Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Xho6ZsXKXk9Cg5o-u9ryFjlOnlk.roa
File: Xho6ZsXKXk9Cg5o-u9ryFjlOnlk.roa (raw, json)
Hash identifier: eyBWaoQoBO3oHZHWTYvrkxi/2soGoQaE4suFciiEUvQ=
Subject key identifier: 5E:1A:3A:66:C5:CA:5E:4F:42:83:9A:3E:BB:DA:F2:16:39:4E:9E:59
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0189306EB226E5FA2DBA63039886B7E52D54
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Xho6ZsXKXk9Cg5o-u9ryFjlOnlk.roa
Signing time: Fri 07 Jul 2023 12:58:28 +0000
ROA not before: Fri 07 Jul 2023 12:58:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 80.93.202.0/24 maxlen: 24
80.93.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 10:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:6e:b2:26:e5:fa:2d:ba:63:03:98:86:b7:e5:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 7 12:58:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e1a3a66c5ca5e4f42839a3ebbdaf216394e9e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:e4:8d:6c:65:4e:aa:29:05:29:5b:fb:7f:
ee:ea:b7:5a:28:f5:9e:45:29:a6:33:4f:08:37:e1:
22:55:11:cf:b7:ab:68:f9:be:96:41:3d:1d:bc:1a:
61:4f:6f:33:9e:63:ae:26:98:34:74:50:27:00:27:
88:af:1e:16:5a:1c:e6:fa:ec:e3:87:dc:7c:99:89:
e2:09:6f:5a:53:ea:56:2b:19:98:9c:69:ba:8d:52:
54:49:59:30:b8:4e:9f:da:0e:5d:73:a3:2e:81:94:
a3:b1:d7:a3:96:a1:3e:67:89:30:54:a8:c9:2d:84:
72:8b:fb:c0:74:85:66:61:60:71:ad:85:9f:92:3c:
81:b7:8d:82:10:9d:55:7b:08:ca:a7:f9:3e:7d:64:
34:36:e8:70:1d:1f:e3:24:bb:a6:76:e6:83:98:7b:
9a:63:26:c8:be:a1:20:1c:8b:11:cc:c0:de:03:db:
ee:71:e2:c2:4a:8e:ad:d9:36:33:8b:ac:0b:5b:5a:
ce:d0:cd:88:d2:9b:d7:77:2f:f7:6b:b4:86:6a:fd:
1e:ba:76:43:c6:6a:82:f0:84:a4:b7:da:ba:cc:80:
23:e0:af:dc:10:ff:26:a2:1f:bb:c6:a7:6c:84:75:
b7:27:ab:f1:f8:7f:8b:57:57:91:a0:b1:ca:42:3a:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:3A:66:C5:CA:5E:4F:42:83:9A:3E:BB:DA:F2:16:39:4E:9E:59
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Xho6ZsXKXk9Cg5o-u9ryFjlOnlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:0a:bd:ec:5a:8f:8f:3f:e0:fb:4c:60:03:8c:af:57:be:7c:
c7:41:ea:66:5a:e6:c8:90:d0:d9:3b:45:37:a8:02:40:2b:00:
45:1f:93:d6:3a:b6:d4:23:0e:5c:5b:ea:f9:1b:13:f1:27:c0:
50:a4:fc:2a:ae:b8:d2:c0:71:e7:e4:3e:bb:c1:68:b3:25:d0:
4f:3b:e6:cc:4b:e4:f8:58:16:b1:83:d2:55:d7:88:a0:ee:75:
f1:a8:d5:47:50:0f:5a:a4:26:c1:be:53:7b:55:28:a6:ed:74:
73:81:fa:af:04:5b:b8:64:57:47:08:80:0f:bd:45:f6:ae:e4:
46:3c:30:6f:3a:e4:75:47:20:0c:59:15:e1:f3:91:65:06:73:
f8:42:13:84:15:8a:a2:c0:51:0d:2f:3f:41:0f:40:66:33:7a:
1a:a1:87:06:d2:d5:9d:80:dc:d8:eb:6a:d0:c2:db:58:82:b8:
e7:f3:2d:1e:ea:7f:78:c5:2e:e1:29:96:9e:8c:26:56:26:8e:
a1:a8:ea:49:10:14:a2:76:84:27:bf:60:3c:d4:3f:19:4a:e1:
42:4d:80:ab:17:03:5c:70:a1:1a:e0:35:ef:d1:6c:49:44:70:
a3:d8:76:03:6a:80:7b:dc:1b:02:f4:99:40:ef:d6:2a:eb:fc:
85:8f:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org