Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/8WVxy5KlU3OGcHKCO8l8k-faeIU.roa
File: 8WVxy5KlU3OGcHKCO8l8k-faeIU.roa (raw, json)
Hash identifier: O/sU3DKLKNiTGcq1O95rWzBTf/Ik2pCGqaSPZYHCuys=
Subject key identifier: F1:65:71:CB:92:A5:53:73:86:70:72:82:3B:C9:7C:93:E7:DA:78:85
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 0187E1569E1669248F666F22A206ACEA8C66
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/8WVxy5KlU3OGcHKCO8l8k-faeIU.roa
Signing time: Wed 03 May 2023 11:19:22 +0000
ROA not before: Wed 03 May 2023 11:19:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 193.200.53.0/24 maxlen: 24
193.200.56.0/23 maxlen: 23
31.15.120.0/22 maxlen: 22
185.74.172.0/23 maxlen: 23
46.30.128.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:56:9e:16:69:24:8f:66:6f:22:a2:06:ac:ea:8c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: May 3 11:19:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f16571cb92a55373867072823bc97c93e7da7885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:d8:d6:3c:09:b1:f6:ca:f5:de:8e:15:15:
26:d6:56:6b:a5:20:cc:ed:07:a4:51:e9:3f:d6:83:
08:8f:cf:4d:df:28:07:67:57:56:87:2f:00:5e:da:
14:99:f6:21:e4:1e:5b:82:db:db:4c:82:49:08:35:
06:43:22:f9:d6:d1:a5:1d:71:a9:c4:4f:9f:c5:17:
38:7d:53:54:3c:05:bf:b6:81:c5:f6:9f:82:f6:b6:
86:77:00:27:e1:ed:fc:ed:a2:a7:5a:52:59:87:50:
7e:f7:9f:2b:31:fd:34:fd:20:ab:5a:fb:8f:06:1c:
95:90:64:c6:44:ba:49:37:84:c0:ed:e6:27:98:79:
e2:2d:d8:b7:50:3f:8d:08:e6:30:3b:6b:29:0d:2a:
d2:5d:28:be:2c:be:51:b3:0f:f8:ee:b5:77:79:2b:
b5:c5:66:34:02:37:82:a7:f0:a0:48:f3:25:41:1e:
fb:0e:1f:bc:58:db:b5:89:af:9a:02:5f:ad:80:41:
86:03:b2:65:f9:9a:da:1c:3b:b2:f3:48:0c:09:db:
4a:66:35:2c:18:87:ec:7f:1d:f6:ab:d6:31:19:0e:
65:b4:9e:ad:ba:11:99:c9:d0:7a:50:e3:74:99:5a:
c2:0d:4b:65:f9:71:fb:fb:b7:7c:bd:c8:78:cf:cd:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:71:CB:92:A5:53:73:86:70:72:82:3B:C9:7C:93:E7:DA:78:85
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/8WVxy5KlU3OGcHKCO8l8k-faeIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.120.0/22
46.30.128.0/23
185.74.172.0/23
193.200.53.0/24
193.200.56.0/23
Signature Algorithm: sha256WithRSAEncryption
73:4a:3a:6c:bd:db:e3:69:84:a5:16:d7:92:7b:88:b6:76:bc:
9c:cf:3e:e5:b9:19:fd:79:d2:4e:e8:23:83:e9:c5:76:4b:96:
dc:33:00:71:42:db:18:af:83:34:9c:2f:da:a6:1c:73:1e:ca:
38:ef:e7:2d:7b:36:92:83:b1:9b:28:88:21:1c:ac:b7:c6:37:
3d:db:3b:6b:c9:71:1e:37:78:6b:b4:d7:85:9b:d4:38:34:60:
da:09:ac:68:a5:67:61:bf:cf:6b:ab:5a:69:e3:8e:d4:45:fb:
5b:0f:f4:db:69:7f:6e:31:11:72:e2:f9:3b:bf:ff:58:a7:c2:
a8:10:52:cf:52:38:19:04:fd:2a:e0:9c:a9:e6:c2:40:b5:31:
28:d2:d3:ff:b2:fa:7b:d7:b2:c0:92:df:97:8b:ff:14:b4:ed:
b6:c6:1d:03:88:98:b6:2f:da:e1:8e:66:54:74:10:9b:2d:b0:
a3:aa:e6:23:ad:fd:9a:91:52:27:c0:5f:36:27:91:0c:a8:72:
92:f3:39:9b:c4:44:ff:50:d9:7b:fd:62:f2:27:e9:c9:6b:ab:
2a:f7:12:df:cf:2f:fe:df:5e:48:1d:c2:64:34:d5:48:92:c6:
37:76:b8:67:eb:bf:5b:1d:f6:07:c8:d6:a5:6e:d3:45:0d:f4:
42:d0:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:02 2023 by rpki-client on console-ams.rpki-client.org