Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/Y3XGVVIvYpjWbPfNEkIK7VHcJlA.roa
File: Y3XGVVIvYpjWbPfNEkIK7VHcJlA.roa (raw, json)
Hash identifier: DfBLrItBKwUr6dnijLcWX92r6OfLXaw9YgHrW1cT/nk=
Subject key identifier: 63:75:C6:55:52:2F:62:98:D6:6C:F7:CD:12:42:0A:ED:51:DC:26:50
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 018572A80623E4C01489725C9B6AF682EC63
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/Y3XGVVIvYpjWbPfNEkIK7VHcJlA.roa
Signing time: Mon 02 Jan 2023 13:24:52 +0000
ROA not before: Mon 02 Jan 2023 13:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201844
IP address blocks: 80.64.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a8:06:23:e4:c0:14:89:72:5c:9b:6a:f6:82:ec:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Jan 2 13:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6375c655522f6298d66cf7cd12420aed51dc2650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:88:03:c4:43:8c:26:7a:ee:fd:e4:e0:6a:
36:d8:d1:ce:b0:85:74:a2:0b:39:5e:13:e9:8c:09:
cc:a6:0e:e8:4a:6b:de:f6:39:65:9f:4b:d3:10:29:
d7:f3:17:66:98:2d:a2:4b:a6:34:b1:f4:e4:d6:70:
fb:54:ca:2f:62:37:15:37:5b:df:f0:37:90:d0:d8:
69:4d:fc:36:28:fa:64:77:56:65:a6:2c:c4:b0:ad:
3b:61:5d:cd:69:f8:53:b7:c1:26:d1:be:d5:99:b7:
eb:bb:fa:f5:21:c1:24:3b:31:32:3e:dd:65:87:23:
de:f1:49:df:77:7e:38:8f:5a:ca:37:5e:74:d9:22:
ac:7c:1e:bd:22:1b:03:6e:a4:26:d6:d2:a4:0d:f6:
c7:eb:bd:fc:cc:cb:28:d6:fe:2c:8f:79:20:43:27:
83:d2:4c:35:32:85:01:cc:56:f0:05:dd:4b:4f:f8:
7c:34:66:38:0c:f0:3a:85:76:70:13:63:c1:58:a4:
ee:d2:bf:19:6a:0d:7a:c8:d8:05:c5:c9:7b:c7:0d:
1e:b4:8f:ad:ff:19:36:49:59:5d:e8:f8:33:c9:5f:
d0:dd:4f:29:1b:73:77:a1:9d:f5:b8:e8:eb:1b:45:
4a:e4:e6:e8:8f:53:0c:be:04:bf:f7:df:b3:43:0c:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:75:C6:55:52:2F:62:98:D6:6C:F7:CD:12:42:0A:ED:51:DC:26:50
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/Y3XGVVIvYpjWbPfNEkIK7VHcJlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.22.0/23
Signature Algorithm: sha256WithRSAEncryption
22:48:88:90:f6:fc:d0:65:6d:14:2e:8e:d3:5d:6f:ee:ac:c1:
fa:86:7e:3c:f7:40:29:52:0f:3e:17:96:41:81:df:92:a7:fc:
97:d5:9c:9f:56:db:a7:e3:6e:59:6b:dc:f1:7c:66:24:8b:15:
b0:79:4a:d5:12:ea:31:e5:77:10:ae:62:89:04:47:32:25:18:
cf:b8:7a:53:2a:5a:5c:75:14:76:7f:94:33:4c:f8:7b:58:e4:
fc:fc:fa:21:45:78:ed:69:08:67:13:a2:00:c0:9c:9b:91:cb:
f6:43:3b:6f:66:42:0c:32:86:3e:de:b5:ab:ed:d6:e0:2b:be:
50:0f:b9:b1:13:84:ff:9b:48:7f:78:93:ca:4b:f3:bb:96:b8:
8b:ba:44:98:ab:43:97:1e:57:b7:da:a3:cb:23:76:c5:c5:d8:
6e:6e:77:53:b8:92:52:7e:19:58:f6:3f:c6:ef:f2:92:5a:6a:
e7:73:12:35:d9:51:37:58:2b:d4:be:6b:56:cf:63:a6:17:ed:
53:fd:76:04:77:ba:60:da:36:17:ad:9e:ff:2d:cf:ae:af:76:
4b:de:15:c8:1a:5a:79:a7:f1:d4:4a:5a:49:57:f5:03:a6:ae:
8f:43:2c:cd:5d:10:a4:fc:9c:da:96:cb:a0:69:cb:e5:5a:b4:
aa:ee:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:45 2024 by rpki-client on console-ams.rpki-client.org