:53:76:06:05:fe:11:1c:e2:1b:09:4e:88:
c3:87:9b:56:0d:72:7d:ec:0b:16:d3:3d:8a:00:30:
52:df:45:55:de:f7:e4:db:fd:0e:2b:57:c0:67:8d:
07:1f:60:69:4a:c0:b4:69:ed:ce:28:01:3b:a8:f4:
5b:60:de:b5:66:0b:f8:70:8b:f6:f9:7c:9e:18:35:
91:79:23:e4:df:0f:4e:78:f2:8a:d1:f4:0e:7d:dc:
49:63:2c:69:b2:68:98:29:8d:c1:79:0d:d4:d2:66:
67:b1:8f:ab:f4:6e:1f:2f:d0:04:f1:a4:ef:d1:a8:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:48:23:3B:BE:87:2C:D5:2B:0A:B5:4C:1D:EA:54:F0:F9:EA:5C:A8
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/8UgjO76HLNUrCrVMHepU8PnqXKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a4:b8:24:cc:05:e9:be:a1:03:db:52:57:b8:4f:e0:c6:7d:
50:4a:d9:02:8b:18:4a:30:fa:bd:62:8f:60:fc:2e:a3:1d:a1:
2d:92:90:1c:2a:f5:76:2b:d8:1f:b4:75:fb:91:35:d0:be:01:
9c:59:c0:83:11:ce:b3:45:46:c2:dc:3d:81:63:4d:99:36:15:
e8:d8:e5:fd:e5:f3:d2:b4:57:62:c0:d8:c3:17:d9:81:eb:45:
82:95:b4:32:2b:76:85:81:30:b1:49:c0:5d:1f:bd:f3:15:7a:
e4:d0:36:0a:e0:09:d3:6f:49:4a:23:8b:4d:ab:07:a2:be:67:
92:ed:25:3d:fb:d4:74:77:6d:5e:e8:99:e2:25:11:9e:30:f2:
2e:34:17:92:f4:b6:73:4a:aa:d0:32:5b:bb:db:6a:22:e1:7b:
2f:9b:27:ba:89:79:98:0c:59:78:c1:a4:88:5c:7e:68:4f:92:
4e:65:43:bb:3f:90:cf:7d:d9:f6:e4:d7:fb:be:7e:50:fb:a0:
40:7e:16:9e:84:c5:23:fa:28:d6:89:b5:b1:8d:f8:76:9d:09:
d9:ab:64:41:ec:d7:d4:64:53:5b:3b:dd:f4:62:6a:b5:4f:0d:
c7:e4:48:20:bb:7f:88:b3:0e:19:25:d5:f6:86:f4:56:df:f6:
6a:77:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:33 2024 by rpki-client on console-fra.rpki-client.org