Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/cobLedHT6dn4WbL1-WbPaHcCq24.roa
File: cobLedHT6dn4WbL1-WbPaHcCq24.roa (raw, json)
Hash identifier: TIbNfXPOgiyLASdRvrBu3hwWerdR5LtmCpGag9pSZhU=
Subject key identifier: 72:86:CB:79:D1:D3:E9:D9:F8:59:B2:F5:F9:66:CF:68:77:02:AB:6E
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 01856F2FF150BAE3E6D136A5E4BAF06E1704
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/cobLedHT6dn4WbL1-WbPaHcCq24.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25400
IP address blocks: 80.239.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 25 Jan 2023 12:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f1:50:ba:e3:e6:d1:36:a5:e4:ba:f0:6e:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7286cb79d1d3e9d9f859b2f5f966cf687702ab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:70:6e:c8:5a:56:46:ba:3f:52:72:03:63:
5a:f5:fa:92:37:0b:d6:d1:84:53:24:8c:c7:41:3c:
c8:d8:b7:66:74:c8:06:99:a6:5d:e3:99:67:d5:1c:
9a:d9:7b:a9:ff:08:95:a9:58:31:d9:1e:85:11:fc:
92:50:72:48:42:55:97:c9:a3:2e:af:3c:27:54:ad:
fd:43:2c:a8:22:8d:0e:a3:88:a7:ff:b0:4d:fe:f2:
1f:8a:e5:29:24:8b:bd:99:5e:57:a2:bb:18:18:aa:
5f:12:87:53:74:3f:63:ec:44:57:b3:ae:50:a9:e7:
35:47:21:d2:a6:9b:f2:97:8e:2d:f7:cb:23:fb:a8:
e4:b3:cf:91:e8:5c:0d:01:5c:0b:8e:35:72:c2:32:
31:88:48:1b:df:c6:10:24:7c:42:34:cc:29:68:b9:
c3:9b:67:35:89:3f:ae:2f:18:d3:0e:aa:ef:87:4f:
ce:af:94:3e:7f:45:79:96:41:11:76:24:a7:19:18:
0c:a1:41:04:2b:28:19:c0:52:73:0e:08:09:59:13:
b8:21:c3:6a:9e:15:5e:71:40:ce:4e:fa:01:57:a9:
d2:92:88:bf:97:bf:cd:1c:e0:ab:d3:67:45:f0:e1:
b9:7d:82:f2:6d:d4:89:d3:5e:7c:99:bd:7f:59:15:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:CB:79:D1:D3:E9:D9:F8:59:B2:F5:F9:66:CF:68:77:02:AB:6E
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/cobLedHT6dn4WbL1-WbPaHcCq24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.239.0.0/17
Signature Algorithm: sha256WithRSAEncryption
43:80:9e:0a:36:85:b0:81:07:bb:3e:cd:ad:9e:f4:1c:60:b7:
8d:81:f4:f2:19:99:98:49:c4:ce:9b:34:cd:48:fe:d5:45:0c:
0a:4e:fb:3c:e2:15:3a:36:db:58:7e:8b:58:62:c9:d5:94:a5:
79:75:60:24:17:74:c1:3c:10:72:45:48:63:39:fa:88:26:f0:
fe:bd:ea:ef:19:f7:75:76:e8:ab:9f:0c:03:86:33:77:e8:e3:
e2:e2:c2:9f:5a:92:f4:24:77:b6:2e:af:5c:2c:57:9e:20:20:
40:9f:75:96:7d:33:d1:ca:1c:76:97:48:21:21:a5:c8:92:02:
d4:76:d2:f6:32:ee:f7:fd:cb:31:61:d3:55:c0:79:b0:f3:80:
ca:75:ef:0f:bd:ae:66:4f:47:12:15:cc:30:b7:29:73:7c:d9:
03:34:e2:df:f1:3d:ff:5a:95:e2:6c:8b:77:1b:97:da:52:a4:
ae:48:e7:cc:67:94:38:01:42:00:b9:58:38:4c:3c:19:dd:2e:
87:8c:7f:43:3d:36:a2:f5:75:b2:70:6b:2d:ec:d2:64:0f:b6:
2e:cb:a7:55:e1:66:f9:a5:47:0a:a7:40:38:7e:5c:6e:2e:9e:
62:30:ae:bd:fc:03:b0:e8:0d:d3:ed:4c:0c:9e:08:2f:36:f9:
af:ea:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org