Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/8wy4B_qnPMbztNBNxgp3nClee9E.roa
File: 8wy4B_qnPMbztNBNxgp3nClee9E.roa (raw, json)
Hash identifier: 6rsE4kjLlayhtZxOmsYrl/2ISgdybuNYq8wBURXLOrU=
Subject key identifier: F3:0C:B8:07:FA:A7:3C:C6:F3:B4:D0:4D:C6:0A:77:9C:29:5E:7B:D1
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 01856E78DC66C8870E2B3AB35172A1CB559C
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/8wy4B_qnPMbztNBNxgp3nClee9E.roa
Signing time: Sun 01 Jan 2023 17:54:52 +0000
ROA not before: Sun 01 Jan 2023 17:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47108
IP address blocks: 195.190.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:dc:66:c8:87:0e:2b:3a:b3:51:72:a1:cb:55:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jan 1 17:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f30cb807faa73cc6f3b4d04dc60a779c295e7bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d3:da:74:d2:c9:38:ef:42:a3:29:11:e6:a5:
38:5b:bc:c3:11:1d:e8:45:07:a0:61:fd:03:f6:fd:
f8:b1:b4:d6:fc:aa:7c:62:d8:66:06:ea:d7:1a:f4:
d3:97:65:5a:9a:4a:18:29:d4:02:8f:ef:71:02:98:
d9:ef:b7:93:46:25:d1:08:e2:38:72:03:b8:aa:bf:
1f:f9:fd:4a:04:d2:f7:9f:4c:ea:e2:eb:36:e7:68:
a3:8a:2f:58:a6:21:27:5c:55:2d:6c:23:f9:39:b5:
23:b9:35:21:6f:a0:cc:99:c4:2c:3a:18:02:e0:d4:
f1:2b:3d:0e:2b:e7:e3:63:1a:f1:a3:66:f3:fa:9d:
33:39:b5:d0:36:03:9e:f9:0d:46:91:8c:1b:d8:a6:
30:64:24:4a:fb:c8:ac:7e:c6:a3:b0:c2:85:ae:eb:
d4:bd:45:04:96:3f:8b:78:5e:b4:01:c2:45:67:8e:
fe:c3:51:13:c8:84:c4:f7:af:00:32:f8:dc:f4:5d:
cc:ae:a8:da:cb:2e:dd:09:9b:92:43:16:eb:ac:0b:
e8:0e:e0:a2:fd:68:6a:e3:52:0b:59:16:a6:3b:da:
4a:66:3f:fd:09:d9:1f:fa:fc:ec:f5:86:e2:26:22:
0b:c2:3f:82:8c:43:a5:59:d2:d1:37:2c:8a:11:9f:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0C:B8:07:FA:A7:3C:C6:F3:B4:D0:4D:C6:0A:77:9C:29:5E:7B:D1
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/8wy4B_qnPMbztNBNxgp3nClee9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5f:e0:16:f6:d5:d1:c5:dc:09:5a:d8:f5:b3:7b:08:3e:5d:
4f:d3:de:ca:a0:6e:b0:e1:db:49:9d:17:78:1b:04:3a:85:19:
f3:03:c7:9f:18:ea:90:f0:76:ba:e2:c6:40:30:71:fe:58:af:
e6:13:79:54:26:90:f5:0e:17:45:9f:72:e1:2d:ac:cb:67:da:
29:69:22:0f:52:e9:88:ad:e7:ad:7c:72:c1:79:ec:9d:52:1d:
00:07:75:05:51:99:8f:47:5e:8c:80:d6:69:58:e7:bf:81:18:
83:4b:9f:de:f2:38:32:52:c4:9a:23:55:fb:57:cd:e3:14:98:
ec:6e:de:5e:f8:64:1d:b3:0b:8e:d0:74:eb:b4:72:a3:4e:0d:
2d:b1:b3:fe:0d:94:bc:61:6e:95:7f:b8:03:40:6b:18:d6:a9:
6f:b6:03:0e:71:de:bf:7d:5f:aa:56:05:fd:65:8d:05:ac:80:
23:71:ef:50:80:88:30:27:c7:a9:74:53:ea:a7:5a:cd:d7:29:
02:eb:38:c1:50:de:5c:9f:50:0b:a7:0e:30:0f:ae:9d:a5:a4:
0a:2c:32:57:a9:46:39:c1:92:cd:41:40:72:9a:e6:95:ba:96:
dd:17:ae:4f:f1:3a:66:91:b0:3e:64:11:25:7f:50:e3:4b:93:
5c:a6:ba:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:22:03 2024 by rpki-client on console-ams.rpki-client.org