Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/bd8WywV0-LH4Hv-KjVwzGU_KosU.roa
File: bd8WywV0-LH4Hv-KjVwzGU_KosU.roa (raw, json)
Hash identifier: 1qJx8tYhWCZRaeH8ZtZBsvRrJr74Y1YfiifVbrXIoHw=
Subject key identifier: 6D:DF:16:CB:05:74:F8:B1:F8:1E:FF:8A:8D:5C:33:19:4F:CA:A2:C5
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 0185730C9BF90D41401787C1BC581C4DF847
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/bd8WywV0-LH4Hv-KjVwzGU_KosU.roa
Signing time: Mon 02 Jan 2023 15:14:44 +0000
ROA not before: Mon 02 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 194.176.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:9b:f9:0d:41:40:17:87:c1:bc:58:1c:4d:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Jan 2 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ddf16cb0574f8b1f81eff8a8d5c33194fcaa2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:23:d4:5b:f8:15:b9:b6:a1:7c:7c:a1:1e:
7b:6b:99:ad:4b:32:7a:d3:64:f4:f8:c6:cf:f2:cc:
ed:60:1c:61:48:eb:e5:3d:e9:57:72:5f:cb:2b:64:
3b:e3:38:16:cd:61:47:f7:73:46:ec:ca:bc:a6:5f:
ba:d4:5a:14:a0:03:62:3a:30:ab:00:83:80:6d:34:
f3:f3:ed:b3:c2:3b:26:bf:72:f4:31:56:f3:02:f4:
44:7d:dc:b9:31:72:48:ff:68:b8:2d:cd:01:c2:0a:
45:ce:7f:3e:13:6a:59:33:bf:85:33:4a:92:f8:4d:
bc:59:1e:0b:ee:10:b9:42:4d:4b:41:88:bd:b1:3f:
88:e6:06:e3:88:ab:7f:a1:8e:51:f6:ba:dd:49:a9:
c0:62:c8:ee:d4:31:b3:b6:f0:26:a3:a6:b1:0b:69:
9e:34:33:01:c6:30:06:c1:72:4f:55:c5:40:af:0b:
e9:29:86:d0:2d:f7:df:11:3b:ba:d1:51:69:30:60:
1f:ae:51:3c:df:cb:b7:53:21:fe:32:2b:ef:60:df:
60:66:bf:be:47:34:47:19:e4:72:e8:1c:fc:15:6d:
33:41:c2:c6:b0:ce:f8:5f:07:bd:bc:74:b6:b3:da:
47:07:60:23:84:17:c9:09:ea:c4:ee:a0:a9:a3:f5:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:16:CB:05:74:F8:B1:F8:1E:FF:8A:8D:5C:33:19:4F:CA:A2:C5
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/bd8WywV0-LH4Hv-KjVwzGU_KosU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
24:da:10:7a:3d:af:eb:9f:74:f3:2f:b6:7c:60:31:d6:3c:9a:
7b:70:73:3d:0b:0b:2c:fa:61:05:c8:dc:cf:de:b1:b2:47:08:
1c:a9:97:1f:bc:cf:75:a6:eb:ce:6c:d3:ca:4e:d0:13:bf:c1:
b6:d9:88:69:fc:c7:af:84:a8:57:dc:cb:31:47:78:f9:8e:55:
8b:ab:b6:14:e3:e3:cc:0a:47:b3:25:cc:56:e3:a8:92:5e:49:
44:89:50:52:1c:ce:09:01:4a:cb:d2:4b:aa:d2:10:a3:64:fe:
b8:4e:bb:00:56:59:66:63:ca:c0:a6:69:76:2b:d8:f9:0c:16:
59:cf:99:6a:fe:bd:19:c6:cb:6d:92:72:78:71:bc:52:4b:f2:
25:ca:24:03:d4:a8:bb:6d:69:b5:da:c9:cd:b8:a0:8b:26:54:
e0:fd:c4:8f:ba:7e:fb:97:60:1c:57:59:84:db:17:e4:31:d0:
3b:3e:57:22:e2:9b:39:31:5d:fa:ee:11:23:e3:9c:e4:58:6c:
a6:0e:03:36:0c:7c:1c:77:be:fa:c7:8c:be:57:3a:53:75:c2:
a9:5c:14:c5:59:dc:f6:cd:1c:77:a3:b1:31:84:9d:23:b6:de:
12:1c:19:20:b1:38:8c:18:54:d6:bb:ad:5d:ed:c1:08:31:6e:
f8:aa:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:25 2024 by rpki-client on console-fra.rpki-client.org