Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/8JeExicYJl-gR-JnTsG5Iy2qgag.roa
File: 8JeExicYJl-gR-JnTsG5Iy2qgag.roa (raw, json)
Hash identifier: 61/jLhQXTd+5B8aAJGzg0rej66jfG+slR5Z/3hywVRQ=
Subject key identifier: F0:97:84:C6:27:18:26:5F:A0:47:E2:67:4E:C1:B9:23:2D:AA:81:A8
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 0185708CB569DA022A1F13091E3733C88B31
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/8JeExicYJl-gR-JnTsG5Iy2qgag.roa
Signing time: Mon 02 Jan 2023 03:35:47 +0000
ROA not before: Mon 02 Jan 2023 03:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.113.142.0/24 maxlen: 24
194.113.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 14:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b5:69:da:02:2a:1f:13:09:1e:37:33:c8:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Jan 2 03:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09784c62718265fa047e2674ec1b9232daa81a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:b9:1f:12:73:e0:77:de:8f:0d:98:6b:5f:
28:e9:a4:4a:45:1a:4f:07:fa:36:c7:0a:fe:b5:09:
30:70:b2:96:a3:09:e5:c1:e1:06:95:4b:ee:da:3d:
4e:5d:76:bb:41:9f:2b:93:a8:61:32:78:7c:8b:99:
8f:93:4f:f1:c2:97:10:0c:7f:d4:e9:30:ff:b9:0f:
3f:81:02:94:3b:44:d0:aa:27:de:8c:3b:a5:f8:b0:
de:94:d3:a6:b3:43:0c:10:a8:01:be:b9:4a:9a:43:
0e:bf:a5:f4:78:2e:95:69:34:61:3d:f5:75:b7:32:
ba:a9:82:8f:92:d7:8b:50:f4:af:17:51:c0:61:c6:
35:8b:67:44:61:03:7d:fe:5b:76:68:20:d2:be:ea:
3b:83:71:a6:cf:44:b0:d7:48:59:a2:09:4c:de:ac:
5e:35:d5:49:dc:c9:a1:b6:f9:c9:a5:bb:82:6d:48:
ca:56:2f:7c:e2:5c:0f:a4:52:97:46:fe:da:99:03:
73:b5:a6:3a:e6:ed:8e:6a:90:3d:3d:1f:46:b2:b7:
25:14:fa:d8:1a:ea:84:52:63:31:36:3c:2d:85:53:
d8:0b:1d:d8:a5:48:f4:5c:cb:89:b4:2c:3d:a0:00:
b9:49:45:f5:a3:0e:69:19:e2:e6:3b:69:4c:0e:c9:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:84:C6:27:18:26:5F:A0:47:E2:67:4E:C1:B9:23:2D:AA:81:A8
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/8JeExicYJl-gR-JnTsG5Iy2qgag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.142.0/24
194.113.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e4:98:aa:8a:ca:2f:fa:f7:41:cf:25:a8:6e:04:b9:ea:a3:
96:36:46:bc:b2:aa:7c:88:49:19:14:9f:44:85:53:63:3a:6e:
cc:bf:a1:e7:d8:46:9d:e6:51:7e:14:51:fe:62:69:e0:0d:27:
c7:09:d3:57:78:8b:2d:59:18:11:44:8b:41:b1:5d:f9:69:3c:
05:59:a0:40:9b:a4:23:ff:e4:51:34:ff:0b:b7:ad:27:a2:5f:
1f:fe:42:35:52:46:f2:60:92:bb:a6:a7:fa:e1:08:9a:54:57:
60:71:eb:43:ed:d3:dc:7f:37:99:4e:51:3d:20:47:d8:19:12:
d6:21:9d:f7:9b:1c:66:1b:61:f8:86:72:b8:b9:fc:74:96:78:
36:38:00:b4:39:a3:92:5a:19:94:8b:75:8b:91:d6:85:ff:9b:
00:a9:4d:83:fa:1f:4d:64:8f:4e:cc:d9:a0:ac:7d:51:dc:fc:
18:ef:03:d3:5d:ef:5b:74:9d:58:5d:ad:a7:99:10:5b:ac:d0:
8c:da:2c:54:9b:ea:6d:54:b4:c6:33:fa:19:01:69:97:d1:20:
7a:31:0f:1a:dc:5d:26:eb:6d:03:bb:0e:8f:f8:e7:f5:d1:23:
d3:78:58:43:c2:b1:e5:46:b9:ed:02:a5:bc:fa:2e:2d:64:7f:
69:e3:ec:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org