Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/jOPQhViooC0Ydrtv7suGJ-XKA9U.roa
File: jOPQhViooC0Ydrtv7suGJ-XKA9U.roa (raw, json)
Hash identifier: IzntTX24bDAXvlJzC4gxrtEWT6pP+lNpVwDJ0L5O/gk=
Subject key identifier: 8C:E3:D0:85:58:A8:A0:2D:18:76:BB:6F:EE:CB:86:27:E5:CA:03:D5
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 01856FA6D5BE650B1AC0EF140F7CF2DDE282
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/jOPQhViooC0Ydrtv7suGJ-XKA9U.roa
Signing time: Sun 01 Jan 2023 23:24:42 +0000
ROA not before: Sun 01 Jan 2023 23:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201463
IP address blocks: 193.8.68.0/22 maxlen: 24
128.127.8.0/22 maxlen: 24
194.55.42.0/24 maxlen: 24
2a07:ce40::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d5:be:65:0b:1a:c0:ef:14:0f:7c:f2:dd:e2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Jan 1 23:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ce3d08558a8a02d1876bb6feecb8627e5ca03d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:17:d4:ac:a5:fd:45:00:61:c0:a8:c1:fd:27:
04:aa:32:67:69:77:d2:f3:c3:0c:24:52:ef:d3:1b:
48:19:a0:2d:e1:01:01:f4:8a:db:e6:c6:ab:f5:70:
9e:51:2e:e9:2b:4e:90:9b:70:f2:7b:2a:40:09:73:
53:44:e4:83:30:bf:b2:48:2c:00:43:a4:d6:32:dc:
1c:3d:bd:ae:fb:d2:ac:ec:1e:12:ab:b9:c8:55:c8:
d2:79:b9:55:3a:b4:9f:f0:d9:09:db:52:53:fc:a5:
e1:3f:1c:e4:bd:ae:51:2a:b2:0b:06:52:97:f7:90:
48:85:19:16:d6:df:fc:39:72:e2:f9:84:15:7a:77:
44:f5:ee:97:9f:29:04:7c:04:01:db:5d:54:13:33:
39:5c:20:bf:25:f2:df:aa:2c:1d:39:a5:29:07:3e:
a0:6a:67:74:97:c3:31:d3:42:60:9b:04:04:1f:cf:
98:7b:be:34:70:c9:49:29:12:85:2a:1b:bd:32:78:
a9:4d:f1:73:3f:48:a8:4d:2f:4a:d4:f7:f9:31:64:
63:10:75:4e:0c:89:1d:ef:e9:96:7d:a2:df:25:9b:
91:eb:1d:2a:b2:c8:10:f8:c3:51:96:a9:4d:49:3b:
13:46:9f:a3:15:b9:58:24:9a:a4:df:94:16:24:d3:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:D0:85:58:A8:A0:2D:18:76:BB:6F:EE:CB:86:27:E5:CA:03:D5
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/jOPQhViooC0Ydrtv7suGJ-XKA9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.8.0/22
193.8.68.0/22
194.55.42.0/24
IPv6:
2a07:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
53:b9:fc:5f:4e:60:c9:9c:72:85:e3:b6:0b:7e:e2:96:ac:2d:
46:63:3e:5a:4e:56:99:7f:d3:04:8a:94:e9:41:54:73:2e:d2:
8c:f0:77:02:85:b1:43:b0:23:7a:50:27:d1:eb:ac:e0:54:3d:
cd:12:26:3b:73:4e:a0:3b:75:e4:02:0b:00:e2:5e:8b:e8:a1:
9e:2d:f2:e1:7b:50:cd:49:ea:5a:3b:1f:7f:16:52:cf:70:21:
7b:ed:21:0f:3e:62:aa:8d:49:3d:40:a7:b0:b1:e0:77:1f:35:
c2:60:f1:2a:05:4e:99:07:b0:62:86:c0:bd:b9:01:a4:29:ed:
8c:8d:d2:a0:79:61:0c:5a:b4:bd:a2:cd:85:fb:00:18:66:8e:
11:bb:58:71:33:f2:82:f1:78:cb:df:62:dc:ec:f8:53:bf:11:
ca:88:05:4a:ad:61:e1:62:4e:7d:43:cf:bb:65:22:6a:d1:0e:
44:2f:8c:ff:3c:c7:42:85:ec:7a:60:a5:f8:5d:db:70:09:1a:
1e:e6:09:4d:13:42:f8:66:b2:4e:2e:60:aa:fd:dc:63:ad:1d:
3b:fa:57:4a:02:cc:49:1b:bd:0f:76:e5:6d:08:47:c9:c4:49:
91:9c:b4:bc:07:0d:ea:68:a0:15:4c:ba:02:9f:85:a7:7c:5d:
0b:9d:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:57 2024 by rpki-client on console-ams.rpki-client.org