Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1-lxsgRVgfHjLKwGgHR1vkQ-OmBY.roa
File: 1-lxsgRVgfHjLKwGgHR1vkQ-OmBY.roa (raw, json)
Hash identifier: K/xgMDRMDGJ5Fwz/foKIOEyo/YbLPfzX7bldY5d4UP4=
Subject key identifier: FA:5C:6C:81:15:60:7C:78:CB:2B:01:A0:1D:1D:6F:91:0F:8E:98:16
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01901B1B075023BC71C5CED422145AD92DD8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1-lxsgRVgfHjLKwGgHR1vkQ-OmBY.roa
Signing time: Sat 15 Jun 2024 08:54:34 +0000
ROA not before: Sat 15 Jun 2024 08:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.194.0/24 maxlen: 24
80.93.195.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.197.0/24 maxlen: 24
80.93.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 10:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:1b:07:50:23:bc:71:c5:ce:d4:22:14:5a:d9:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 15 08:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa5c6c8115607c78cb2b01a01d1d6f910f8e9816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:82:48:e3:be:de:ef:5a:87:96:4a:23:3d:
92:6d:07:4b:84:09:c0:10:fd:35:ce:18:2d:33:5d:
9a:26:f7:4a:22:e4:06:dd:f4:6a:02:38:e7:3a:17:
a2:dc:50:d4:92:85:a8:df:6c:58:e9:bc:a0:8a:4b:
6c:a8:c2:80:8e:08:67:25:b3:8c:48:4b:5a:75:9a:
96:ab:31:d0:8b:1e:4d:55:64:34:39:9e:d7:d2:88:
50:77:9c:4e:fd:11:02:5d:c0:ff:1c:df:f6:ef:ae:
31:c8:6a:61:32:95:5e:88:1b:e8:31:78:ab:80:40:
c2:b8:d4:c7:51:a7:b6:40:73:4b:ca:73:20:0b:55:
5f:2b:64:f3:fc:f8:bb:85:ea:5c:cc:e2:e4:ff:ed:
92:b8:98:46:d2:64:01:c4:05:75:24:f8:07:42:fc:
f4:5a:be:14:dc:57:55:2e:59:3c:74:e5:67:74:9a:
94:2a:7b:9f:b3:cb:a5:1b:5b:91:a2:fc:e3:7a:8e:
ea:40:71:7b:43:df:8b:2e:82:f7:03:c7:b6:bf:cd:
9f:27:ae:dc:1b:a2:7c:7d:d8:90:e0:6f:de:fb:50:
24:e7:29:52:42:0e:7b:22:36:f1:9f:ba:c0:aa:3b:
8d:8d:e5:50:6a:37:6b:2e:a4:dd:d9:4d:56:37:33:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5C:6C:81:15:60:7C:78:CB:2B:01:A0:1D:1D:6F:91:0F:8E:98:16
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1-lxsgRVgfHjLKwGgHR1vkQ-OmBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.194.0-80.93.197.255
80.93.201.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b9:7f:14:43:f7:43:80:26:a5:a8:5b:cf:63:ae:8a:c2:1a:
6a:84:8a:e3:9a:d6:73:a0:50:b9:fe:7f:cf:2e:15:e8:2b:5c:
23:f0:d2:4c:d8:37:07:2b:7d:61:67:7f:f0:aa:24:0e:9a:ff:
9b:97:de:f4:39:4b:c2:38:ed:92:9f:d2:b0:0b:7e:4a:55:c6:
be:5d:34:ec:dc:47:f2:4a:6d:be:13:fa:99:02:95:79:d4:4d:
06:fb:0c:08:32:67:81:b6:97:61:df:00:6d:00:ed:3c:d9:d0:
2c:df:8b:a5:61:f7:58:71:8a:2e:b8:3e:ce:4f:fa:41:56:48:
a0:a6:e0:46:5e:93:f8:a2:6e:41:94:f7:a2:1a:d2:c9:8a:e2:
7e:3f:56:a6:1f:b2:06:5b:53:02:9c:b7:99:60:c3:52:44:56:
e8:0a:9e:c6:ce:0a:1a:c9:eb:51:bb:54:6f:7a:4c:03:f4:c6:
15:b9:b8:48:8e:31:e0:5f:cd:f3:10:3f:0d:66:3d:87:a3:2a:
e4:2d:07:00:b6:29:ec:74:4b:50:f9:e0:3f:9e:dd:83:46:8f:
2a:96:7c:2b:61:e1:80:7f:e3:6d:e8:34:24:a7:e4:a6:cb:70:
8f:97:3f:87:69:43:43:bd:b2:d9:39:76:64:93:02:9b:71:0b:
09:f6:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:35:50 2024 by rpki-client on console-fra.rpki-client.org