Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/AsSsSPOcOX3c1g4T_AAxI5269KY.roa
File: AsSsSPOcOX3c1g4T_AAxI5269KY.roa (raw, json)
Hash identifier: 83YLzALOOcnno9pJTAkgWaEfmZBwRJ97FGN5QcL3cIs=
Subject key identifier: 02:C4:AC:48:F3:9C:39:7D:DC:D6:0E:13:FC:00:31:23:9D:BA:F4:A6
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01856E0B159ABA08E94971CAD79BA79808AA
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/AsSsSPOcOX3c1g4T_AAxI5269KY.roa
Signing time: Sun 01 Jan 2023 15:54:58 +0000
ROA not before: Sun 01 Jan 2023 15:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40009
IP address blocks: 80.231.16.0/23 maxlen: 23
5.23.20.0/24 maxlen: 24
80.231.162.0/23 maxlen: 23
80.231.163.0/24 maxlen: 24
80.231.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:15:9a:ba:08:e9:49:71:ca:d7:9b:a7:98:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 1 15:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02c4ac48f39c397ddcd60e13fc0031239dbaf4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:b6:23:aa:64:ff:07:03:f7:3a:5d:f7:e6:
2a:1d:ab:22:5f:ef:a3:b8:6a:22:48:56:92:77:d8:
cd:8d:12:71:2b:d5:e5:62:52:d3:f7:ae:2c:6b:07:
da:92:41:fc:48:89:08:1f:78:26:26:54:f5:cb:1e:
96:05:8d:3a:f0:4a:82:cb:08:a1:1d:b6:5c:ad:23:
ac:95:66:8d:1f:2e:04:48:bf:57:9f:27:09:68:08:
3e:ad:ee:64:c0:30:cb:3e:57:0a:3d:26:94:bc:52:
c7:44:16:0d:3a:38:60:28:19:bb:24:f4:bb:9c:70:
0e:87:39:20:90:c2:c9:38:f5:ae:f7:c3:83:60:f7:
7f:08:6f:98:0d:85:e2:8e:0f:38:12:75:df:f7:88:
77:a2:17:ea:c1:52:0c:06:53:50:51:8e:9e:07:3a:
cb:e9:e5:3f:f0:e7:06:ba:7a:ee:3f:9d:31:f4:ea:
4c:17:e0:7a:c6:b3:72:ef:de:17:dd:87:91:b0:3d:
92:33:a2:10:96:2c:c6:ee:ed:e5:e3:38:24:e0:66:
6f:ea:af:8d:33:d9:fe:be:3d:a9:bb:a2:29:f3:42:
5e:16:1e:3e:3c:3b:db:ef:5f:7a:92:8c:e6:7c:29:
ec:fa:6b:6e:1e:50:40:49:d3:70:45:f5:20:cd:39:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:AC:48:F3:9C:39:7D:DC:D6:0E:13:FC:00:31:23:9D:BA:F4:A6
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/AsSsSPOcOX3c1g4T_AAxI5269KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.20.0/24
80.231.16.0/23
80.231.162.0/23
Signature Algorithm: sha256WithRSAEncryption
62:b3:ed:ff:16:a3:40:b3:36:6b:23:c6:5f:a8:ef:e4:27:16:
cb:f2:c7:e6:56:86:06:25:ff:7f:eb:f2:9f:71:bb:d3:8b:83:
cf:c6:a3:6d:c2:9f:22:f7:a3:68:70:d8:d8:f6:a8:54:c7:d0:
9b:1d:4e:a5:fc:e7:d5:5a:a0:a5:46:2c:b5:94:9e:08:fa:d7:
e9:8a:77:e6:85:2e:46:28:9a:d5:31:b0:45:6a:b6:e5:c8:9f:
6f:e3:e8:dd:bb:f8:a8:7e:4f:af:b0:8e:f8:62:da:75:35:c5:
e9:86:61:f4:d6:97:b8:0b:50:a9:a8:86:4d:10:12:f9:36:a8:
7b:83:fd:34:94:97:aa:05:7d:b8:21:4f:88:ec:fc:91:38:82:
1b:d7:45:6c:a1:63:c0:ea:4a:0d:fb:97:75:7c:0d:e0:05:64:
7f:5f:43:e0:a3:d8:2d:5c:25:92:f9:57:ce:41:06:c6:c6:aa:
c4:36:8a:48:4a:ff:3d:e3:06:68:78:c8:d1:22:92:4c:8e:4e:
92:1d:cb:d3:bc:35:dd:7a:e6:75:d1:b6:bd:23:22:fd:a3:8d:
af:56:96:5c:88:ec:c3:25:8d:f1:1e:f3:37:2e:b5:2a:04:5e:
10:f4:30:24:22:2c:dc:75:c5:3d:65:aa:71:93:4c:e3:ad:1c:
82:e2:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:30 2024 by rpki-client on console-fra.rpki-client.org