Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DsE5tdoWLKcZon4TQ_v1mpFF4VE.roa
File: DsE5tdoWLKcZon4TQ_v1mpFF4VE.roa (raw, json)
Hash identifier: BrtbbsSr6HtT0DK+O/4sQHDaQfrM1our7JcWVdVAPBo=
Subject key identifier: 0E:C1:39:B5:DA:16:2C:A7:19:A2:7E:13:43:FB:F5:9A:91:45:E1:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A740F24BF86F0F404F46CB068ACF86508
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DsE5tdoWLKcZon4TQ_v1mpFF4VE.roa
Signing time: Fri 08 Sep 2023 09:11:04 +0000
ROA not before: Fri 08 Sep 2023 09:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 80.76.48.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:0f:24:bf:86:f0:f4:04:f4:6c:b0:68:ac:f8:65:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 8 09:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec139b5da162ca719a27e1343fbf59a9145e151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fd:a0:df:1b:6b:a2:7c:63:b1:e0:26:8b:cd:
bc:10:05:aa:48:49:79:fe:df:19:4b:24:18:d1:3f:
83:c3:ee:f3:50:f7:0b:4f:06:1a:17:6e:2b:69:ad:
49:ec:25:a1:ed:dd:a1:d4:a5:7b:c7:6d:b5:fc:75:
c2:f8:73:f0:30:2f:4a:fc:bc:3f:0a:91:4c:53:0d:
60:52:d1:fe:a4:c0:61:2a:1d:44:c6:b9:00:b0:2b:
05:0d:c0:0a:a8:58:85:3b:16:3d:d5:b4:3a:6a:16:
7b:26:be:61:d8:f8:39:0e:9e:14:4b:53:50:68:db:
11:93:88:44:cf:8b:49:54:18:e6:c2:f8:61:6a:4d:
4c:fc:89:44:2a:42:bd:ee:bb:e1:e8:94:23:14:0e:
6a:db:cf:e8:cb:6e:e7:b2:bd:e7:20:38:9f:e3:12:
4b:3a:97:01:84:0f:5a:aa:6d:e6:fe:70:98:a4:41:
6a:e1:24:41:7a:7a:ab:60:50:f4:6f:0f:4d:7f:a8:
ac:e9:f4:52:e0:90:aa:5c:84:56:c0:f3:bb:b8:22:
d9:44:d4:3a:2e:8e:e6:cf:c0:1f:8b:2d:99:54:bc:
7d:e4:43:ae:7f:00:87:2a:42:b8:4f:53:98:83:be:
cf:cd:d4:91:e0:e1:ad:05:2f:c5:24:9a:97:2e:c5:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:39:B5:DA:16:2C:A7:19:A2:7E:13:43:FB:F5:9A:91:45:E1:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DsE5tdoWLKcZon4TQ_v1mpFF4VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
87.120.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:77:6a:5c:b2:b7:23:43:05:eb:94:90:06:14:e0:c9:8d:b1:
46:69:d4:5d:35:97:c5:86:57:d9:8d:25:6b:e0:f7:ef:36:32:
54:04:10:0e:4f:ef:20:ac:78:1c:e2:68:92:64:3a:c8:65:12:
12:eb:42:f9:35:fb:ed:7c:ec:3e:c4:4c:8a:6a:47:bb:06:05:
59:3d:a9:e9:05:a4:d7:68:52:31:b2:88:96:70:5c:6b:f5:81:
81:c8:16:6a:39:cb:ff:48:ed:85:84:44:ee:e0:b1:ff:cd:c6:
0d:86:43:6d:6d:bd:5a:36:44:a9:47:d7:31:dc:ea:05:eb:33:
b0:a4:f1:b5:cd:b4:82:c0:63:f5:05:a9:fd:4b:ea:62:be:29:
de:9b:c5:cd:2a:b5:9c:a0:b6:4e:77:d4:1f:50:95:30:ac:00:
ba:76:b4:37:ab:b7:b2:94:29:a9:c5:56:6f:df:70:be:bb:85:
33:46:97:fa:8c:23:e4:0a:87:90:a5:73:61:cc:60:89:14:61:
5e:34:b7:9d:ad:74:25:df:29:23:ad:c8:15:d4:53:11:ab:42:
a4:9a:86:43:20:3a:eb:ea:81:fb:e8:58:ad:03:63:67:6c:69:
4e:5b:80:c8:50:b0:e6:53:42:f5:71:32:ff:39:d5:95:1c:a9:
c9:bf:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 10:40:26 2023 by rpki-client on console-ams.rpki-client.org