Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/G0P0WD33XtoTf5-4Eu2ACuGpLjI.roa
File: G0P0WD33XtoTf5-4Eu2ACuGpLjI.roa (raw, json)
Hash identifier: vLhAS+3I4+xBl5doS1N7SwxhyJ/+NUS3ui4qMuO9Trk=
Subject key identifier: 1B:43:F4:58:3D:F7:5E:DA:13:7F:9F:B8:12:ED:80:0A:E1:A9:2E:32
Certificate issuer: /CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Certificate serial: 0188AFE697C092FDC29ADD60D965392477F6
Authority key identifier: BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/G0P0WD33XtoTf5-4Eu2ACuGpLjI.roa
Signing time: Mon 12 Jun 2023 13:58:24 +0000
ROA not before: Mon 12 Jun 2023 13:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.208.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:e6:97:c0:92:fd:c2:9a:dd:60:d9:65:39:24:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Validity
Not Before: Jun 12 13:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b43f4583df75eda137f9fb812ed800ae1a92e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:09:65:35:84:de:34:ba:73:d6:82:0b:92:92:
dd:99:70:46:9f:77:0e:a8:29:7e:ad:64:44:36:e1:
ae:61:28:a4:25:1a:4c:3a:83:30:54:77:17:a5:0c:
14:91:b0:28:17:10:b8:4c:31:b6:27:2d:12:b1:5c:
c9:5c:89:a4:cc:43:56:d5:6a:05:e4:19:d8:3b:16:
89:cf:ae:fe:82:87:e5:66:91:cf:ea:9b:9d:d5:09:
9f:ab:df:22:28:49:ad:98:7a:f3:15:fd:aa:c4:78:
64:45:9b:c6:5e:61:52:75:0d:dd:b7:2a:a1:f9:b8:
e6:80:d7:34:69:11:86:d5:a8:5a:c9:31:03:1d:fd:
89:7f:1f:ea:12:ac:8b:9e:6c:40:05:9e:33:42:50:
5a:10:47:fd:92:46:50:66:6a:db:2d:5b:d1:b9:ec:
0d:4c:63:93:49:4f:69:e7:36:6d:c4:35:3f:c4:98:
bb:a7:e9:dc:98:b5:ed:14:a1:e5:2d:c1:7a:c9:ec:
ce:95:b1:0d:8c:c3:2a:95:91:19:71:08:de:64:39:
27:b6:15:55:fe:c5:16:8c:2b:10:92:16:e4:98:8c:
86:3a:c7:8f:13:b7:90:df:26:85:9a:04:89:3d:ba:
b6:85:8b:f0:60:97:ad:72:1f:96:e4:1f:55:b7:6b:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:43:F4:58:3D:F7:5E:DA:13:7F:9F:B8:12:ED:80:0A:E1:A9:2E:32
X509v3 Authority Key Identifier:
keyid:BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/G0P0WD33XtoTf5-4Eu2ACuGpLjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/u4MhwF1QHttJkZDAxKMInSRsW3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:01:34:08:81:f3:df:57:14:fb:09:5d:ad:c5:6c:f0:46:ca:
2e:45:e0:79:4c:17:05:07:ce:ad:5c:88:76:0d:c8:d4:ef:e3:
da:66:b8:71:11:ae:2c:99:1d:00:c9:fc:2f:5c:03:25:02:12:
0e:48:8a:e2:ef:13:ce:a7:59:2d:34:36:4f:d1:59:b2:c7:ad:
35:bc:b8:75:73:be:2a:6d:e8:f3:7d:2a:c3:32:f7:56:3f:20:
27:4e:3c:54:b4:b4:d0:df:13:fb:e0:17:4e:47:e7:64:51:67:
b3:e7:43:35:b4:0e:8f:b7:9a:63:29:3f:d1:8f:27:3d:c5:93:
27:4f:1e:04:46:af:24:43:a0:f7:30:a3:f6:c7:2a:a6:1f:58:
1a:97:dd:15:cd:12:18:d0:2a:f5:44:18:e9:5f:0a:36:8c:9c:
f4:8c:e4:7c:6e:8a:98:65:76:c1:2f:8d:6c:da:8e:d6:cd:4a:
5d:f4:ce:c4:13:dd:09:1a:b2:f6:89:f7:59:bb:01:17:08:13:
b8:d0:ca:f5:cb:2e:b8:52:af:75:41:22:4d:79:a6:e3:a3:5b:
e3:ea:a4:0d:52:b5:28:e6:33:62:0c:99:b7:9d:4c:d6:e1:a0:
39:1b:8a:48:2b:2a:7a:d4:37:5d:3d:47:90:ee:3e:77:08:c1:
c1:df:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:37 2023 by rpki-client on console-ams.rpki-client.org