Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/8pQROyyUYnB3t2ZPND-pYVYqQDM.roa
File: 8pQROyyUYnB3t2ZPND-pYVYqQDM.roa (raw, json)
Hash identifier: a4X0W8TK/lC0wcBe2G0oyPkVumDTDU3aw/0otQ9HNF0=
Subject key identifier: F2:94:11:3B:2C:94:62:70:77:B7:66:4F:34:3F:A9:61:56:2A:40:33
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01893A98F82155FA49F35DB8B2D8385EF1B8
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/8pQROyyUYnB3t2ZPND-pYVYqQDM.roa
Signing time: Sun 09 Jul 2023 12:20:50 +0000
ROA not before: Sun 09 Jul 2023 12:20:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60161
IP address blocks: 212.138.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:98:f8:21:55:fa:49:f3:5d:b8:b2:d8:38:5e:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jul 9 12:20:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f294113b2c94627077b7664f343fa961562a4033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:bd:22:20:4c:6e:48:5b:56:a7:31:b9:a2:
5f:1d:d3:eb:c3:20:d6:f0:b3:72:ce:63:c7:7d:f3:
dd:53:c7:79:ef:14:cb:98:ee:7d:29:f6:14:f7:9d:
33:de:7a:48:3e:84:0b:c1:24:ec:d7:55:2f:e5:b3:
20:f0:4f:dd:84:59:ee:43:50:f6:c8:34:8f:e1:16:
f0:fa:12:b4:38:eb:30:c3:32:b0:77:f5:36:d6:db:
c3:cb:87:5f:d5:dc:39:d9:82:a4:7d:fb:2e:75:7d:
65:81:6d:8e:50:08:a2:af:39:c7:e2:e4:cb:07:fc:
05:0d:61:4f:ba:6c:fb:55:52:63:8d:ef:ee:48:45:
b5:6e:a5:4b:1b:8d:7f:54:af:1e:5b:1a:9b:b6:ff:
4c:d1:f5:b4:e2:05:a0:94:79:2c:f0:e5:18:10:29:
d0:00:a9:94:15:5a:aa:7e:dd:a6:84:d5:5a:ad:d9:
92:cb:32:63:a5:4c:a6:98:c1:88:9e:b6:37:a9:7a:
c2:58:e1:4c:82:cd:37:b2:b2:2b:fb:7c:9d:24:d1:
98:89:b2:89:1a:ec:ba:a4:4f:06:60:be:f3:d7:1e:
85:67:9e:e5:cd:bd:7f:4c:28:bc:f5:3f:4c:31:dd:
83:ff:bf:2c:74:ca:78:d7:32:63:11:e5:6a:50:02:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:94:11:3B:2C:94:62:70:77:B7:66:4F:34:3F:A9:61:56:2A:40:33
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/8pQROyyUYnB3t2ZPND-pYVYqQDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ff:0b:0a:95:c4:80:6c:d9:3b:2a:a8:57:89:65:f7:87:c0:
71:c9:52:79:f6:b5:bf:1b:5f:4c:de:65:09:e4:08:29:e2:2b:
59:a8:5c:30:fb:7b:9c:2f:fe:38:e5:02:b4:84:65:76:ec:a4:
3c:9f:57:da:24:72:dc:1c:e5:99:83:bc:e2:12:ee:58:08:1d:
2f:07:47:93:21:dd:39:11:97:de:5b:83:d5:67:21:34:fd:42:
13:7d:57:90:5f:11:e3:5d:8f:e6:dc:6f:58:ae:4c:73:4e:9d:
fc:1d:ef:c4:71:a7:19:f4:03:03:38:eb:5d:29:18:46:98:48:
05:f5:b5:f7:a6:ec:34:2e:f0:6f:a6:05:16:85:1e:58:74:0e:
46:e6:28:24:9a:26:58:2f:50:e2:81:3c:cd:8e:64:ed:69:e0:
5e:91:9e:bb:48:61:72:28:48:6c:e1:0f:2c:95:26:9d:86:7b:
64:e9:ff:5b:fa:a1:8a:f3:79:ef:08:1e:73:64:95:25:aa:82:
da:15:c6:7a:b6:2c:55:e6:fb:61:fd:26:7b:d8:57:16:09:3f:
1c:f9:5c:23:1e:ef:12:76:01:8d:0d:5e:05:ed:4d:b8:8c:91:
e2:47:12:1b:e2:68:0f:b0:6d:bd:4f:66:de:28:a9:c0:29:31:
33:9d:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:29 2024 by rpki-client on console-fra.rpki-client.org