Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/xQSbBwz0LmWb6jcP0FP_cksBbaU.roa
File: xQSbBwz0LmWb6jcP0FP_cksBbaU.roa (raw, json)
Hash identifier: osk1WeZmn2pBXdVZ/YqHIFcX7b4UYkNeFfFtOMmktjg=
Subject key identifier: C5:04:9B:07:0C:F4:2E:65:9B:EA:37:0F:D0:53:FF:72:4B:01:6D:A5
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0185E447E26A66F5B7E494B8660CBEA565FF
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/xQSbBwz0LmWb6jcP0FP_cksBbaU.roa
Signing time: Tue 24 Jan 2023 14:56:34 +0000
ROA not before: Tue 24 Jan 2023 14:56:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 80.93.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:47:e2:6a:66:f5:b7:e4:94:b8:66:0c:be:a5:65:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 24 14:56:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5049b070cf42e659bea370fd053ff724b016da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:de:19:37:ab:aa:92:f3:a3:75:ef:e5:73:
f0:bb:16:a3:63:cd:2b:a3:c9:79:ee:ea:14:85:5c:
79:73:37:ae:9f:e2:8c:3d:16:64:7e:5c:1c:c5:72:
3c:a5:cb:d5:16:60:2c:cc:86:a2:be:66:c7:1f:3b:
ab:94:4e:51:3e:fd:eb:16:37:ff:7b:30:91:8c:1b:
98:0d:e2:d8:6c:65:89:12:93:93:76:b6:d4:7e:2e:
6c:54:61:9b:6b:22:8b:84:97:db:a1:a1:87:f2:31:
6a:eb:50:f0:e2:0d:81:0e:1a:0e:46:ea:75:60:27:
97:d6:c7:31:0a:69:df:fd:9a:93:1a:63:28:11:3f:
8f:05:03:02:4e:e6:f7:ad:e3:f0:94:bf:c9:49:81:
e5:d2:80:d9:72:d0:71:a6:f6:0c:4f:48:c0:b8:f5:
13:f9:77:0b:48:ca:e2:e8:a1:72:44:e2:eb:62:87:
7a:fb:5f:9b:3b:39:9f:1a:1d:53:e4:67:da:b7:19:
e8:23:17:4f:d4:31:f1:e8:09:9a:bc:74:12:24:78:
fd:65:ce:b3:6a:5d:8f:73:6c:83:7a:d8:db:36:47:
da:91:94:e3:f9:fa:1b:fe:4c:b0:62:89:29:f6:e0:
43:c0:8c:88:7c:cc:d8:3d:f5:82:73:90:f6:cb:80:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:9B:07:0C:F4:2E:65:9B:EA:37:0F:D0:53:FF:72:4B:01:6D:A5
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/xQSbBwz0LmWb6jcP0FP_cksBbaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.200.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8d:c2:ab:44:cb:81:62:42:8a:72:96:47:20:02:76:70:e2:
06:96:99:b3:df:42:25:fa:9d:7f:e0:97:44:cc:51:4f:86:43:
ae:0a:6e:79:1b:dd:7e:ea:f8:c7:79:e7:ba:be:cc:75:49:0b:
dc:75:ca:ab:c2:96:1b:ca:77:e8:c3:4b:74:d6:6b:9d:c5:70:
e8:ec:3f:6e:4d:4d:eb:27:5f:c4:67:fc:ca:2b:4d:81:d4:f2:
d8:28:03:e0:b1:ed:8d:5d:af:56:27:68:5b:a1:01:01:27:be:
b0:49:65:60:30:dd:0a:a3:da:59:c6:65:3b:f5:42:77:59:6d:
8b:db:24:fb:5c:70:a9:6e:d6:49:4d:8d:cb:84:7e:5a:33:bb:
7b:62:b8:d7:25:93:ef:2e:6c:92:d9:7b:85:2b:17:52:91:da:
69:06:a3:db:5f:33:66:4a:70:41:1a:cc:60:b4:6a:22:92:56:
5d:3a:fa:e0:9a:81:c2:d3:1c:09:15:ae:03:d8:e7:4a:b7:35:
31:b1:9c:7f:74:85:c7:aa:95:35:4f:c8:6f:55:43:c1:16:63:
c5:20:ed:fe:86:be:8b:4b:33:1d:75:d4:11:ee:c9:18:b9:75:
a9:61:be:3f:f5:7b:c6:9c:0c:ab:d4:f8:c9:27:81:0b:ad:0d:
97:ac:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org