Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tSLbHXafvbmpqQT0-s3IRtuf8Dc.roa
File: tSLbHXafvbmpqQT0-s3IRtuf8Dc.roa (raw, json)
Hash identifier: 5HPO2iEmMctnbbRaGhiE+/3Hrd6z6T0QpngfbqgADns=
Subject key identifier: B5:22:DB:1D:76:9F:BD:B9:A9:A9:04:F4:FA:CD:C8:46:DB:9F:F0:37
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC5011D7CE46D45A7B7579A4B6391905F
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tSLbHXafvbmpqQT0-s3IRtuf8Dc.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208621
IP address blocks: 80.64.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 12:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1d:7c:e4:6d:45:a7:b7:57:9a:4b:63:91:90:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b522db1d769fbdb9a9a904f4facdc846db9ff037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:fa:fa:c0:ec:dc:75:62:32:e1:d1:29:3d:
7c:fe:f9:d2:e2:01:88:7a:76:5b:af:83:b4:94:dd:
c6:08:c5:5e:18:6c:76:b8:80:d8:bb:ad:4c:2e:91:
36:35:c2:be:8d:3c:85:02:3d:7e:c2:48:d4:4c:27:
23:65:c8:34:46:a0:8d:33:1e:c9:cf:5c:b5:d1:e2:
56:d1:13:fb:c9:d3:8e:c2:d0:af:99:76:a0:23:3d:
b6:ab:d1:3a:6a:13:26:61:70:b3:61:26:b5:f6:e4:
45:fb:c5:cd:30:27:e1:10:6c:88:77:51:22:2c:7f:
fb:b7:eb:3f:b3:99:49:c3:d0:2a:dd:4e:f0:cb:31:
d0:17:14:37:b5:f1:5a:86:de:a2:67:9f:de:a4:ce:
84:e0:a3:7b:44:e4:d2:5c:dc:be:68:81:ef:09:a2:
a5:4d:fc:0e:a4:97:2e:e8:b3:71:d2:be:df:9a:3d:
26:34:ce:da:74:ba:72:39:7e:07:ab:90:8f:ab:88:
23:08:e5:79:c2:78:26:19:4a:9d:13:39:99:81:5b:
d5:36:76:72:bd:65:7c:13:66:64:6c:1b:11:ea:44:
b1:63:2a:b2:0c:92:31:50:71:51:19:95:77:45:35:
2c:e9:aa:46:18:c7:82:e9:ed:2f:f0:96:d5:57:77:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:DB:1D:76:9F:BD:B9:A9:A9:04:F4:FA:CD:C8:46:DB:9F:F0:37
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tSLbHXafvbmpqQT0-s3IRtuf8Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.218.0/23
Signature Algorithm: sha256WithRSAEncryption
36:65:f4:be:aa:7e:ad:d0:d1:0f:99:72:6a:eb:80:26:a1:70:
43:6b:da:79:73:7f:46:b7:2a:e8:65:bc:76:f7:e8:57:38:f9:
54:23:6c:ad:38:dc:1e:95:99:af:44:d7:35:a2:94:41:e5:93:
ba:29:98:bd:b5:22:68:cc:de:b9:e4:88:41:90:64:30:c6:9d:
bc:aa:79:c9:be:f1:79:2f:eb:4d:05:d7:71:8f:ae:86:3f:66:
d4:69:2f:ff:89:10:d2:b3:a8:2f:9c:1a:91:94:64:a1:db:6e:
03:ad:d6:36:45:a4:5a:39:41:38:a2:70:0f:6b:3b:7a:2c:30:
b9:75:90:4d:9e:e4:c8:38:3c:38:d8:49:9a:ce:b2:5d:a9:48:
da:62:27:ab:62:05:ed:c1:c9:b0:c5:f9:a2:be:68:73:fe:d0:
d6:97:51:22:2b:e6:fc:70:bd:71:4e:ac:9d:ff:9f:0e:3a:05:
49:94:56:81:51:be:47:db:79:95:a7:fe:e8:8e:04:60:7b:c9:
e9:f3:d4:9f:8a:80:76:bb:87:65:a6:32:d3:b5:be:63:3a:d1:
d3:93:9f:f4:8c:d8:41:d5:13:40:03:19:3d:f6:5e:b7:d5:e3:
61:9e:25:ba:71:d7:6e:96:80:69:89:36:e2:84:c5:dc:01:ba:
90:ea:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org