Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qu6MWarf4alv-7MgLuyXqI0qhss.roa
File: qu6MWarf4alv-7MgLuyXqI0qhss.roa (raw, json)
Hash identifier: OJYvwWZjr7NV9HnsU73NhpBms08syfyenFXslTQS3Jk=
Subject key identifier: AA:EE:8C:59:AA:DF:E1:A9:6F:FB:B3:20:2E:EC:97:A8:8D:2A:86:CB
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0189B0358CC49FFF5D2ABEF32B375558DF27
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qu6MWarf4alv-7MgLuyXqI0qhss.roa
Signing time: Tue 01 Aug 2023 08:27:26 +0000
ROA not before: Tue 01 Aug 2023 08:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 80.93.203.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 10:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:35:8c:c4:9f:ff:5d:2a:be:f3:2b:37:55:58:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 1 08:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaee8c59aadfe1a96ffbb3202eec97a88d2a86cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6c:d0:ce:09:6f:c8:f8:49:ab:61:19:d5:39:
89:94:dc:c7:60:6c:9a:8f:1a:98:f1:e5:0f:e8:17:
e7:1a:ea:c6:a0:72:f7:6f:b5:18:c2:0a:85:5c:97:
9a:b1:55:1b:07:d0:43:8f:d5:9c:a2:5e:51:b9:15:
13:c6:bb:f6:18:e8:1b:99:ae:49:34:18:48:1e:84:
41:b5:6c:b3:74:4f:b9:a4:09:f9:23:e3:de:fd:c4:
e7:35:95:2b:19:95:36:4c:69:d0:01:9b:6b:3a:2c:
f8:1a:21:a1:6a:6d:4b:d1:31:5b:2b:09:30:af:be:
48:91:24:d5:98:94:fc:f6:08:ae:bc:8c:52:66:12:
32:50:69:cc:47:44:a6:84:c3:17:e2:b0:99:43:20:
ed:95:09:8c:d5:38:50:44:f2:a3:5e:ba:e2:27:a6:
36:bf:cf:be:51:66:19:dc:6f:91:bf:30:3f:58:be:
aa:c0:e2:74:f8:6b:ce:f1:94:4a:5f:d1:29:7b:8e:
13:06:e2:a1:c0:7e:93:03:26:e7:f8:53:1a:b3:99:
ef:94:98:1b:b9:0c:d0:66:8f:30:d8:ed:3a:cb:81:
85:16:34:de:72:e3:56:12:b6:ab:a9:da:99:6c:d1:
20:54:22:fd:af:62:4a:44:81:69:b3:ae:0b:89:da:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:8C:59:AA:DF:E1:A9:6F:FB:B3:20:2E:EC:97:A8:8D:2A:86:CB
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qu6MWarf4alv-7MgLuyXqI0qhss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.203.0/24
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
85:79:a4:6e:75:70:3c:53:ca:d7:f9:96:2e:7c:b7:90:41:11:
5a:32:4e:cb:00:51:87:25:f1:db:84:ef:0d:30:1d:21:8b:ad:
f4:57:a7:c3:70:e2:7e:01:27:d8:32:15:d9:6a:7f:56:a0:8f:
7f:eb:4c:d7:47:13:6e:9b:59:b5:1b:84:21:39:65:de:c8:20:
cd:54:24:a7:06:9d:8c:34:db:88:e6:46:ee:c1:6f:52:26:bc:
72:2c:2d:a7:73:81:1c:41:91:84:e5:af:91:2e:69:7a:75:fc:
11:cb:06:67:df:7b:52:6c:86:64:7d:06:89:2e:da:ee:b5:4c:
3e:f5:78:03:e9:d3:38:ee:24:93:eb:49:e5:5d:5e:55:38:9c:
54:8a:11:83:88:d3:f8:8e:70:de:71:f0:8f:d7:ff:94:18:9c:
76:39:c9:7a:2d:51:bd:54:81:80:ed:49:3f:28:58:92:ea:bc:
9a:70:d2:d1:ec:26:e3:c1:04:0b:e4:ae:1f:ec:01:87:91:04:
38:7d:6d:8b:33:8d:e6:9d:1c:ec:5d:f0:a0:8b:56:e7:ae:b5:
fa:f3:45:c1:1a:01:6f:91:c4:91:34:95:17:2d:80:ee:14:c4:
72:20:5c:c5:ec:c9:c6:3d:70:95:52:59:ee:82:e0:9a:95:1e:
92:24:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org