Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/A7q7FjMMTrFWjVpQP1aGDwL-euo.roa
File: A7q7FjMMTrFWjVpQP1aGDwL-euo.roa (raw, json)
Hash identifier: CPPfxUcYn0q2/+exXdHLUjMK4J4jmC7B/sOd+lZxI1U=
Subject key identifier: 03:BA:BB:16:33:0C:4E:B1:56:8D:5A:50:3F:56:86:0F:02:FE:7A:EA
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 0187BD3B286C85B5B9C4419840F351B784E4
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/A7q7FjMMTrFWjVpQP1aGDwL-euo.roa
Signing time: Wed 26 Apr 2023 11:03:03 +0000
ROA not before: Wed 26 Apr 2023 11:03:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24232
IP address blocks: 212.11.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:3b:28:6c:85:b5:b9:c4:41:98:40:f3:51:b7:84:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Apr 26 11:03:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03babb16330c4eb1568d5a503f56860f02fe7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:fc:93:c2:23:f8:f4:ff:9f:5c:9b:8d:cf:
b8:2b:4a:43:b5:74:50:70:c4:12:85:41:e1:ec:70:
4e:28:bb:2f:87:ef:da:db:3d:f3:8c:f1:36:31:68:
53:b9:50:3b:e8:33:f0:d8:bd:8d:bd:f9:e3:cc:c9:
d6:9b:20:10:aa:d8:27:c7:cf:4b:ff:16:aa:ad:00:
e8:b5:fd:f4:fd:b7:67:02:36:a2:85:63:33:21:9d:
3b:4c:b5:bb:94:45:4b:e3:3b:99:f3:db:a2:73:5e:
48:d8:65:0c:50:85:35:a0:6d:e9:cd:ff:ca:8a:b3:
8c:4b:0f:b2:e1:ba:75:dd:d9:81:3e:74:1a:92:68:
45:d5:51:84:52:96:5a:51:bf:89:5f:70:c8:68:8f:
5a:8a:44:7d:57:69:32:2d:ff:3d:22:75:1e:f5:cd:
52:9a:18:c9:6f:c9:47:4f:f0:78:11:cb:f7:72:68:
50:38:f9:2f:2f:54:a4:2a:ab:6f:a3:d1:43:d0:bd:
88:05:db:50:d9:8f:75:67:06:b9:6f:5a:6d:99:2e:
a2:64:46:e5:ee:cb:6b:af:f7:8b:92:c1:8e:c1:66:
e3:30:4a:0e:18:f7:03:d2:24:c4:76:b4:f4:c4:7b:
f3:e0:79:94:a4:fb:b7:40:1a:bb:25:54:35:81:13:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:BB:16:33:0C:4E:B1:56:8D:5A:50:3F:56:86:0F:02:FE:7A:EA
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/A7q7FjMMTrFWjVpQP1aGDwL-euo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:04:ee:b2:ff:e0:68:05:9d:48:fe:01:c3:fa:16:6f:a9:30:
ee:ad:a3:df:1b:82:4d:51:ef:5f:c4:6c:92:4e:2e:39:ac:d1:
8e:c1:b1:e5:66:88:4d:8e:dc:24:d6:5e:b4:31:d1:fe:29:41:
19:55:08:da:c2:92:95:04:4f:c5:80:7d:27:b8:60:66:d3:42:
d9:3d:92:74:f3:ab:e8:58:d9:c2:d2:66:97:af:d4:d6:ad:17:
64:c7:6c:14:f5:69:a4:32:47:f6:9c:fa:de:d9:bc:e6:fb:18:
a3:01:c1:38:45:e9:7f:17:02:dc:45:b8:72:6e:d8:8e:6b:2e:
77:50:30:09:6a:a3:40:2e:f6:38:67:73:ac:c8:97:e8:86:90:
2f:eb:be:d3:9a:a8:81:44:20:ba:f8:c7:b8:e9:4f:98:fb:30:
44:8a:b4:9a:a9:45:f9:91:31:84:15:6d:90:d6:a6:19:be:e6:
0e:78:f8:66:3d:64:a0:9d:01:13:94:7b:5c:8a:b5:a8:9d:f3:
d9:20:f3:2f:93:27:b1:38:f8:63:0d:1d:95:46:e3:4b:fb:99:
98:48:b2:72:e0:67:1b:bd:3a:c2:66:50:d5:34:dd:31:49:46:
8a:f5:bb:cb:9d:53:d4:ed:02:1f:39:2c:ee:b9:f8:de:30:57:
8a:88:52:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:27 2023 by rpki-client on console-ams.rpki-client.org