Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/dOSSnwl8Ro52sbLd_lH319hvm90.roa
File: dOSSnwl8Ro52sbLd_lH319hvm90.roa (raw, json)
Hash identifier: YE1uVvqk2wVQMIQ+aDU3onpn+qy9fmauRoM8OItwNrk=
Subject key identifier: 74:E4:92:9F:09:7C:46:8E:76:B1:B2:DD:FE:51:F7:D7:D8:6F:9B:DD
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 018571A7BF31189357D115D5A50006860393
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/dOSSnwl8Ro52sbLd_lH319hvm90.roa
Signing time: Mon 02 Jan 2023 08:44:56 +0000
ROA not before: Mon 02 Jan 2023 08:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30742
IP address blocks: 80.245.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:bf:31:18:93:57:d1:15:d5:a5:00:06:86:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Jan 2 08:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74e4929f097c468e76b1b2ddfe51f7d7d86f9bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:16:8d:f8:af:d6:c3:d7:60:2d:7d:6a:8b:
eb:c0:21:2a:11:ea:3a:f2:68:6c:b4:5d:96:09:4f:
b3:bc:0b:f4:b5:33:75:b1:7d:de:7c:84:9b:8a:bb:
d1:d1:a9:68:f2:c1:09:fa:13:6a:0c:bd:9f:c4:c7:
ef:4d:25:79:0d:51:75:f4:43:e6:f1:63:57:d8:da:
82:dd:73:33:e2:03:e1:fa:71:b7:5d:cf:0a:63:cb:
1b:65:41:01:ee:7f:6e:cc:3c:b2:5d:e8:4e:d8:23:
88:70:3a:f7:05:4a:d9:0b:bd:52:f0:9e:93:5f:02:
8a:fb:f8:29:0a:20:78:e9:16:2c:a5:09:3c:c3:c9:
e8:df:18:25:22:fa:38:64:f8:1d:0f:08:d4:3e:7e:
d4:44:3f:54:8f:9d:be:b3:f8:0e:79:56:03:2a:f6:
51:4c:8e:97:e3:fa:af:65:d4:77:db:00:c3:04:04:
3f:00:0b:06:6b:53:af:e0:51:af:c4:57:f6:52:d7:
64:fe:ba:a9:18:96:5f:73:f6:86:88:79:fc:e7:2a:
20:d2:83:0e:34:11:b8:50:aa:21:5d:fa:6a:eb:fe:
92:54:dd:e1:ef:53:61:00:d3:02:47:a2:0e:9b:91:
49:bd:08:91:ed:0c:cf:c8:47:c7:19:53:ae:62:d1:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:92:9F:09:7C:46:8E:76:B1:B2:DD:FE:51:F7:D7:D8:6F:9B:DD
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/dOSSnwl8Ro52sbLd_lH319hvm90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.128.0/22
Signature Algorithm: sha256WithRSAEncryption
47:11:d0:90:29:b8:c5:84:e4:5a:75:ac:17:f8:9c:9f:df:76:
ce:e5:3a:33:2b:52:3a:90:52:3a:0f:b2:eb:51:ca:14:9c:6f:
0b:66:ae:27:dc:2a:74:e6:8e:25:05:40:45:fb:02:ae:53:e2:
ab:c4:17:82:c9:77:a0:a4:09:aa:1f:17:cd:a2:64:c4:41:13:
4e:91:ce:9c:1e:3a:6c:69:cb:dd:d4:9a:58:4f:d0:57:f8:db:
b3:b9:68:1a:e4:b9:57:dc:5c:67:8d:06:8b:e7:4c:82:0a:ff:
d6:97:13:a0:90:31:2e:a7:03:2e:c8:f3:cf:0f:e4:1b:7e:ab:
43:27:85:ef:98:d2:a7:c9:d5:75:e6:c9:a1:30:84:41:73:27:
30:1d:e8:82:c2:f7:92:66:e6:c7:06:54:b6:56:c6:b1:d6:e4:
e2:4c:b3:66:e8:03:89:ef:be:c0:97:c9:44:53:f6:09:af:23:
99:a3:6b:98:a8:fd:4d:00:c1:30:fc:ee:a6:42:6d:fd:5a:0b:
89:be:53:e2:9b:dc:3a:2a:cf:e5:05:f8:0e:13:5e:9c:be:5d:
2f:ed:c7:33:0a:0f:cd:76:0a:2c:7f:38:08:23:0d:6a:a9:32:
21:00:cc:bd:79:3d:ff:f5:ff:85:e6:e4:42:78:d4:4b:67:ff:
ed:b0:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:16 2024 by rpki-client on console-ams.rpki-client.org