Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/8Ex0cXlXctpclyL4pJq7YWD1lu0.roa
File: 8Ex0cXlXctpclyL4pJq7YWD1lu0.roa (raw, json)
Hash identifier: HggQQ+U1UDbe9T7F0tl6FsqMrsHF6Uq+eRZci65ucMI=
Subject key identifier: F0:4C:74:71:79:57:72:DA:5C:97:22:F8:A4:9A:BB:61:60:F5:96:ED
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 0185708CCFBA0B6948BFCA85F0E56C10039E
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/8Ex0cXlXctpclyL4pJq7YWD1lu0.roa
Signing time: Mon 02 Jan 2023 03:35:54 +0000
ROA not before: Mon 02 Jan 2023 03:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206766
IP address blocks: 138.124.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:cf:ba:0b:69:48:bf:ca:85:f0:e5:6c:10:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Jan 2 03:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f04c7471795772da5c9722f8a49abb6160f596ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:ca:0d:79:77:6f:79:0d:79:86:18:a3:2a:
22:7b:dd:44:cf:60:fa:88:4d:1f:d8:37:cb:0c:87:
82:ae:1b:23:90:98:8e:a6:83:30:08:14:fc:2e:3f:
dd:0f:f6:5d:ed:7a:bc:e5:74:91:24:f1:e1:b8:4f:
0a:82:38:a2:55:c1:9d:4a:41:1e:83:53:ce:fc:a4:
67:cf:d0:47:5f:14:b8:75:d6:ce:3b:47:e9:9f:77:
51:a6:d3:28:c2:21:95:e6:de:f7:b6:a1:99:ce:03:
02:a9:6d:f4:29:5d:3b:b4:d7:a6:07:e9:b4:c1:53:
c4:6e:d9:b9:2c:c7:69:20:00:ba:e6:59:cd:06:28:
89:2a:46:b3:00:a4:0c:c6:32:24:6b:c7:7e:f1:b6:
17:ca:13:6e:76:33:17:f5:d3:82:b4:09:79:08:1d:
e5:76:10:3a:9f:fe:4a:01:f3:4d:b9:8c:65:05:e7:
b8:7e:64:d1:7f:0f:7b:48:90:5a:41:fa:5c:f2:50:
ab:80:e1:3e:02:e2:d8:8c:6e:83:60:a5:84:1f:0c:
8a:b8:45:0f:12:d5:9e:84:0f:55:30:f5:5f:16:b8:
69:28:7c:7d:79:72:e0:52:65:9f:84:52:07:00:c6:
01:f0:fb:df:0e:dd:e0:7b:e7:3b:85:12:34:94:a3:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4C:74:71:79:57:72:DA:5C:97:22:F8:A4:9A:BB:61:60:F5:96:ED
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/8Ex0cXlXctpclyL4pJq7YWD1lu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:75:7a:d5:72:56:97:5d:8a:07:d2:23:d0:e4:f8:fc:19:4d:
3d:3f:3a:21:4c:5e:97:c4:aa:bb:15:9b:5c:47:81:ce:5c:55:
28:c8:78:64:fd:d9:09:f1:5a:a2:ab:41:a6:5e:31:61:bb:86:
7a:84:d4:ee:f6:04:30:14:27:7f:f0:6c:75:f6:0b:2f:f9:ab:
56:72:f8:2a:21:a7:52:dc:2b:2c:03:69:0b:21:41:9a:33:c9:
a9:e5:df:eb:d1:14:f1:b2:60:6d:39:d0:74:b0:44:23:1b:50:
bc:db:1f:9b:76:97:76:7d:9a:e5:4a:08:7a:d1:f5:f0:e4:e2:
8b:f6:2d:5c:38:5f:7e:3c:2c:8b:8d:f0:06:a8:4a:10:f7:24:
76:31:c8:cd:e0:4d:7c:04:b0:33:1c:0e:46:45:e8:91:de:75:
35:33:49:11:f5:51:ba:f9:8c:db:75:c5:d0:0e:82:f0:55:82:
ec:00:d2:1a:d1:56:14:31:63:d2:79:37:98:2a:a5:a6:c4:b2:
5c:0a:f5:d9:a7:44:b1:58:79:be:62:a0:9e:58:7b:59:eb:9d:
a8:4b:21:3a:3b:e2:f8:9e:59:f2:50:e1:66:25:bd:97:62:b7:
bf:ac:e0:6f:46:02:2f:f0:3f:86:78:f1:cc:80:62:5e:f0:81:
14:8c:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:58 2024 by rpki-client on console-fra.rpki-client.org