Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/8JRijscykaSX7CiwtCOWDYNh4y0.roa
File: 8JRijscykaSX7CiwtCOWDYNh4y0.roa (raw, json)
Hash identifier: cDbqX+EPkCkdxi0LIHvYwkzCS8QHAkYqxTu0VFIVj0U=
Subject key identifier: F0:94:62:8E:C7:32:91:A4:97:EC:28:B0:B4:23:96:0D:83:61:E3:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 01856EAFC754833110800E75E3EC0A0B8F8F
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/8JRijscykaSX7CiwtCOWDYNh4y0.roa
Signing time: Sun 01 Jan 2023 18:54:51 +0000
ROA not before: Sun 01 Jan 2023 18:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29396
IP address blocks: 193.222.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c7:54:83:31:10:80:0e:75:e3:ec:0a:0b:8f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Jan 1 18:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f094628ec73291a497ec28b0b423960d8361e32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:88:76:9d:39:de:52:76:52:09:ca:63:7a:
82:a4:a2:39:d5:c8:08:dc:8d:19:0a:4e:cd:ab:8c:
de:d3:4f:71:7d:25:54:cd:57:5a:14:4a:eb:a0:df:
48:ad:65:99:9e:06:37:7f:a1:4c:d9:34:94:99:c1:
f2:f6:1b:c4:43:47:c6:1c:b3:f1:b3:4e:75:e6:7c:
01:9c:40:e6:4e:4b:46:db:ff:87:85:94:80:8b:4b:
69:7a:a9:40:2a:d9:19:7d:ef:aa:a7:fe:59:da:87:
bd:95:89:43:b4:7c:46:46:62:b4:dd:5b:c5:c6:32:
9f:d4:b4:ca:77:38:bb:0e:c6:df:90:a6:c4:51:b8:
f5:e0:e8:f8:72:c7:85:4d:d3:54:e5:17:8b:4d:3b:
8d:e6:07:06:9e:4d:b9:c3:c4:73:d1:c7:dc:af:f2:
0b:77:5c:c2:42:75:bc:02:50:52:58:8e:85:12:8e:
5b:91:1c:5b:2e:7f:68:04:b1:9a:d9:bb:27:b4:db:
f7:52:c1:8a:b4:a0:fe:25:ba:29:04:57:b4:8c:7a:
b4:7a:4b:f9:71:60:5a:83:8d:da:c8:2b:65:ed:fb:
07:37:8a:2d:d7:e2:dc:89:b8:b4:7b:2b:a1:bd:14:
d3:2b:bb:71:20:1a:18:10:26:9f:69:24:7b:79:c7:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:62:8E:C7:32:91:A4:97:EC:28:B0:B4:23:96:0D:83:61:E3:2D
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/8JRijscykaSX7CiwtCOWDYNh4y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:02:ab:36:ee:31:45:ad:cd:f9:5d:52:e7:fb:a2:d8:65:43:
84:2f:2d:27:f8:12:fc:3e:e5:61:b4:2f:df:7d:3e:bf:56:c1:
e0:d4:4a:4f:fb:f4:89:cd:ac:49:ac:71:10:8f:74:bd:fe:99:
22:e9:3a:9d:61:a5:d2:d6:a6:86:bb:f7:8b:94:ab:92:5f:1e:
81:2b:75:22:49:c2:f3:53:42:70:69:4b:0a:a9:89:0b:70:c7:
b0:21:94:4c:00:64:50:ae:76:ae:4e:f2:ad:83:90:72:d9:fc:
31:d3:84:85:36:39:7b:10:51:13:ad:13:06:63:f4:c4:7c:48:
85:56:cd:d7:54:21:ac:73:02:17:a4:8d:0e:b3:8a:d0:3e:b4:
bb:6c:05:f5:4a:bf:f0:60:8b:b6:04:45:6d:2e:d1:30:4c:e4:
31:e4:89:34:a8:7d:d6:c3:29:9d:8f:07:d2:20:8f:86:c8:18:
02:1b:25:d6:7c:d6:19:d2:47:d7:e0:f6:ae:89:ad:a4:e5:07:
86:18:5c:d7:12:42:42:cd:00:56:18:58:7c:25:4c:d9:65:a0:
01:78:74:03:17:58:c6:70:23:eb:cb:f9:e9:bc:36:ad:11:10:
49:45:59:20:44:7c:35:4d:03:b2:c3:ff:0f:82:5f:09:28:2a:
a7:85:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:05 2024 by rpki-client on console-ams.rpki-client.org