Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/8SXz7c8Yxe8IwrUwdXhluUF2LxY.roa
File: 8SXz7c8Yxe8IwrUwdXhluUF2LxY.roa (raw, json)
Hash identifier: hyjdODeqeSA4RN1G4AS+r4a12tPlWF1PktSgLIH8TnE=
Subject key identifier: F1:25:F3:ED:CF:18:C5:EF:08:C2:B5:30:75:78:65:B9:41:76:2F:16
Certificate issuer: /CN=f764eed15c52b4c8110a222963dc7b7d4ba2d146
Certificate serial: 01856F14AC13323F6EBEC323381FEB7A3203
Authority key identifier: F7:64:EE:D1:5C:52:B4:C8:11:0A:22:29:63:DC:7B:7D:4B:A2:D1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92Tu0VxStMgRCiIpY9x7fUui0UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/8SXz7c8Yxe8IwrUwdXhluUF2LxY.roa
Signing time: Sun 01 Jan 2023 20:45:03 +0000
ROA not before: Sun 01 Jan 2023 20:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202920
IP address blocks: 84.38.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ac:13:32:3f:6e:be:c3:23:38:1f:eb:7a:32:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f764eed15c52b4c8110a222963dc7b7d4ba2d146
Validity
Not Before: Jan 1 20:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f125f3edcf18c5ef08c2b530757865b941762f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:07:9c:ec:1e:cc:4d:21:5f:fd:ff:e1:3a:
67:c2:03:b2:6e:d2:db:6e:fa:2b:46:d6:08:c6:a4:
28:79:54:9d:15:9f:be:bd:a1:ae:de:22:e8:13:31:
1d:96:76:fa:ea:00:31:23:31:d0:d3:26:b5:ef:e6:
e5:ad:a0:99:03:de:b0:45:8e:e4:06:16:d8:95:04:
85:c4:11:b9:35:c8:14:83:32:3d:30:80:7a:5b:77:
23:6f:e0:27:5b:dc:27:fc:86:a8:46:04:13:e7:81:
2b:a7:25:90:ad:c0:2d:93:d8:32:3c:98:26:a5:a3:
75:f9:a2:80:59:ab:b7:08:27:82:07:f6:01:3e:02:
86:33:65:43:71:30:52:0d:22:db:93:75:01:4c:b3:
ba:a1:d3:80:90:0d:19:d4:cc:f9:4e:02:cc:e1:c2:
22:3e:2b:34:f4:78:ea:37:7d:20:3a:fd:1f:73:34:
10:c6:5d:98:10:c0:50:e8:29:31:f2:06:87:32:fa:
13:21:fb:7f:2c:fb:26:39:b8:37:a4:b6:44:83:32:
13:01:c2:80:8e:57:26:47:13:f1:9f:b7:aa:ff:e9:
ea:c0:39:b3:92:b2:c2:7b:34:a6:a5:75:d1:2f:e1:
89:c9:5b:00:03:4c:1e:03:b7:ae:28:65:99:95:27:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:F3:ED:CF:18:C5:EF:08:C2:B5:30:75:78:65:B9:41:76:2F:16
X509v3 Authority Key Identifier:
keyid:F7:64:EE:D1:5C:52:B4:C8:11:0A:22:29:63:DC:7B:7D:4B:A2:D1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92Tu0VxStMgRCiIpY9x7fUui0UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/8SXz7c8Yxe8IwrUwdXhluUF2LxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/92Tu0VxStMgRCiIpY9x7fUui0UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.131.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4d:a7:c9:61:2b:51:c0:97:9e:60:51:2c:0d:df:66:39:23:
d3:1c:01:4e:0b:e4:c2:4d:b5:78:58:ca:5d:ed:50:fa:52:d8:
fa:46:7e:d7:ff:af:bb:75:2c:06:1a:09:8c:71:61:4b:5d:73:
f6:1b:b6:c9:27:6b:93:1a:1a:08:2d:83:45:e9:7b:eb:87:7c:
6c:af:43:c8:b9:df:43:97:33:d3:81:9d:dd:d2:37:fe:aa:90:
da:a7:91:b7:59:e8:ca:6a:85:c8:a0:5c:84:f9:ea:2c:12:4b:
ea:23:d6:09:ec:5b:aa:40:a7:4c:a1:47:68:fa:30:b8:3e:47:
5c:c9:71:2a:40:54:eb:35:7b:35:57:1d:92:4f:ff:e7:3b:c7:
64:fb:ec:54:5e:25:e3:92:68:b7:42:1b:a0:1e:77:a4:ee:af:
05:7f:80:1f:ee:15:16:c3:c5:e4:2b:88:ac:05:11:0b:0b:e7:
63:94:47:8c:2f:c1:4a:38:07:dc:48:cd:38:29:17:7c:d3:a4:
ee:68:d7:2b:5d:7e:75:ab:52:65:e6:ea:63:5e:d0:a4:99:57:
76:18:63:8b:f5:ab:29:a1:2b:dc:ab:a4:16:66:3d:a4:7e:50:
9e:1e:0e:89:2a:96:30:0f:19:65:41:fb:5c:64:4b:85:0b:af:
a7:5a:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:58 2024 by rpki-client on console-ams.rpki-client.org