Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/86kkeqNWwHkp6CmztBiSce1nfHY.roa
File: 86kkeqNWwHkp6CmztBiSce1nfHY.roa (raw, json)
Hash identifier: pN2Wr34bAOSE0S+gsIqQ49S6hgyFKRC+v/3+No0QeWI=
Subject key identifier: F3:A9:24:7A:A3:56:C0:79:29:E8:29:B3:B4:18:92:71:ED:67:7C:76
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 018718B8A6309064090749A39ACCB7ECF1C1
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/86kkeqNWwHkp6CmztBiSce1nfHY.roa
Signing time: Sat 25 Mar 2023 12:22:47 +0000
ROA not before: Sat 25 Mar 2023 12:22:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12488
IP address blocks: 80.93.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Apr 2023 14:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:18:b8:a6:30:90:64:09:07:49:a3:9a:cc:b7:ec:f1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Mar 25 12:22:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3a9247aa356c07929e829b3b4189271ed677c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:d9:83:4a:11:7d:61:48:97:76:6e:90:f7:
7b:d1:15:e3:8c:ca:a8:fe:36:a8:6f:d1:56:3f:be:
00:9e:ba:93:19:8c:34:05:54:91:7b:81:02:2c:68:
5c:ab:61:8d:b2:4b:78:64:cf:54:49:b6:88:a6:7e:
90:e0:b4:ef:a3:b8:e4:a4:d4:d8:7f:e9:ec:85:be:
24:90:c4:b2:bf:0b:0b:d8:6f:4a:fb:12:a8:10:1b:
17:55:b8:57:25:66:5c:51:c6:10:44:2b:b2:ed:85:
74:7e:bd:cd:95:7d:5f:cb:2e:5d:cd:39:d5:bf:82:
d9:2b:d5:be:4e:83:38:3d:7d:37:d2:64:62:49:99:
0c:a6:ee:35:bc:f7:03:ef:5b:4b:08:5b:73:26:80:
35:49:26:7d:fb:70:dc:1f:ec:51:8f:10:b3:36:5a:
04:a5:d6:7a:68:98:3d:1b:de:b8:5d:23:7c:aa:62:
7b:05:b5:11:6f:6a:5e:bd:7d:8d:b6:65:af:5f:1a:
ff:59:e6:58:22:39:9e:9a:1e:9c:c3:bf:3d:57:fe:
7b:60:0d:ba:56:f8:cf:84:79:a1:0c:00:34:fa:42:
51:95:e5:2e:22:11:a3:e6:4c:08:b4:d7:e6:c2:5e:
f5:c0:7a:95:9f:3f:40:3b:03:91:b5:a9:bb:fa:fc:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:24:7A:A3:56:C0:79:29:E8:29:B3:B4:18:92:71:ED:67:7C:76
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/86kkeqNWwHkp6CmztBiSce1nfHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.204.0/24
Signature Algorithm: sha256WithRSAEncryption
56:75:dc:4e:86:7a:29:29:ad:2e:71:14:aa:63:b4:a3:03:c3:
00:69:e7:d5:f7:f3:68:20:42:0f:09:a9:79:21:ec:e9:5a:b1:
01:cc:e3:a6:3f:95:dd:d9:99:28:6c:b4:f9:9c:d8:d8:d1:99:
fc:47:1d:f5:43:e8:3b:dc:d8:9d:c5:e9:dd:23:4c:74:0e:63:
72:8a:6c:25:31:d0:7c:19:47:47:d6:6b:a8:40:06:fc:d2:dc:
f9:68:9d:28:93:bf:66:17:13:8c:a1:a2:f3:bb:1b:6a:b1:cc:
70:05:1f:0b:0a:61:ec:01:d1:cd:4b:9a:ad:e8:7c:2f:cb:2e:
4f:cc:70:eb:a4:35:3d:cf:f3:ad:4d:b0:0e:9c:85:a5:28:2d:
f0:ba:44:e6:70:a3:b5:93:67:ee:57:01:49:66:c0:c5:f2:ea:
76:d0:92:a8:d5:e5:a0:3c:4f:2e:7f:7c:23:ff:4b:64:3f:0c:
93:9c:47:09:67:df:89:69:97:24:07:b9:f5:21:cf:86:cb:d1:
46:e3:04:a7:c8:ac:70:81:52:17:fc:78:dc:59:bb:a6:0a:38:
a6:37:c5:87:80:ae:f9:88:1a:87:c4:ee:22:1c:d1:62:27:18:
80:43:c9:ee:87:da:b9:22:ee:1a:31:1f:9a:0d:43:f9:2a:93:
1e:43:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org