Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/7vN4dLSuNosphzgfwUMWm0qdlaw.roa
File: 7vN4dLSuNosphzgfwUMWm0qdlaw.roa (raw, json)
Hash identifier: lrpFHBHzlnN9E4ZA/uL4CIfvsLaBLyW1T+nRjU/geHE=
Subject key identifier: EE:F3:78:74:B4:AE:36:8B:29:87:38:1F:C1:43:16:9B:4A:9D:95:AC
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0187D69FFB6E8DE67E5A40EDC733DF0E8D87
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/7vN4dLSuNosphzgfwUMWm0qdlaw.roa
Signing time: Mon 01 May 2023 09:23:41 +0000
ROA not before: Mon 01 May 2023 09:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.202.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 13:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:9f:fb:6e:8d:e6:7e:5a:40:ed:c7:33:df:0e:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 1 09:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eef37874b4ae368b2987381fc143169b4a9d95ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:cd:8f:03:24:dd:ab:92:2a:dd:44:fb:71:
da:b5:12:da:2b:16:59:33:a8:30:c0:73:ce:ee:46:
cf:67:a5:43:40:d7:7b:9f:d6:be:79:7d:0d:7e:ca:
ba:45:65:a2:8f:72:d0:88:30:39:90:7b:b1:c9:46:
d7:84:6d:51:47:de:c8:40:1b:5d:c0:c5:35:df:1b:
39:d2:15:af:53:10:c2:68:60:b4:dd:57:b9:98:b1:
18:2c:cc:7a:a1:67:c3:af:65:06:9b:68:d5:e8:7d:
13:ff:bf:ee:44:01:94:cc:de:72:d1:6f:35:ea:2e:
8e:6d:b4:bc:04:98:1e:fc:73:75:cc:9c:43:1d:fa:
84:7c:a1:83:a2:3c:4f:9a:da:e9:bd:b8:a2:82:75:
ec:1c:b7:8d:d0:c5:b6:4b:ab:78:f1:d1:72:6c:60:
3d:1f:81:ad:23:9e:84:83:2e:70:bd:96:a8:7b:28:
37:0d:49:fc:d3:d2:7a:6a:40:b6:90:e8:df:40:e6:
56:03:f2:24:8a:2a:1e:39:2d:3c:38:e5:62:3a:bd:
64:21:a0:b4:18:e5:58:be:e4:e1:29:ca:00:99:7d:
41:61:76:8b:26:c0:95:2f:f5:ef:2e:6a:50:33:23:
fd:bb:56:34:b8:bd:c4:3d:94:11:75:5d:3e:ff:20:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F3:78:74:B4:AE:36:8B:29:87:38:1F:C1:43:16:9B:4A:9D:95:AC
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/7vN4dLSuNosphzgfwUMWm0qdlaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/24
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ab:1c:75:7f:22:5a:35:6d:93:c5:59:5f:68:43:cf:bd:f5:
a5:79:84:dc:0a:b2:72:29:39:88:37:7e:50:7a:cf:56:78:bf:
6a:26:4e:03:6f:c0:55:c3:65:0e:31:e2:ea:db:df:62:e3:cb:
a0:b6:c3:f7:c9:d5:a3:2c:3f:89:91:2d:e0:e5:d5:09:07:d5:
69:8d:ca:ac:cd:f4:ba:6d:9e:0f:c8:a2:4c:c5:10:61:01:43:
6a:f2:38:b8:1c:84:36:e3:63:66:e8:12:73:a1:8d:df:d1:9c:
56:7f:11:a5:8d:9c:32:2a:08:de:10:b8:0a:61:bb:e0:78:de:
ce:41:15:11:76:1d:d5:7e:15:28:4b:46:a5:2b:0f:f5:e8:31:
59:f3:74:24:29:d1:90:99:fb:11:df:1d:5a:bd:7d:3e:ae:bc:
5c:75:30:57:a1:fe:ba:fb:5a:0c:ac:d1:4a:fc:1c:fa:ec:d9:
d4:10:2c:8a:05:b2:f7:7c:e1:3e:f6:8a:54:8a:c4:13:21:1b:
c3:be:5e:79:bd:d1:5b:3f:bf:24:8f:1e:bb:ae:19:3a:51:83:
a3:62:42:de:19:0c:45:44:f5:aa:1f:3c:42:9e:e1:6f:96:b6:
06:35:a0:ea:1c:34:cd:85:e7:af:64:71:77:c3:44:5b:01:c2:
df:4b:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org