Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/C6mJXbT9oJGb3BzGuMAm5gxYurI.roa
File: C6mJXbT9oJGb3BzGuMAm5gxYurI.roa (raw, json)
Hash identifier: jzxXHykl3OIt4KQtGYUFYskuS+Yfz+DHu6bRXTolKh4=
Subject key identifier: 0B:A9:89:5D:B4:FD:A0:91:9B:DC:1C:C6:B8:C0:26:E6:0C:58:BA:B2
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 018A54C07CFBFD7061FCFA47415C696D076C
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/C6mJXbT9oJGb3BzGuMAm5gxYurI.roa
Signing time: Sat 02 Sep 2023 07:16:55 +0000
ROA not before: Sat 02 Sep 2023 07:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 216.245.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:54:c0:7c:fb:fd:70:61:fc:fa:47:41:5c:69:6d:07:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Sep 2 07:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba9895db4fda0919bdc1cc6b8c026e60c58bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:e9:80:b6:b5:72:2a:f3:2b:78:06:44:fb:
c3:35:95:60:de:17:d9:09:be:93:6f:7b:d9:47:24:
c7:5b:df:6f:95:ef:80:52:31:6c:41:94:0b:13:70:
38:75:14:b9:93:26:ee:fb:66:12:56:e8:b1:68:42:
bf:60:73:da:63:9d:0e:8a:df:1d:0c:ce:18:37:a2:
97:e4:cb:03:e8:aa:15:e8:52:c0:86:22:a5:39:cc:
bd:f3:59:12:8c:ae:3b:76:7f:6a:82:56:28:e9:9c:
0d:82:a3:38:78:27:b3:03:d2:25:4a:4c:f6:7d:a0:
e5:5c:92:70:46:9b:30:e7:c9:87:b6:5b:02:41:92:
91:a1:2b:38:88:ce:35:c3:a5:c4:f7:cc:bd:6c:f0:
e4:ca:5a:02:19:11:0f:64:e1:ec:51:bb:b9:02:a2:
1f:95:cc:58:0f:35:ec:bd:5c:a4:e5:f9:73:0e:a2:
79:1e:2d:35:ad:e4:f3:0d:9a:98:3b:c3:23:b7:fe:
ab:96:20:34:3f:74:82:8b:12:c3:9e:a7:ad:d9:98:
30:7e:ed:a8:39:07:eb:51:50:27:27:29:57:d4:1c:
3c:b6:07:dc:cf:3a:4d:51:27:68:b8:e7:93:62:1e:
d6:73:ad:d1:45:e7:e9:fb:75:d7:f9:6c:8b:18:5f:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A9:89:5D:B4:FD:A0:91:9B:DC:1C:C6:B8:C0:26:E6:0C:58:BA:B2
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/C6mJXbT9oJGb3BzGuMAm5gxYurI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.245.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0c:25:b3:9f:af:bb:79:8f:de:35:72:25:05:13:de:92:93:
1f:d5:c8:bf:f4:bf:fc:a3:b8:15:d8:0f:5f:e4:18:0e:04:44:
54:b4:c7:6d:bd:09:3d:f2:27:95:20:dd:16:51:b6:41:e3:05:
17:4b:3d:62:e6:f1:bb:20:2a:d2:3e:96:1e:a4:9e:8e:5e:85:
c9:fb:d8:8e:6e:73:b9:4b:af:3c:0b:f5:da:27:c0:f0:3f:49:
c3:e1:04:3e:f7:24:4d:13:a7:f7:b3:2e:10:2d:0e:8d:2d:ee:
1f:f4:28:ec:12:2d:07:9e:07:71:73:8e:f9:07:88:21:19:44:
4d:b4:92:0b:be:0b:d8:44:98:37:60:5a:69:a1:f9:46:1a:3e:
28:8a:a2:e5:1c:a7:5f:48:73:06:20:0b:d6:b7:49:0e:bf:9a:
e8:70:1b:48:3f:e0:c9:0f:a1:94:de:df:c1:ed:d0:4f:2b:8c:
4d:31:1c:67:3e:0f:cb:a2:d4:ec:8a:19:86:67:94:da:b6:4a:
ac:3a:e5:7e:c4:8d:f3:50:2e:c1:eb:45:4c:c5:fe:d2:50:7c:
47:ef:b7:e2:ed:d6:3e:bf:86:c7:87:55:64:d1:1f:be:65:b7:
16:40:24:cb:33:fc:23:78:af:63:a4:43:06:eb:aa:78:88:a1:
58:cf:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org