Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/5dUor5UarYSFEHf9fAMJT314qcA.roa
File: 5dUor5UarYSFEHf9fAMJT314qcA.roa (raw, json)
Hash identifier: 70/b9MeIwJY3gMv58SXZ3cYJXbsWeMBnxa4EO0Yx0Mc=
Subject key identifier: E5:D5:28:AF:95:1A:AD:84:85:10:77:FD:7C:03:09:4F:7D:78:A9:C0
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 01856CC15C516382346582487C4FBF0DD1C9
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/5dUor5UarYSFEHf9fAMJT314qcA.roa
Signing time: Sun 01 Jan 2023 09:54:49 +0000
ROA not before: Sun 01 Jan 2023 09:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57277
IP address blocks: 80.92.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5c:51:63:82:34:65:82:48:7c:4f:bf:0d:d1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 1 09:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5d528af951aad84851077fd7c03094f7d78a9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:9d:2c:92:bc:73:7d:2c:48:cd:11:a0:0e:
f5:fa:fc:d6:f4:65:0f:52:97:4f:f6:65:55:48:02:
07:5d:dc:f4:c2:15:a2:1f:29:71:88:32:d2:40:42:
42:50:b1:cd:e8:8a:b0:65:dd:26:f3:b1:09:65:39:
be:a8:5a:90:f2:7d:a8:3f:af:8b:a7:59:ed:72:c0:
b4:ca:e4:1f:e3:ce:9b:58:81:93:fa:72:da:04:be:
3f:f1:69:b6:89:58:96:9a:bf:5c:97:9a:8c:dc:56:
41:87:c5:99:52:3c:37:82:9d:84:a6:3a:1c:58:7e:
95:7a:de:d2:c3:0c:ff:0c:08:c5:ea:e0:ec:52:e3:
68:93:70:1c:7d:57:43:c8:c1:28:e5:45:50:06:82:
a9:95:92:77:0e:1e:85:9e:0f:69:f1:21:4b:dd:0b:
07:89:68:2b:8d:ce:b9:c9:03:0f:c4:d6:d2:40:50:
a2:e4:ec:66:b4:5d:91:7b:b7:17:9f:b1:f3:dd:71:
ea:48:96:86:b9:30:70:0b:59:b9:79:bb:12:ac:7b:
5c:02:a4:bf:96:64:64:77:10:59:33:96:c0:f3:a8:
f3:2e:eb:33:10:02:3b:a1:ac:57:4c:5c:f4:27:18:
81:5b:8f:a7:fb:e7:f3:6e:63:62:c5:13:f7:53:c5:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:28:AF:95:1A:AD:84:85:10:77:FD:7C:03:09:4F:7D:78:A9:C0
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/5dUor5UarYSFEHf9fAMJT314qcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e1:e7:0a:a5:fb:f3:a8:92:b1:92:af:d5:bc:c0:6a:76:5e:
14:4a:ce:ba:a6:5f:02:8d:5f:0b:6c:9a:1d:90:e8:f8:3e:05:
70:4d:4b:6f:99:73:4e:20:93:76:53:e9:8a:80:f2:08:69:f7:
78:3b:42:49:d6:2d:21:30:0c:af:e1:d7:e3:52:57:32:b1:25:
5f:8d:e4:3a:1e:99:2a:2a:c7:c3:01:18:d4:fd:72:5a:4c:a9:
bd:d7:b7:52:ac:06:9b:c9:0c:c4:9b:f4:b4:8c:28:f9:cd:5a:
95:31:5a:8d:64:37:2b:25:87:f6:f7:ae:f1:35:5f:01:55:ed:
44:f0:6f:ee:2b:49:d8:c2:b7:d8:c9:a3:be:bf:2e:25:18:73:
86:42:7e:a9:e6:42:aa:b6:b8:cd:3c:43:5b:41:11:0d:c5:3b:
92:d9:e0:4d:85:ad:77:d5:c6:81:f8:2a:09:9d:e0:9a:c9:34:
07:19:fd:1e:32:fb:60:a7:18:9a:80:04:2e:6c:f4:ef:00:03:
5a:6f:ae:24:1a:c8:24:c9:bb:0b:b9:5c:6e:f1:a5:60:3b:d2:
e3:dd:53:cc:1e:2c:b8:fd:d5:56:37:ac:d5:f2:9b:7a:0f:53:
d7:2b:ea:5d:60:54:2d:05:ef:e2:21:65:11:37:01:90:aa:2c:
4c:94:5b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org