Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/8XPdIMfdfmulNQ_8LQ2HRSJPWXw.roa
File: 8XPdIMfdfmulNQ_8LQ2HRSJPWXw.roa (raw, json)
Hash identifier: OxiIwF686to5tZ2UK/0koZ2Ptn8IdxDVp9pGAw1WCRY=
Subject key identifier: F1:73:DD:20:C7:DD:7E:6B:A5:35:0F:FC:2D:0D:87:45:22:4F:59:7C
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 01856E78E7DF8C54042F293F902D747F45BB
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/8XPdIMfdfmulNQ_8LQ2HRSJPWXw.roa
Signing time: Sun 01 Jan 2023 17:54:55 +0000
ROA not before: Sun 01 Jan 2023 17:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8649
IP address blocks: 176.96.96.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:e7:df:8c:54:04:2f:29:3f:90:2d:74:7f:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Jan 1 17:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f173dd20c7dd7e6ba5350ffc2d0d8745224f597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:40:47:dc:7e:88:7e:aa:ab:d8:7c:73:0d:
4e:6f:0a:8a:ee:48:e3:3d:16:2f:bd:d9:62:cf:6b:
0e:55:e9:a7:bb:4c:84:03:1d:f8:e8:43:7b:02:cc:
5a:71:82:fd:34:13:ba:70:54:0e:7b:24:eb:c7:16:
fb:93:73:66:1d:ca:1e:44:89:f0:41:eb:2c:a3:f4:
cf:50:04:de:bb:6f:1c:1c:d8:f0:53:19:4d:d6:16:
cd:9f:19:7a:d6:cb:37:8f:7c:7b:91:52:40:69:04:
2a:7d:8c:ef:ab:31:c3:be:85:4a:84:e3:39:e8:af:
ed:c0:a2:8e:cd:43:c2:11:62:47:da:31:cc:86:c8:
ac:92:f8:ad:4b:8d:c7:ac:74:d3:e0:10:9d:ad:37:
c2:34:c7:9c:18:16:54:ef:6a:03:8b:e2:5d:b0:13:
b8:60:ba:e3:cd:90:0a:f1:5f:44:96:0a:e2:b5:24:
62:26:1f:c2:67:bd:6a:0d:fe:33:53:68:de:df:d6:
ed:9f:bd:d2:13:df:39:4b:62:10:e6:31:4f:b1:17:
cb:4d:e5:3d:cb:14:15:f7:1d:45:f2:31:2d:05:2e:
ef:f8:6a:55:c5:c8:08:c9:30:2b:24:48:3d:93:0a:
7b:fa:07:27:fc:dd:b6:6a:95:2e:b6:96:45:7b:c9:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:DD:20:C7:DD:7E:6B:A5:35:0F:FC:2D:0D:87:45:22:4F:59:7C
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/8XPdIMfdfmulNQ_8LQ2HRSJPWXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.96.0/19
Signature Algorithm: sha256WithRSAEncryption
14:75:c7:ca:7f:6c:2c:e3:54:af:d4:72:39:f0:ba:b0:fc:bb:
4d:a2:1f:c8:21:12:f9:78:1d:a8:81:ad:f8:30:24:4f:e8:26:
8a:d0:3d:60:9e:8c:c4:6c:d3:c7:a0:36:c0:09:5a:0f:ba:6e:
c9:78:49:fc:f5:e5:11:6e:a9:92:48:96:df:d0:3e:35:f2:bd:
b5:84:c9:a0:f6:44:25:0d:37:c7:7f:96:09:b4:a7:7f:eb:23:
cb:54:c3:06:50:3c:80:e2:a9:f7:d0:38:75:55:2a:ff:08:88:
00:ba:99:95:33:d5:5b:6b:42:7f:b5:60:6f:d7:ec:4d:81:b1:
31:ea:3e:4a:b5:b2:44:c5:89:75:eb:e6:12:c1:7a:75:25:e1:
03:a3:9b:35:c6:82:a4:27:05:7e:c2:d7:20:ce:5e:d5:30:ee:
d7:97:f8:be:4f:69:bc:46:a3:28:30:93:2d:66:3b:b7:d1:d4:
7c:90:b6:64:67:dd:a6:97:ec:77:4b:21:12:dc:dd:72:ca:a8:
27:e5:81:9d:17:fb:0e:83:57:c6:09:95:97:08:a8:0b:79:6a:
9f:89:86:2e:56:2b:7b:91:66:95:a3:70:ae:17:d4:bd:63:60:
87:ba:1f:52:6f:db:e9:48:50:2e:15:07:f6:08:2d:f9:a2:69:
83:72:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:54 2024 by rpki-client on console-fra.rpki-client.org