Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3A8lZC-hl6RSR3wH32VD-t2o2MM.roa
File: 3A8lZC-hl6RSR3wH32VD-t2o2MM.roa (raw, json)
Hash identifier: +n6zn/7TDBEbrtRWF6sEKf8z9ni056IeH+nfxdO8/ss=
Subject key identifier: DC:0F:25:64:2F:A1:97:A4:52:47:7C:07:DF:65:43:FA:DD:A8:D8:C3
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01856EAFF4CA4A970783240C45460D0A74E4
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3A8lZC-hl6RSR3wH32VD-t2o2MM.roa
Signing time: Sun 01 Jan 2023 18:55:03 +0000
ROA not before: Sun 01 Jan 2023 18:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62091
IP address blocks: 192.162.64.0/24 maxlen: 24
192.162.64.0/25 maxlen: 25
Validation: Failed, certificate revoked on Wed 23 Aug 2023 08:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:f4:ca:4a:97:07:83:24:0c:45:46:0d:0a:74:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 18:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc0f25642fa197a452477c07df6543fadda8d8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:b8:30:59:c8:64:56:72:0e:06:ef:07:44:
28:2f:37:d6:e2:88:b0:89:e3:d3:52:fe:ad:83:95:
91:3d:14:e5:a9:d1:34:6d:49:7c:1e:a1:b2:c6:87:
51:af:74:60:ef:b6:90:11:a2:4c:fa:00:ef:a9:5b:
76:35:87:d0:9c:92:1c:98:fc:7f:61:ee:df:ef:e4:
67:b3:44:6d:86:95:ce:49:f2:d7:51:ac:44:5c:b7:
47:c4:6f:ee:ed:e2:23:79:a8:7d:0b:2d:fa:e6:02:
dc:b2:07:26:ac:72:78:c0:ce:10:c8:48:e5:03:b2:
20:3d:fa:6f:4c:b6:ad:c9:b1:99:d3:ed:5f:62:e2:
6c:ea:f6:ef:0a:47:3f:14:e2:60:42:29:91:27:c1:
7d:a5:95:25:91:b9:5f:a4:06:a4:52:1c:95:ae:00:
9b:44:67:da:f4:c6:32:cd:1c:e9:cb:ec:37:f4:64:
52:b3:11:4f:2a:34:9a:49:16:7c:9a:70:0c:97:57:
6d:e7:93:a5:76:b1:2e:8f:5e:6b:63:06:18:97:19:
c6:9b:ee:f8:f6:f6:c8:25:e6:1d:8b:fa:97:ab:65:
88:cc:2b:98:ba:1e:fa:ba:73:5e:f6:18:71:da:96:
7e:ea:41:4f:71:bb:15:0a:df:dc:06:02:98:99:64:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:25:64:2F:A1:97:A4:52:47:7C:07:DF:65:43:FA:DD:A8:D8:C3
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3A8lZC-hl6RSR3wH32VD-t2o2MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4d:47:97:20:8f:72:dd:43:cb:cc:a6:00:17:59:81:96:74:
fa:a4:9b:72:81:c1:d4:cc:49:24:32:cd:5c:cb:d3:0d:9b:29:
28:11:da:02:60:4d:4b:19:94:e6:24:5a:a3:23:2c:4c:38:02:
9f:a0:bf:d9:97:be:1b:c0:98:9c:53:e8:1c:5d:6f:41:de:9d:
25:97:26:88:75:37:0b:b2:19:77:ed:c7:85:2e:6b:cc:f6:3b:
ba:5a:56:0f:af:8c:50:de:83:7f:d2:a0:21:b6:b8:52:3c:4a:
b3:d9:fa:3a:09:2b:4a:87:95:24:dc:27:dc:9e:81:ce:7c:2e:
33:2f:89:f4:aa:8e:56:79:bc:c6:0a:68:3c:77:af:16:c8:76:
34:db:7f:29:24:9d:57:fe:99:09:aa:91:1c:a0:d7:33:71:9b:
f5:7b:f8:0b:83:1d:bc:77:76:09:e5:85:45:bc:4f:61:06:b3:
21:e7:04:72:d8:62:8d:ac:12:71:c2:5f:59:23:f3:7f:b4:27:
a6:ea:0d:93:29:ca:b4:4a:2a:12:24:0a:7f:44:62:74:37:4a:
18:f1:74:59:16:f4:1e:0e:b9:02:47:1c:5e:be:36:aa:4c:73:
bd:71:5d:5f:f6:b0:29:e4:2a:38:c5:3b:19:88:ba:b7:1a:b0:
86:2c:bc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org