Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/CrBCko1hTPXoTd5ihnyb7tH6FQU.roa
File: CrBCko1hTPXoTd5ihnyb7tH6FQU.roa (raw, json)
Hash identifier: /NvZaXkkPw6/Myi+nYEsyuJHF95UZtI7tYh1kHWj6lI=
Subject key identifier: 0A:B0:42:92:8D:61:4C:F5:E8:4D:DE:62:86:7C:9B:EE:D1:FA:15:05
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 018D65890A4C456CC46B7CBCD7F52CCC1008
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/CrBCko1hTPXoTd5ihnyb7tH6FQU.roa
Signing time: Thu 01 Feb 2024 16:38:16 +0000
ROA not before: Thu 01 Feb 2024 16:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 80.75.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 16:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:89:0a:4c:45:6c:c4:6b:7c:bc:d7:f5:2c:cc:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Feb 1 16:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ab042928d614cf5e84dde62867c9beed1fa1505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4b:00:e0:f4:f5:a1:e8:cb:f0:82:55:22:4b:
84:59:11:22:47:95:65:34:fd:d4:ed:28:1a:3a:a1:
69:67:92:a3:f0:98:df:b7:77:aa:41:fa:d3:7f:33:
0f:d6:80:d3:36:f4:ca:57:17:26:21:9a:11:3c:ac:
96:92:39:96:ff:dc:ed:d5:63:60:1a:86:09:de:b8:
bf:21:38:12:ad:40:33:eb:8c:53:67:c1:33:1e:b2:
c0:10:95:65:16:1f:67:2c:d6:60:11:34:82:b5:e4:
b6:6e:b8:4a:bf:88:04:32:e0:0b:30:8f:8c:9f:0c:
a6:fa:e1:56:dd:82:fe:9d:24:5a:83:6f:1a:64:76:
cf:21:31:b6:93:66:0e:87:23:8e:c6:6b:b9:ee:82:
59:83:55:34:cb:62:1f:d8:ae:33:f2:8e:81:69:0e:
c1:e0:e1:2d:29:63:1f:5c:c4:fb:1c:b6:85:41:87:
58:bf:fb:36:7d:54:34:b2:85:cc:95:f2:f3:6b:13:
cf:48:66:9e:bf:9a:42:1b:bf:80:7e:c8:cb:33:20:
82:46:f5:44:17:5a:e6:e7:06:68:12:ed:da:85:c7:
26:9e:45:29:7c:0e:9d:f6:1c:37:a8:69:a2:87:7d:
89:30:af:8c:6a:55:a9:5f:2f:4f:07:5e:ce:76:a4:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:42:92:8D:61:4C:F5:E8:4D:DE:62:86:7C:9B:EE:D1:FA:15:05
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/CrBCko1hTPXoTd5ihnyb7tH6FQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:32:dd:e0:8e:14:d6:87:19:44:c2:d0:d5:e2:cc:cf:e1:2b:
17:29:cf:1a:68:66:93:aa:0f:49:56:9f:b7:64:88:dc:c0:b1:
42:db:c7:14:7e:5a:bd:3d:96:e8:c4:c3:7c:1a:80:ae:b1:67:
e5:ca:e2:73:6f:36:22:f6:4d:83:6d:d8:ec:6c:63:35:d6:98:
7f:a2:7d:43:da:1e:c3:a3:80:2c:95:60:be:e9:b5:3f:25:50:
ac:33:cc:4b:5a:07:30:d4:4a:ef:40:3c:06:ad:5c:b6:29:3f:
bf:80:64:54:33:dd:ac:8a:e9:56:f5:8f:fa:0b:89:3b:26:8f:
e7:d6:75:0f:3d:f5:b3:c1:b0:14:20:bd:5a:bf:f5:18:67:d5:
c1:62:a9:f1:6f:27:9e:90:bd:60:d4:2f:71:2b:b4:15:1a:bd:
ad:a6:4a:8d:07:4f:76:8a:44:62:00:82:d1:1e:72:50:d8:d2:
4e:2f:a8:ea:22:f0:f7:fb:37:05:ed:79:64:43:ac:71:6c:7a:
20:54:fe:87:9f:99:d5:19:ae:69:fd:e4:1c:78:61:a3:f2:10:
61:92:04:bb:0c:8d:3c:51:0e:6b:a6:93:2f:1b:ec:d5:49:95:
1f:16:3e:2e:12:f7:8a:f3:af:d0:98:a4:66:c5:f0:f6:b6:70:
00:f1:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:47 2024 by rpki-client on console-ams.rpki-client.org