Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/hw4iYC2DAxGHpL6-41wjNjwELJ0.roa
File: hw4iYC2DAxGHpL6-41wjNjwELJ0.roa (raw, json)
Hash identifier: snLz8iPsb/eK5Emcj7iRKvuG7QbYTwgnLq03hc3nyVM=
Subject key identifier: 87:0E:22:60:2D:83:03:11:87:A4:BE:BE:E3:5C:23:36:3C:04:2C:9D
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 018824D75423776832323F5769CB0DE478DA
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/hw4iYC2DAxGHpL6-41wjNjwELJ0.roa
Signing time: Tue 16 May 2023 13:54:31 +0000
ROA not before: Tue 16 May 2023 13:54:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.205.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:d7:54:23:77:68:32:32:3f:57:69:cb:0d:e4:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 16 13:54:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=870e22602d83031187a4bebee35c23363c042c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:91:80:3e:2a:ca:21:c5:a9:16:ab:b5:40:
a9:cd:07:bd:1f:10:d5:16:9c:0b:88:f4:6b:b8:64:
4e:36:35:5e:c1:25:0b:67:37:c6:0a:dd:43:90:d4:
55:85:98:cd:67:51:4d:f0:54:ea:cb:02:15:c5:43:
e2:43:95:e1:61:17:2e:49:52:08:e6:44:ed:df:49:
ac:0f:3e:09:a9:37:ea:0b:e7:54:3a:13:9f:d4:44:
62:f1:e7:d6:ec:cb:12:5b:bd:af:db:93:a7:16:2e:
ca:1e:60:82:64:8a:35:e0:9f:1a:19:3d:28:e3:f6:
a1:4d:bb:9e:3c:2c:58:30:fe:75:de:7d:68:00:05:
25:bd:ff:4a:25:61:f2:52:f9:f8:6f:03:0f:23:79:
59:80:c7:fc:0b:04:70:5c:a2:42:65:67:41:e8:76:
25:7d:6d:93:e7:11:5a:72:80:db:88:d5:49:48:67:
20:e7:25:e2:ed:68:da:d7:c2:00:e8:99:9f:8a:70:
4a:a9:67:5a:10:41:33:90:5b:07:ad:55:0b:ab:9c:
e7:2b:60:22:d9:fc:28:e4:8d:d9:97:bf:aa:ce:b8:
fb:23:22:1d:fb:14:cf:9a:e6:b2:46:ed:92:88:87:
c7:5a:32:a5:42:43:41:2f:fe:d1:64:5f:d3:cf:02:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:22:60:2D:83:03:11:87:A4:BE:BE:E3:5C:23:36:3C:04:2C:9D
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/hw4iYC2DAxGHpL6-41wjNjwELJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/24
80.93.205.0-80.93.206.255
Signature Algorithm: sha256WithRSAEncryption
7b:3a:88:8e:72:45:2b:4d:1f:8d:88:30:d7:c4:6f:b7:8a:66:
5a:2d:54:ec:2a:9f:ec:fa:0c:03:97:da:2e:b0:54:bd:7b:3a:
3a:1f:1b:a1:1f:b5:78:08:23:ea:d5:55:51:08:6d:8a:91:f3:
1f:19:c3:8e:e1:bb:84:87:1a:01:82:f9:80:d8:53:4e:fa:76:
79:e3:ca:95:84:5c:b5:cc:dd:90:26:d8:7c:b4:26:7a:61:15:
54:5f:d3:6b:ec:9a:13:80:e2:26:89:29:46:d8:7e:f0:84:f9:
bc:74:b5:cc:38:49:26:58:ae:ba:76:95:85:f5:66:d1:44:69:
40:64:c6:74:bd:78:c6:c0:d2:99:39:10:72:f2:47:9a:a6:72:
fe:f4:e3:54:35:6d:d9:37:62:81:41:73:6d:02:01:d4:3f:5e:
da:af:04:af:f8:82:a3:16:4e:ab:c3:47:c6:78:8b:f0:c1:2a:
b4:25:75:02:ac:e8:c3:e3:fe:8b:e3:2b:4b:36:f8:7c:cf:a5:
92:b9:1a:a5:c9:a7:9a:90:13:20:cb:fb:bc:af:e3:83:07:fd:
21:58:8e:be:a4:77:85:5d:f5:2b:89:44:c7:a9:2d:49:12:4b:
1c:ee:e8:f8:76:b9:a2:1f:b1:6f:da:4f:52:e6:bc:06:42:57:
63:8b:e1:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org