Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/0PQfecIyOOE3Xmt6HYItwRbKDLw.roa
File: 0PQfecIyOOE3Xmt6HYItwRbKDLw.roa (raw, json)
Hash identifier: Lk3s0oBKfXk/PDJK/i4EuqVvFwQP6LVxGFy3wj3PYQs=
Subject key identifier: D0:F4:1F:79:C2:32:38:E1:37:5E:6B:7A:1D:82:2D:C1:16:CA:0C:BC
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0189AC2EABACA9056D65CD124962A5F55E48
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/0PQfecIyOOE3Xmt6HYItwRbKDLw.roa
Signing time: Mon 31 Jul 2023 13:41:26 +0000
ROA not before: Mon 31 Jul 2023 13:41:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 08:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:2e:ab:ac:a9:05:6d:65:cd:12:49:62:a5:f5:5e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 31 13:41:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0f41f79c23238e1375e6b7a1d822dc116ca0cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:05:59:f7:8a:ff:fb:c8:16:f6:88:c8:94:
a2:f7:3a:71:4f:5a:16:c0:9f:f2:d2:ac:2a:f8:43:
d9:f8:c2:7d:20:f5:d3:ea:39:05:11:88:a8:08:45:
30:82:83:c1:59:81:e2:03:34:e6:0a:86:05:1c:f2:
58:3e:28:68:d7:a2:81:78:50:63:4f:53:f8:a9:81:
50:33:6e:6c:af:17:6e:4d:1c:81:7e:2f:71:97:b8:
93:aa:e0:ac:59:fd:1d:43:f2:4a:78:4c:f7:12:98:
1f:eb:25:75:cf:1a:61:c8:47:32:dd:b9:d4:6b:d2:
11:7e:b6:7f:1c:f5:ab:f5:86:06:b2:aa:80:4a:6e:
59:cc:6d:a7:f0:81:3e:1c:46:88:27:6d:88:ce:2c:
cc:7c:17:99:49:0b:bc:5e:eb:0b:5a:7f:d0:0e:ac:
f7:ff:6e:79:b8:76:f5:fa:ff:73:2f:9a:f4:9b:de:
ee:ad:d6:44:aa:95:f0:57:cc:8d:5b:09:04:71:81:
b6:73:ad:b0:b6:97:e8:04:fb:d6:02:c1:e4:c8:6f:
3b:13:c7:33:4d:c7:ac:92:10:16:0b:a7:c3:7d:db:
75:48:c5:24:b4:15:15:7e:eb:25:74:62:3e:e6:20:
c8:d2:23:45:5a:01:07:1f:ef:bb:ca:5c:d6:1c:31:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:1F:79:C2:32:38:E1:37:5E:6B:7A:1D:82:2D:C1:16:CA:0C:BC
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/0PQfecIyOOE3Xmt6HYItwRbKDLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.205.0-80.93.206.255
Signature Algorithm: sha256WithRSAEncryption
31:fd:a5:93:79:43:1e:2a:ca:58:e0:f6:ea:92:d5:b8:b8:e5:
b4:94:01:cf:12:6f:50:90:a2:f9:16:97:ac:21:36:f1:13:e9:
b0:1c:b5:6c:3f:9a:2a:e1:6a:0f:c9:f3:61:7c:55:92:af:12:
9d:8c:94:54:be:93:d4:63:db:1f:e6:56:60:cf:2b:34:6e:9d:
f8:7b:71:f7:ab:9f:5a:09:c9:cd:53:ea:bb:5a:b0:e5:90:7d:
f6:73:c5:8b:f1:e2:3e:d3:c8:81:40:2e:52:24:3e:2a:cb:87:
3c:66:1b:52:f4:31:75:87:0f:a1:b8:7b:78:58:07:8d:cd:c4:
5e:d3:1b:3b:35:32:08:e0:c9:50:97:23:99:1f:2f:9b:0c:c7:
a0:08:29:a4:82:03:fa:e1:66:7e:bc:29:bd:1d:9e:13:e0:e1:
0c:29:17:30:16:72:52:92:b1:cd:55:c3:bb:8c:03:86:bc:9c:
3d:74:94:47:57:55:2e:b5:62:14:ee:10:42:fe:d6:a7:8d:4e:
e4:17:cb:6f:42:76:6c:0d:15:05:c6:13:2d:50:0e:ed:5a:08:
94:46:a7:d7:49:56:09:c7:9a:25:3b:72:27:38:85:2a:37:a4:
7e:c1:94:07:58:70:0a:cb:6a:0e:8b:d4:01:30:0f:c0:15:5e:
13:28:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org