Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/2l2n5ugRcTSKeS_UOhUxoxvkkeE.roa
File: 2l2n5ugRcTSKeS_UOhUxoxvkkeE.roa (raw, json)
Hash identifier: H8/lmQ/rb1G6SW0PRScFiTN/C55wSdTzfL1wfpnwxZA=
Subject key identifier: DA:5D:A7:E6:E8:11:71:34:8A:79:2F:D4:3A:15:31:A3:1B:E4:91:E1
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018CC2DB435195E81873DAC6234A304D7942
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/2l2n5ugRcTSKeS_UOhUxoxvkkeE.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 80.91.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 05:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:43:51:95:e8:18:73:da:c6:23:4a:30:4d:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da5da7e6e81171348a792fd43a1531a31be491e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a2:13:4a:8f:a0:1e:29:9f:d9:31:f2:f8:95:
72:70:25:15:a9:fd:97:8e:ba:82:a5:74:c8:19:91:
68:5f:94:93:5e:68:c6:b0:1b:16:24:d0:43:2c:73:
93:10:37:01:e7:34:b4:65:42:4b:2c:d5:36:27:a5:
83:a7:44:28:e0:08:51:81:6d:6f:c6:a8:fc:95:3b:
72:9a:a0:a5:ae:ef:9c:cf:9f:4f:e8:3b:dd:fc:9e:
e3:ba:a0:ee:75:4d:35:3d:53:3c:18:5c:ca:c5:ce:
04:02:75:89:8f:ce:ee:6a:c6:bd:c8:cc:75:0c:f6:
34:fe:d4:e8:0c:7d:5a:4a:b3:91:9b:5b:a5:53:0c:
1b:50:f8:b0:35:07:8e:12:d1:b1:98:f6:b0:b4:d6:
14:b8:89:fa:67:31:d9:9a:bb:c3:27:a1:9b:05:c6:
1a:6e:bf:3c:4e:bb:a7:5e:56:57:76:34:5f:07:64:
a3:30:5d:80:49:ee:3d:d3:cb:63:a0:22:ca:ef:9e:
ee:61:50:a2:88:a6:6e:86:eb:14:e2:b6:2e:7d:c2:
66:a4:5d:09:b6:d1:7c:4d:c4:85:c0:5f:5c:c8:12:
1a:b2:f8:ea:31:19:f3:6d:72:b7:0c:82:e1:61:bc:
0f:c7:17:0e:78:f1:7c:b0:51:15:34:4c:74:89:97:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:A7:E6:E8:11:71:34:8A:79:2F:D4:3A:15:31:A3:1B:E4:91:E1
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/2l2n5ugRcTSKeS_UOhUxoxvkkeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:20:97:7f:32:15:36:55:d1:5b:b4:12:d1:b8:d5:45:f9:3e:
5e:64:62:92:7e:00:37:36:fd:bb:86:70:11:bd:4c:37:ee:d3:
4c:00:ae:04:9f:b0:48:27:7b:db:37:9f:8a:f7:40:d4:f1:c8:
af:ca:ad:40:7f:52:ef:54:c0:16:80:08:81:a4:fc:c5:22:29:
ee:c4:10:7a:94:fa:21:c2:15:d5:bb:80:ad:b1:15:ff:c2:c4:
9d:02:07:4d:6d:0c:52:47:33:18:42:2d:d9:6c:80:1f:72:28:
87:09:30:f3:c0:6c:d1:96:5a:28:af:6e:a9:e5:05:77:41:af:
9e:d2:8f:7f:44:39:7c:53:e9:2b:3a:a3:14:72:7a:d9:a8:e4:
15:ec:66:64:15:33:be:e8:d7:a9:ce:ff:39:81:a2:77:70:cc:
9a:ee:69:5d:17:de:56:56:8e:0e:42:b3:bc:cf:fb:3c:84:26:
53:44:99:3e:4d:a5:79:e5:20:1a:ed:23:b9:02:c6:fc:a1:84:
57:4b:27:39:df:11:57:6a:e6:56:d8:9e:fe:3f:a1:23:04:61:
03:90:eb:15:61:9d:13:1f:e7:c1:08:98:bb:78:f3:73:91:22:
11:e9:1f:99:67:94:28:02:b0:48:e7:73:0d:f9:7f:c2:01:8f:
40:ce:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org