Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/T8z-j5JfLJgKgcwVBbC3tHZ6oHM.roa
File: T8z-j5JfLJgKgcwVBbC3tHZ6oHM.roa (raw, json)
Hash identifier: yynr+xSMBsbI1lZjBCxVKs8oWRZirW+QZynXQycEhaY=
Subject key identifier: 4F:CC:FE:8F:92:5F:2C:98:0A:81:CC:15:05:B0:B7:B4:76:7A:A0:73
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 0185711E5C75FB6FCBFB8FF3242E2F177960
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/T8z-j5JfLJgKgcwVBbC3tHZ6oHM.roa
Signing time: Mon 02 Jan 2023 06:14:53 +0000
ROA not before: Mon 02 Jan 2023 06:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.124.142.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5c:75:fb:6f:cb:fb:8f:f3:24:2e:2f:17:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Jan 2 06:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fccfe8f925f2c980a81cc1505b0b7b4767aa073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:6b:23:c1:1e:cb:ec:50:7d:da:b9:b6:b2:
ef:06:55:9c:14:07:ae:a3:10:a1:19:1b:dd:66:5b:
c8:fa:b5:db:f6:de:4f:1e:fb:99:a4:13:ff:f0:67:
79:1b:c2:d8:a4:69:2d:0d:e4:12:6f:aa:5c:29:4d:
9b:42:cf:f3:fc:22:12:96:3d:ff:d3:38:44:6d:37:
86:ee:c0:2e:48:ee:d4:f7:69:f8:44:69:6e:49:99:
b1:e4:a4:6b:29:50:3a:43:88:e7:e8:ae:48:e5:78:
bc:a0:9c:18:c9:2d:92:16:62:7f:73:e7:30:a4:14:
85:e7:ea:40:55:1d:ae:0f:6e:b3:f0:a6:bc:1b:9a:
2f:21:56:8e:9b:bf:2a:8d:60:bc:ac:2a:a3:37:76:
d7:1c:88:fa:34:c6:1b:58:83:bf:04:31:1a:d7:2e:
36:d2:42:9b:5c:3f:ab:a0:11:8e:36:df:1e:86:f2:
36:31:dd:46:db:74:39:91:a6:6a:85:12:17:dd:49:
79:73:af:8c:4f:88:21:b7:bf:25:cb:da:f4:e0:2c:
62:a5:00:4b:10:3f:ed:30:db:7a:48:33:64:14:00:
e1:a3:5d:08:06:50:07:0d:29:1c:78:04:4b:ad:81:
d1:cc:43:2c:2d:11:7e:d5:8c:97:ef:f0:53:f3:ae:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:FE:8F:92:5F:2C:98:0A:81:CC:15:05:B0:B7:B4:76:7A:A0:73
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/T8z-j5JfLJgKgcwVBbC3tHZ6oHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.142.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:1a:b3:06:c9:f2:9f:ad:9c:7a:cc:17:8e:41:91:68:37:b5:
61:99:ba:7d:d3:f9:b8:55:62:26:4f:ff:53:3e:f9:a6:d6:f8:
78:56:a9:b0:a9:12:89:29:31:47:c4:47:93:1f:1c:c1:25:63:
76:53:32:4e:ce:0c:d2:52:03:b6:07:30:e5:d4:da:c8:96:ff:
69:73:7c:e7:de:f4:15:bd:62:ad:2b:8b:95:44:a1:d1:8b:bd:
15:54:ca:1b:00:f0:0e:2b:ee:c0:9c:5e:94:71:0b:84:f9:bc:
54:19:54:01:1e:2e:a0:3d:02:68:ab:2a:9f:4c:26:b3:99:74:
2f:0c:f4:93:40:53:7b:8a:99:e5:0a:93:cf:db:88:1e:9f:a0:
48:6c:49:f0:d7:f1:c7:2f:1a:cb:4c:9e:53:77:42:a0:38:d7:
ef:be:87:18:75:1d:fc:60:c5:4f:4d:3a:5a:23:76:35:69:eb:
f0:9e:33:c3:36:a9:ad:b7:76:f2:ee:52:09:c6:4d:35:df:c7:
16:48:30:0f:e5:ef:24:87:1c:7c:d8:b3:e6:c4:6a:dc:8b:6c:
d2:9d:fd:64:c5:cd:12:fb:1d:d5:28:2d:6a:b5:f2:7d:24:e9:
32:50:31:8e:b4:4c:cb:d8:79:62:e5:eb:3c:5e:f4:ec:f7:e1:
36:eb:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:16 2024 by rpki-client on console.sobornost.net