Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/B0_HK59DCwWMCJfvQ5aOi363q8c.roa
File: B0_HK59DCwWMCJfvQ5aOi363q8c.roa (raw, json)
Hash identifier: X8c7ssSKFsgibyeqcHjRQ4kKEqF4+5QHrJmmtPYpGxA=
Subject key identifier: 07:4F:C7:2B:9F:43:0B:05:8C:08:97:EF:43:96:8E:8B:7E:B7:AB:C7
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 018A4125B48DF32DB7B69506144C09669159
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/B0_HK59DCwWMCJfvQ5aOi363q8c.roa
Signing time: Tue 29 Aug 2023 11:55:04 +0000
ROA not before: Tue 29 Aug 2023 11:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 216.245.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 13:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:25:b4:8d:f3:2d:b7:b6:95:06:14:4c:09:66:91:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Aug 29 11:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=074fc72b9f430b058c0897ef43968e8b7eb7abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:91:1b:9c:53:24:39:7a:f4:a4:4e:bc:cf:
57:2f:5d:d3:21:6b:28:cc:4c:3e:fb:b1:0e:c2:3a:
49:2d:b3:9b:d1:8b:2a:a1:a6:0a:cf:b8:d6:f1:62:
6b:58:72:05:2c:0f:2a:9d:67:6b:88:a8:1f:13:40:
5a:70:c2:24:58:60:5f:24:07:17:10:b6:a0:e3:49:
50:7f:17:83:83:c6:41:a0:b5:70:9e:32:71:4c:2c:
1b:28:19:9a:46:95:5b:61:32:1d:84:c9:43:c6:cd:
e9:35:49:aa:6b:96:2a:38:3f:92:59:0f:ff:06:f8:
2f:09:1f:a2:87:29:41:37:71:f2:7d:bd:a8:83:18:
1c:20:19:c6:2f:ae:44:73:d7:3d:c3:5e:5f:d3:a3:
37:cb:c6:02:ee:71:76:bc:58:cf:2a:a2:a7:3d:e1:
d0:f6:4e:d4:fb:0f:e8:ae:ed:6b:ac:94:dc:74:15:
02:e7:22:2c:e5:bf:de:36:7c:7c:c5:6d:3d:b9:36:
6d:95:62:93:08:d5:5e:b6:f5:88:ff:f3:cd:4c:fa:
42:91:df:fc:84:58:2f:4e:b8:91:70:be:10:b0:1d:
73:96:48:4b:c9:bc:31:ff:57:02:b2:21:25:2b:6d:
f9:e5:87:7c:4d:b2:69:da:84:81:2a:2a:b5:de:8c:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:C7:2B:9F:43:0B:05:8C:08:97:EF:43:96:8E:8B:7E:B7:AB:C7
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/B0_HK59DCwWMCJfvQ5aOi363q8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.245.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f5:f9:60:d4:1d:ea:c1:21:5f:20:33:95:d2:a6:25:ab:e0:
ef:dc:3d:87:e3:bf:24:f7:60:04:17:73:58:4c:ad:8b:8f:eb:
53:d4:8e:b0:bb:2f:38:dd:d1:45:c7:bb:2b:82:4a:fa:a1:0e:
c5:db:63:ff:5a:40:f4:3c:62:d5:5a:fb:d8:51:26:99:63:98:
bb:b0:a0:8f:c9:de:f6:79:eb:c9:1c:97:1b:78:c0:40:18:78:
18:65:cb:6b:54:97:77:6f:d4:c4:20:5e:b2:6f:be:d0:dd:74:
9e:93:fc:11:8f:1a:2b:c5:b5:ee:37:d9:39:dd:c5:54:7a:cf:
50:7b:0e:1f:3f:d5:7f:72:d1:2c:f7:63:3b:bf:b7:0c:e8:37:
65:87:82:c7:90:1c:16:de:21:38:88:4a:40:3f:90:18:ae:9f:
60:39:85:91:ba:e7:2a:6b:4a:b8:b6:e9:88:f8:21:85:84:ed:
c9:f0:f8:76:f7:7f:16:fd:bb:0c:bd:bf:a5:ae:6a:92:6e:fe:
9d:d7:a4:91:f5:1b:b5:32:73:63:ee:27:f5:48:ac:e4:fa:ce:
0f:85:a9:20:ca:40:01:46:e6:2c:e8:c4:9e:a7:87:a7:d1:b5:
b2:5b:fe:46:4e:17:62:2b:e8:be:39:8f:d3:c8:c9:2f:71:b0:
2c:74:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:41 2024 by rpki-client on console-ams.rpki-client.org