Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/n89oiiEfmu-Nm-7lzmLAy64_5o0.roa
File: n89oiiEfmu-Nm-7lzmLAy64_5o0.roa (raw, json)
Hash identifier: ShGVXBxsGRvnM9olP/esN4NSDGbRHRDcBtV6Ze/Anp4=
Subject key identifier: 9F:CF:68:8A:21:1F:9A:EF:8D:9B:EE:E5:CE:62:C0:CB:AE:3F:E6:8D
Certificate issuer: /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial: 018E107844EB560604AC5D0771D73F8D1DB4
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/n89oiiEfmu-Nm-7lzmLAy64_5o0.roa
Signing time: Tue 05 Mar 2024 21:15:01 +0000
ROA not before: Tue 05 Mar 2024 21:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213354
IP address blocks: 194.79.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 06 Mar 2024 18:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:78:44:eb:56:06:04:ac:5d:07:71:d7:3f:8d:1d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Validity
Not Before: Mar 5 21:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcf688a211f9aef8d9beee5ce62c0cbae3fe68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:d4:ca:c5:ca:8e:8e:78:00:2c:be:a9:cb:
07:46:e9:42:cc:fe:40:71:37:3d:f0:b8:a6:a0:c9:
4d:38:d2:38:f4:0a:48:8c:ed:45:8d:0c:9e:b4:5f:
d4:3e:eb:57:25:bb:e1:01:19:5b:07:af:52:d6:ea:
f8:af:72:a7:20:dd:e7:f1:78:83:8e:5a:d5:c3:df:
0a:6d:4d:5e:c7:59:88:cd:0c:15:65:d6:80:84:51:
95:86:30:4b:b2:b0:39:b9:12:11:53:00:fe:9f:f6:
15:bf:d1:1d:b5:16:57:85:c2:f1:e5:16:a5:79:f0:
62:72:1a:07:72:ac:d3:59:d7:71:eb:b5:79:94:84:
a4:18:d0:5c:03:36:60:54:5f:b3:42:2b:23:c9:fb:
a5:e9:f2:74:c7:87:af:6c:9b:79:29:05:ae:c4:cd:
4b:03:a0:ca:70:6e:1e:46:71:95:55:0d:92:d7:f4:
f7:ee:bc:5c:ee:dc:60:e3:42:3d:25:e4:66:9d:dc:
d6:72:d2:b3:4c:bf:1d:8f:a6:5e:ed:3f:1b:90:3e:
49:9f:53:c1:b9:23:28:62:bc:b8:be:59:cc:8d:93:
67:e6:84:ed:89:ce:ec:a8:b2:04:65:25:9f:49:84:
b2:90:a5:e7:9d:ae:08:72:72:36:62:49:c2:1d:1b:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:68:8A:21:1F:9A:EF:8D:9B:EE:E5:CE:62:C0:CB:AE:3F:E6:8D
X509v3 Authority Key Identifier:
keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/n89oiiEfmu-Nm-7lzmLAy64_5o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.8.0/22
Signature Algorithm: sha256WithRSAEncryption
37:a2:71:05:bf:8f:18:e2:cd:9a:18:36:8a:b1:56:56:33:56:
04:e7:17:71:27:a0:7c:54:33:23:4b:a0:9a:f1:29:7f:ac:d5:
7b:28:e2:0c:52:89:d0:36:3c:ed:66:67:8a:12:7e:fd:ed:96:
9f:b3:d3:9f:4c:71:18:4c:ab:6a:8a:d0:1e:16:d5:b9:a4:b4:
5d:cf:0a:23:2a:91:b1:c6:11:3a:65:f3:66:66:18:1a:57:fe:
ca:e6:ac:86:56:31:c7:f8:26:b0:4c:b6:d7:90:9c:53:a5:50:
ae:f9:06:38:77:55:18:a6:1b:cc:b5:d0:23:27:fa:20:3d:7f:
11:aa:fa:a0:a5:a1:c1:78:b9:85:a9:fb:22:77:0c:36:1e:51:
59:f2:75:13:32:3c:f8:14:ff:46:fd:32:5b:d5:1e:e0:fd:bc:
39:3a:3c:41:9a:50:16:0e:53:e5:c5:31:69:a9:67:e6:e6:4c:
4f:c5:79:2e:82:cb:b9:ae:b7:64:21:11:d6:9a:b0:b2:04:d9:
24:0a:76:44:36:9a:e6:cc:56:02:2c:10:75:5b:ac:8c:2b:21:
d3:5b:fe:c5:f0:05:07:c6:62:a1:3f:36:89:56:83:45:1c:bc:
4a:47:fa:c0:8e:69:78:12:97:77:06:a6:f2:cc:61:db:45:8b:
c8:e4:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org