Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/RFBJoY38ty66HymokfHtA_k_z-Y.roa
File: RFBJoY38ty66HymokfHtA_k_z-Y.roa (raw, json)
Hash identifier: VVce6jYO3A+BVh81jIduER3h8vKLwyurrTtaV8hyJcY=
Subject key identifier: 44:50:49:A1:8D:FC:B7:2E:BA:1F:29:A8:91:F1:ED:03:F9:3F:CF:E6
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0189D489092E4C2EC70B731B4D59B502F3AD
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/RFBJoY38ty66HymokfHtA_k_z-Y.roa
Signing time: Tue 08 Aug 2023 09:44:57 +0000
ROA not before: Tue 08 Aug 2023 09:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 10:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:89:09:2e:4c:2e:c7:0b:73:1b:4d:59:b5:02:f3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 8 09:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445049a18dfcb72eba1f29a891f1ed03f93fcfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:0e:e8:b7:91:ea:b6:fb:12:b0:d8:02:46:
7f:be:cd:dc:2f:b2:49:57:34:f3:6a:71:9e:29:f6:
d0:f9:b0:8b:ee:1b:6e:25:92:58:ac:d9:46:59:45:
7d:72:00:43:82:79:d0:15:3b:1d:97:70:3b:e5:58:
1c:3d:ee:91:e0:d5:ca:7d:db:2b:4e:27:fa:6b:9f:
9d:1c:fe:10:d4:2b:17:c9:fe:7f:af:6b:bc:02:69:
e3:8b:70:9f:bb:c8:c6:42:01:bb:ee:48:c5:c8:20:
6c:b4:54:bf:2c:20:d8:0b:0f:b6:37:54:39:36:cf:
d7:f5:f2:54:21:2e:a9:b1:e6:a3:5a:08:78:48:dc:
39:44:55:0c:67:6d:6a:3d:fb:41:b7:cd:f8:20:39:
e1:ba:78:65:5a:0d:af:12:77:9c:65:aa:8b:5e:d4:
6a:57:d4:37:5e:47:81:6a:75:cd:14:09:5b:4b:a8:
43:f3:b1:be:a1:71:f5:77:74:f2:e4:bd:2a:6a:60:
09:60:62:85:98:b8:cc:c5:c5:c4:d6:76:18:b8:cb:
9b:19:bd:d9:57:47:f7:c8:37:51:69:b4:42:24:3c:
06:4e:6b:41:b2:a2:38:25:d1:e7:40:ea:ce:c4:cd:
63:d8:99:1c:3e:ab:21:b1:4e:90:f2:5f:bb:fa:79:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:49:A1:8D:FC:B7:2E:BA:1F:29:A8:91:F1:ED:03:F9:3F:CF:E6
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/RFBJoY38ty66HymokfHtA_k_z-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/24
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
81:66:d2:2e:ee:12:a7:31:5d:46:ef:50:7f:94:f9:9d:dd:7d:
ed:69:1f:48:0e:2a:88:59:37:3e:75:53:15:58:88:aa:49:9f:
bc:8b:db:97:ff:f3:ae:8c:db:24:8d:7c:67:47:be:e5:75:bc:
f1:5e:87:b5:75:25:ae:17:f5:86:6b:05:a1:38:a5:a9:98:a7:
46:1a:5a:14:52:f7:48:cf:68:2d:77:d4:b4:2a:44:6d:ec:19:
89:77:e5:0d:54:fb:ca:5c:b0:84:db:75:b0:33:ac:b5:28:b2:
1e:2e:18:11:dc:a9:07:7b:09:b1:07:e3:32:b6:c7:90:a2:68:
ed:e8:6a:34:38:4e:fe:87:93:ac:f9:38:cb:c7:e3:21:ac:91:
a4:5f:79:18:2c:91:bc:61:54:0d:6e:06:c8:23:d7:17:9f:c6:
17:65:9b:6c:71:8c:f8:70:99:3e:95:48:92:00:ef:9a:d6:df:
17:f5:30:f5:5d:a0:36:75:bf:61:d5:7b:25:9b:15:c8:32:51:
7f:7d:f9:0e:6b:63:28:ec:92:f0:be:8f:29:32:2c:46:56:dc:
1b:f5:b8:6c:26:26:bf:7d:85:cb:65:05:c0:00:fc:10:8f:40:
4b:33:86:0d:ba:68:a7:7a:a1:5e:4c:26:29:d4:81:11:7d:00:
70:b8:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org