Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/8sZqQ6fl5Lry_RLighZrosebodw.roa
File: 8sZqQ6fl5Lry_RLighZrosebodw.roa (raw, json)
Hash identifier: h3gLdEocV+rNlC4rrxJohZL0t7e8CdeyPosYdY1l1kQ=
Subject key identifier: F2:C6:6A:43:A7:E5:E4:BA:F2:FD:12:E2:82:16:6B:A2:C7:9B:A1:DC
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 018B472543FBF97B599F83CDF7CC9361C5EB
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/8sZqQ6fl5Lry_RLighZrosebodw.roa
Signing time: Thu 19 Oct 2023 08:55:06 +0000
ROA not before: Thu 19 Oct 2023 08:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 194.1.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:25:43:fb:f9:7b:59:9f:83:cd:f7:cc:93:61:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Oct 19 08:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2c66a43a7e5e4baf2fd12e282166ba2c79ba1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:d3:b7:48:ea:89:63:31:20:ff:08:48:0a:
38:13:c2:07:b2:19:cf:57:20:e8:a9:32:2a:75:e0:
dc:91:a7:52:ed:ac:ec:f4:4c:01:d1:d1:a4:67:79:
2e:bc:0c:a6:e4:b5:84:5d:60:52:4b:d9:2e:0e:fa:
4d:1f:86:42:4e:56:42:86:41:00:9a:f2:a0:be:12:
4d:bf:a6:c6:3e:6c:d8:81:cd:d4:b7:b2:cc:00:b4:
d7:a9:54:49:4e:ea:76:20:e3:75:21:c6:4c:a5:e3:
a0:4d:7d:ae:23:bd:e6:ce:23:97:96:a3:3a:04:c4:
a4:7e:4a:79:bd:52:74:b8:e0:b1:e2:6f:89:f8:94:
0d:3a:68:9f:03:72:e9:9a:86:4f:c3:3f:f2:be:f0:
45:8d:41:ff:2a:da:50:b5:d8:2f:2b:ff:ef:c2:6c:
61:5c:78:03:66:1e:0c:90:bd:b1:e7:7e:3a:8c:4c:
53:7e:95:1a:f5:38:ae:a9:b2:55:f9:c9:55:d5:7d:
25:dc:8c:d1:35:da:73:9f:2c:af:63:b6:ad:06:38:
51:50:84:50:62:16:32:12:fc:25:cd:39:84:04:22:
cf:59:84:df:15:4b:59:d4:7d:5f:0a:07:ee:ed:7f:
ef:ab:0a:76:59:01:8a:71:a0:b5:ea:30:80:bf:aa:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:6A:43:A7:E5:E4:BA:F2:FD:12:E2:82:16:6B:A2:C7:9B:A1:DC
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/8sZqQ6fl5Lry_RLighZrosebodw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7a:f2:7f:b0:3a:36:0b:a2:49:a3:16:67:c0:ca:9e:61:fc:
6a:e7:f7:11:94:23:75:04:41:75:d4:81:49:e0:f2:ba:98:ec:
dd:82:af:37:65:83:d0:7f:f8:1f:92:03:07:a9:56:87:cd:67:
be:20:21:70:77:b2:3b:91:3e:b6:27:c2:c4:2b:1b:e4:4e:aa:
be:67:5c:5c:a6:5c:a6:21:44:eb:f9:be:89:70:4f:62:1b:7c:
5c:85:0d:24:07:67:00:7c:ff:3d:7a:29:8c:66:4c:79:28:18:
c8:4a:f3:d2:9a:aa:cc:d4:09:a4:89:fb:b2:64:05:64:ad:d4:
5f:98:93:88:05:3d:85:d0:17:c4:5c:e5:77:cc:84:05:30:72:
20:89:d4:9d:4a:bc:02:d2:42:de:3b:af:79:fa:b0:56:53:e9:
32:35:5d:9c:d7:b9:60:21:64:d6:ed:94:5b:8a:8f:92:02:73:
11:cf:bc:f4:bf:ae:f5:8a:19:f3:a4:0e:4a:90:2e:3b:68:7f:
0d:4d:55:c1:1d:b5:57:89:11:2f:79:1c:5e:dd:5e:42:89:1f:
48:8b:c2:c9:06:4f:bf:7f:13:ab:f0:64:f7:7a:8a:5f:ed:6c:
82:ea:26:3c:a0:4c:e7:74:ff:99:3e:0f:66:e9:80:ac:41:13:
31:bc:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:52 2024 by rpki-client on console-ams.rpki-client.org