Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/8--8Fji1yCP85tlvcQPL-d9HZ0s.roa
File: 8--8Fji1yCP85tlvcQPL-d9HZ0s.roa (raw, json)
Hash identifier: JMf+34Y7724bR+U9V6clUgVtDfWJ4GQrnjOJfA72u/k=
Subject key identifier: F3:EF:BC:16:38:B5:C8:23:FC:E6:D9:6F:71:03:CB:F9:DF:47:67:4B
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 01856F393F12330C36DA974EC6EBCC3C786F
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/8--8Fji1yCP85tlvcQPL-d9HZ0s.roa
Signing time: Sun 01 Jan 2023 21:25:00 +0000
ROA not before: Sun 01 Jan 2023 21:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 194.169.245.0/24 maxlen: 24
176.103.222.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:3f:12:33:0c:36:da:97:4e:c6:eb:cc:3c:78:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 1 21:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3efbc1638b5c823fce6d96f7103cbf9df47674b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:cf:00:cf:9a:8a:d2:fb:24:8e:3c:30:c5:
f1:02:10:f7:7c:8f:68:1e:75:3d:12:2e:bd:47:ac:
23:e7:70:b4:1e:d2:b5:8c:db:14:d0:62:df:ee:96:
51:32:cc:9d:ef:63:98:69:6e:4f:45:cb:53:76:dd:
4c:c3:83:d3:ef:39:dd:90:22:ec:6c:ab:7d:8f:37:
f4:be:2e:1a:6e:b7:c9:f6:36:0d:02:7b:e5:3a:41:
8c:60:92:9d:70:f4:48:84:18:6c:1c:88:3b:3f:21:
e1:5c:44:8a:48:af:77:6d:5a:d5:14:0d:ee:2d:29:
c2:17:1a:5b:b5:35:2f:54:10:f8:c2:0f:6e:39:e3:
4a:c7:00:53:9e:07:23:2a:c3:94:8e:92:d1:6b:c2:
b5:59:be:37:83:21:91:50:cf:a0:77:e8:7a:e5:68:
9a:9f:9b:f0:7a:c2:ca:59:0b:14:c1:d8:9e:57:b0:
7d:a2:f8:ae:07:79:f4:a1:f9:81:2e:e3:6d:34:d9:
94:16:d3:0d:12:ff:b2:a2:94:87:cf:28:14:07:28:
13:90:5a:73:4c:07:f8:4e:cc:30:a3:1c:ed:2b:27:
bb:5c:fe:df:ff:60:56:d9:1f:e0:10:50:11:03:d6:
a9:38:47:52:81:b9:5e:c1:62:5e:c3:78:2f:42:11:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:BC:16:38:B5:C8:23:FC:E6:D9:6F:71:03:CB:F9:DF:47:67:4B
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/8--8Fji1yCP85tlvcQPL-d9HZ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
194.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1a:96:7f:2e:0c:c4:4c:c4:23:4d:b6:1f:62:99:fb:9a:fb:
e9:9a:8a:42:07:ec:82:0a:f6:dc:27:7e:f3:ea:09:bb:01:e0:
04:d6:e2:4b:67:7c:11:b3:b6:a0:4d:eb:7f:3e:03:2c:43:e4:
c1:a2:11:d3:28:ed:6a:aa:86:88:69:55:d7:9e:b9:6f:08:c8:
87:f6:44:d9:16:9c:02:66:10:38:5a:52:23:f9:bc:f2:0c:05:
7b:ce:f5:66:64:3a:c8:b6:aa:5c:7e:35:73:28:a6:f1:f8:bf:
2a:ef:36:d1:86:bd:79:0c:ba:9b:b3:51:0d:f4:1a:17:47:4b:
d3:97:92:31:cf:18:47:b7:c7:ee:d2:8f:c6:28:2f:2b:17:af:
66:9a:4d:61:df:50:57:43:69:a8:45:29:d9:19:3a:70:a3:2f:
86:ab:21:dc:72:2f:97:27:41:bc:d3:c4:dc:09:53:8f:02:bf:
1d:72:28:c3:ea:c5:6c:6c:d7:0e:d3:a4:9e:7a:75:79:5e:cc:
fc:f9:72:01:8a:4e:ba:d2:8c:4e:77:1d:5c:05:b7:05:c6:fe:
36:5e:25:00:10:b0:8f:0d:e0:d1:cd:1d:76:3c:52:bc:c3:ab:
86:d3:80:70:1d:92:ce:cc:d4:ee:bd:59:bf:85:dd:00:1a:28:
35:e5:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:51 2024 by rpki-client on console-fra.rpki-client.org