Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/gKWWKQ5xQ5Uv_PBNgEMd05jlW4I.roa
File: gKWWKQ5xQ5Uv_PBNgEMd05jlW4I.roa (raw, json)
Hash identifier: R0zaFE6StV1HDjGKTpHlU0KubjvpQr5VyWG1rD+2wvg=
Subject key identifier: 80:A5:96:29:0E:71:43:95:2F:FC:F0:4D:80:43:1D:D3:98:E5:5B:82
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0191510D6BD7A18555C4C426F9D62D54073C
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/gKWWKQ5xQ5Uv_PBNgEMd05jlW4I.roa
Signing time: Wed 14 Aug 2024 13:21:59 +0000
ROA not before: Wed 14 Aug 2024 13:21:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.194.0/24 maxlen: 24
80.93.195.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.201.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 09:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:0d:6b:d7:a1:85:55:c4:c4:26:f9:d6:2d:54:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 14 13:21:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80a596290e7143952ffcf04d80431dd398e55b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:95:f8:5c:46:c2:e0:c4:f2:d8:e5:55:ae:
5b:0a:f4:e1:ee:9c:78:e2:48:69:6a:f9:c9:98:4c:
c2:12:fe:fe:3a:6e:84:94:35:42:a1:1b:93:34:03:
82:ee:75:b5:b3:f6:1c:8a:b2:4a:6d:36:0d:97:05:
81:ff:47:04:5c:9e:51:cd:8e:11:31:fb:60:34:02:
46:66:bc:0a:1f:73:51:43:c1:c6:8b:e5:51:1d:6d:
ec:1a:c5:29:bb:7d:8c:0f:05:f3:b5:a0:70:c3:75:
55:a1:d2:f0:b9:29:c4:6a:ef:27:35:6e:f2:c0:79:
0e:b4:99:c5:2d:c0:78:73:d0:62:c5:db:98:f5:0a:
68:50:e2:25:1b:7c:58:7b:4a:7f:e4:ef:72:d1:e9:
cf:75:b3:ce:31:9b:39:83:c3:77:ff:ac:ab:ad:8e:
89:60:1e:ff:8a:f3:33:4c:1b:b0:ee:3c:21:47:87:
3b:09:08:34:f7:dd:2a:bf:55:8c:33:c2:4e:1d:50:
90:65:bf:c9:33:51:cd:d9:01:15:91:b1:8d:ce:ef:
b1:fe:af:18:62:62:08:36:da:0b:c2:f4:6a:24:ca:
4c:e5:32:d4:9d:71:0d:12:2e:ee:0d:41:38:14:6d:
90:cb:04:92:48:30:36:bb:8f:a2:16:18:48:ad:78:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:96:29:0E:71:43:95:2F:FC:F0:4D:80:43:1D:D3:98:E5:5B:82
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/gKWWKQ5xQ5Uv_PBNgEMd05jlW4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.194.0-80.93.196.255
80.93.201.0-80.93.202.255
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:de:41:ea:f8:15:73:ff:f8:50:07:5d:65:fe:08:b7:38:13:
07:70:07:1f:b1:2a:8b:b4:ed:61:68:26:1b:0e:f0:f9:1a:7e:
65:cb:ab:cb:17:f7:fe:f1:12:7d:67:8f:09:f4:62:db:07:8a:
8c:89:35:35:a1:82:d8:b1:e7:3a:38:fa:6c:b7:da:77:e0:cd:
75:d5:c1:9a:ec:07:76:ce:48:d2:a9:54:ac:46:b6:cc:af:f1:
a1:89:52:3c:72:07:f4:d4:c9:fe:fb:ac:f3:b3:3c:7f:cf:62:
b1:98:70:47:1e:b8:00:8f:49:d1:16:4b:4b:ab:f5:5c:0c:9c:
c7:90:e7:87:63:29:75:11:8c:20:c2:b9:7b:53:8c:ae:f6:86:
a0:67:1c:d4:e2:45:e2:76:76:1b:e6:f3:a0:62:3e:e0:f7:01:
55:dc:83:56:23:cb:42:f4:21:ed:87:eb:e7:9b:d1:99:ee:c0:
18:4b:16:2d:4f:13:ad:9f:06:ea:10:e2:b8:de:36:83:26:a3:
d4:6d:64:ac:ca:cb:d5:01:1d:86:07:81:f7:2c:df:fc:df:04:
d5:6c:71:ee:87:04:e6:4f:a4:0b:5d:af:e5:7d:df:31:63:ea:
81:5b:e9:77:e6:4c:5a:cb:9f:fb:b3:23:d9:0c:d1:dc:02:0e:
20:a4:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 12:44:32 2024 by rpki-client on console-fra.rpki-client.org