Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Gs6M4qWOPkKPyTwFLisN-36QgyU.roa
File: Gs6M4qWOPkKPyTwFLisN-36QgyU.roa (raw, json)
Hash identifier: AC7IiKXyw6j0+0f71KhR/jkpXSM3KhmY3b/FNZ7JxV8=
Subject key identifier: 1A:CE:8C:E2:A5:8E:3E:42:8F:C9:3C:05:2E:2B:0D:FB:7E:90:83:25
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0188E90F082D0C606F31309025E93FAA2929
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Gs6M4qWOPkKPyTwFLisN-36QgyU.roa
Signing time: Fri 23 Jun 2023 16:20:56 +0000
ROA not before: Fri 23 Jun 2023 16:20:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.205.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.203.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jul 2023 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e9:0f:08:2d:0c:60:6f:31:30:90:25:e9:3f:aa:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 23 16:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ace8ce2a58e3e428fc93c052e2b0dfb7e908325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:41:15:d4:68:71:36:2e:64:2b:2a:72:13:
da:1a:2d:64:3a:94:d0:68:67:ed:6b:c9:2a:b7:89:
0f:4e:2e:cf:03:bb:65:a6:12:16:19:e5:0d:13:b3:
c0:6b:63:01:e8:a2:6e:60:bc:21:85:f4:08:7f:93:
67:98:89:e6:cf:9e:e6:1a:8f:75:26:90:3a:0c:0d:
c9:69:6a:be:1d:de:2d:51:bf:27:25:55:6d:bb:8b:
05:e1:ba:ec:50:5a:c3:4d:f5:04:51:d0:cf:2e:50:
dc:bf:e6:d1:22:66:d2:32:ff:82:d3:1e:4d:d4:a7:
d7:d7:9f:8d:0c:d3:d6:2f:0c:d0:aa:5c:30:76:49:
2e:48:59:e5:95:41:1b:40:63:90:f6:3e:bf:e0:18:
8e:06:c6:17:20:8e:76:fd:69:d6:75:1c:27:eb:0e:
f0:bc:c0:c7:e1:cd:49:3c:57:71:0f:05:f0:2f:04:
7d:f0:b3:e8:af:45:82:3c:36:df:b1:21:34:06:58:
cb:ce:e4:92:a7:50:89:2e:7b:5b:0e:3c:cb:61:bd:
dd:f2:49:bd:3b:f0:58:86:7c:2d:49:4c:20:ad:af:
c3:d2:f3:9d:9c:68:f2:cf:17:75:d0:1a:55:d9:59:
6f:57:8f:ef:df:96:c0:57:6f:f6:19:16:d3:95:cf:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CE:8C:E2:A5:8E:3E:42:8F:C9:3C:05:2E:2B:0D:FB:7E:90:83:25
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Gs6M4qWOPkKPyTwFLisN-36QgyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/23
80.93.205.0/24
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3a:38:83:38:80:ec:c8:0f:0a:8e:61:f3:01:49:c7:43:a3:
c7:e1:bc:be:6e:21:9f:c7:44:72:67:80:d0:63:a3:4e:79:d0:
ec:c1:21:8f:3e:fb:22:0c:ac:56:fc:f1:75:3b:fb:c1:28:a5:
0d:5e:1e:6b:40:85:2a:56:d0:2b:ef:bb:df:5d:18:4f:ca:ee:
a9:4b:05:58:45:15:fc:22:f0:75:9c:01:6e:c7:c4:83:be:cf:
9e:0c:17:96:ee:b2:86:ec:c2:94:39:ae:6f:4b:91:ac:ac:62:
bd:d2:f3:92:62:9c:50:66:b0:1c:14:29:fc:32:fa:09:b4:87:
95:28:33:8b:01:c1:9c:49:1b:c8:34:92:d5:b7:a4:7a:10:e6:
30:5e:e0:4d:1f:5d:9a:fb:f5:c1:3d:d7:62:c3:f3:5f:3d:45:
64:18:a6:56:69:81:61:b7:c6:4c:87:1c:01:5f:27:2a:a0:d2:
4d:77:49:c9:19:43:00:7e:82:95:d2:f8:8c:7d:da:7c:ee:22:
95:d6:31:0a:ed:07:19:ea:22:d8:66:1c:d3:ff:9d:77:7f:f5:
c0:3f:bc:ba:a2:50:ad:32:4a:69:42:dd:62:9b:c6:c3:e6:17:
01:d3:68:cf:8f:90:c0:f1:02:ae:63:4c:3d:92:c2:f4:c9:a3:
4a:c6:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org