Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/dv1RPIxwtBwwUg3NmrxlZxmA_aI.roa
File: dv1RPIxwtBwwUg3NmrxlZxmA_aI.roa (raw, json)
Hash identifier: YVi7gXFHfXHlfxjNWmCrUnS+fPb92aKtONaPGHTrvmw=
Subject key identifier: 76:FD:51:3C:8C:70:B4:1C:30:52:0D:CD:9A:BC:65:67:19:80:FD:A2
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 018900AFED8B0068A3DC020F1AB573E3F36F
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/dv1RPIxwtBwwUg3NmrxlZxmA_aI.roa
Signing time: Wed 28 Jun 2023 06:27:56 +0000
ROA not before: Wed 28 Jun 2023 06:27:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42695
IP address blocks: 80.254.228.0/23 maxlen: 24
80.254.230.0/23 maxlen: 23
2a13:5243::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Aug 2023 13:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:af:ed:8b:00:68:a3:dc:02:0f:1a:b5:73:e3:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jun 28 06:27:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76fd513c8c70b41c30520dcd9abc65671980fda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:55:fb:27:22:fd:26:0c:6f:d6:d8:99:3b:
6a:7d:9c:87:c8:52:1c:fa:f5:c2:c8:e3:72:ed:19:
86:d9:83:8c:90:a1:10:57:0b:42:4d:b5:39:b8:1c:
6c:95:20:61:eb:c1:ba:c5:32:47:e1:53:60:0c:34:
ad:be:95:85:37:9e:53:d2:c8:48:bb:b8:90:75:6b:
f4:48:18:09:17:b0:b4:11:bb:c4:07:4a:1a:21:23:
01:47:c0:1b:d8:c5:89:7d:79:1e:ce:4a:eb:c1:ed:
88:b2:bf:ed:7c:8c:8f:41:dd:06:54:8c:45:2e:97:
74:e3:b1:ec:8a:c8:0e:92:93:9c:c3:34:c7:95:6f:
6b:fe:cb:cb:90:17:82:e2:86:c0:cb:fb:cb:b4:a3:
e4:02:56:81:87:ea:be:35:6a:fc:b6:96:7c:06:0c:
e6:e3:84:ed:4d:73:3d:ec:ec:0f:2d:7b:ac:2e:ee:
c1:72:2a:3f:30:42:af:1e:10:ac:1a:12:3e:47:2d:
30:58:f0:c0:c4:fc:cc:7a:5d:f6:a9:3e:e0:7d:17:
58:81:7b:bc:fb:c9:5f:1e:40:8e:c7:f2:03:9a:95:
05:40:b3:2c:dc:e3:8b:cb:a3:16:15:3f:56:81:3c:
85:4c:17:70:40:04:6b:5f:65:a3:16:8d:1f:8a:80:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:51:3C:8C:70:B4:1C:30:52:0D:CD:9A:BC:65:67:19:80:FD:A2
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/dv1RPIxwtBwwUg3NmrxlZxmA_aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.228.0/22
IPv6:
2a13:5243::/32
Signature Algorithm: sha256WithRSAEncryption
4c:88:56:bb:18:c1:f5:ed:0d:e2:36:ef:83:09:80:72:eb:96:
73:56:ce:e4:4c:81:bf:61:27:ff:51:74:74:33:74:61:34:1d:
80:0d:fd:77:1f:84:5c:7e:fb:29:c7:f7:9e:34:82:a4:72:1d:
e2:5d:3d:7d:a0:a3:b6:43:9b:7b:f5:a2:c1:af:2e:04:26:e2:
6e:ea:4f:fc:2b:ca:0c:12:87:77:3f:d4:0a:8d:32:c7:fa:cf:
ed:82:9e:c0:59:6d:05:70:f0:e3:91:f3:2a:61:92:91:c1:5f:
8f:8c:09:b8:3a:e3:48:89:8e:25:0c:f7:37:12:08:54:40:c7:
ff:67:a9:b9:47:5c:a6:ce:5c:ed:19:74:ed:b9:d9:7a:b0:4f:
d4:1b:02:76:5b:f1:42:75:d6:a9:47:48:be:a0:92:3c:5e:d2:
85:d6:5a:1a:da:09:ec:85:76:90:1c:a8:22:82:37:e3:26:49:
e4:55:dc:6f:f9:67:96:eb:de:81:c5:73:28:04:8e:d2:ee:1a:
b2:05:8b:df:da:2f:f6:b2:7e:f1:fa:7f:84:8a:58:16:19:88:
c0:15:bb:31:9d:28:b2:52:51:8e:71:4c:ea:f3:34:e1:bc:8d:
9f:b6:dc:a7:81:d6:34:55:72:b0:6b:d1:f7:6a:bf:91:21:e1:
4a:c3:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:34 2024 by rpki-client on console-fra.rpki-client.org