Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEl6Wg-WtFZ0qnEeInpgFJVYj40.roa
File: nEl6Wg-WtFZ0qnEeInpgFJVYj40.roa (raw, json)
Hash identifier: A4yh4Ew2bZqqGKwIj6UIkn6X/F2bGfI2knE5dMv7qMA=
Subject key identifier: 9C:49:7A:5A:0F:96:B4:56:74:AA:71:1E:22:7A:60:14:95:58:8F:8D
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 01856F670F96FA4EAA92D2114AEA93B3313C
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEl6Wg-WtFZ0qnEeInpgFJVYj40.roa
Signing time: Sun 01 Jan 2023 22:15:02 +0000
ROA not before: Sun 01 Jan 2023 22:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42580
IP address blocks: 185.224.164.0/22 maxlen: 22
80.243.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0f:96:fa:4e:aa:92:d2:11:4a:ea:93:b3:31:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 1 22:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c497a5a0f96b45674aa711e227a601495588f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:28:de:0c:05:1d:d0:93:22:5e:b3:22:b2:
ec:43:d9:b5:ca:e4:9a:66:89:ec:a1:e1:fe:68:40:
1f:e0:2e:88:9a:27:17:eb:16:12:9c:bb:c1:5b:83:
78:2e:7d:1b:35:5b:10:c5:30:45:3f:74:bb:6c:3d:
7c:df:ec:09:dd:5e:f4:cc:9f:64:00:48:37:a6:fb:
91:d2:fc:a0:1c:a6:00:ee:bf:71:cd:f5:2b:5c:dc:
b9:fe:b9:01:db:63:77:9e:2f:38:be:53:17:01:33:
5b:19:eb:f1:44:52:a3:18:7b:55:c2:27:ad:93:bb:
d5:e8:29:20:af:be:f4:cf:44:88:9b:68:3b:c8:4b:
dd:b4:24:ed:fe:33:d9:fe:95:3a:fa:89:ee:fd:89:
4a:88:e6:4d:8f:ef:cd:3b:f3:15:13:ff:69:f0:37:
1e:b3:3e:bc:31:bd:d1:52:b5:8c:45:81:29:28:06:
4a:f2:57:09:8b:3f:01:0b:f5:cb:ec:b8:bc:bf:f5:
27:6d:e3:09:19:91:2f:1e:df:ca:f1:c5:30:7d:6e:
b2:1b:6f:d4:3c:09:b0:ed:59:33:fa:ff:f9:23:09:
85:e9:76:1f:75:eb:68:cd:8a:5b:61:88:ac:7a:db:
7f:d3:90:a7:94:84:cb:62:e1:49:28:36:8b:09:e8:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:7A:5A:0F:96:B4:56:74:AA:71:1E:22:7A:60:14:95:58:8F:8D
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/nEl6Wg-WtFZ0qnEeInpgFJVYj40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.88.0/21
185.224.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:87:60:ba:1a:02:73:51:52:6b:52:bf:1e:92:9f:e2:32:c8:
c9:55:73:6a:7c:9e:fa:1a:92:0f:4d:de:d3:dd:9b:4b:a4:ec:
b9:ab:95:95:20:98:67:ff:4f:4a:3b:b4:8c:34:7a:0a:e3:a3:
42:55:73:51:d2:15:7b:48:b2:53:e4:5d:8a:21:02:07:dd:cc:
34:8c:d7:fe:a0:98:4e:08:ee:f8:31:7a:06:d3:05:4a:b6:9c:
5e:76:ff:4b:84:73:97:5e:8f:00:58:3c:7f:0c:98:0f:74:3d:
e8:ad:5b:08:a8:02:11:a7:60:01:62:35:f6:f1:e5:29:0c:45:
b4:6c:18:b6:9c:22:61:4f:8e:81:74:fc:f0:65:f7:c4:e5:92:
c9:9d:23:62:62:9e:2a:66:11:f2:95:4e:a8:e0:6d:1b:02:d1:
20:24:fa:77:a8:4d:b5:d5:66:05:13:ce:d0:4b:73:d6:6d:c5:
cb:36:6a:5d:f4:0a:92:29:17:c0:55:8f:07:03:89:3d:a7:d8:
a7:01:0c:32:a0:25:f2:21:f5:c2:7c:e8:91:f0:3b:e7:e2:a0:
29:e5:2a:db:34:dc:85:b9:a6:06:af:53:85:d0:2a:47:0c:cb:
a9:88:ed:dc:4d:99:e4:05:0a:e1:78:53:f6:df:0b:ed:ef:46:
cb:f5:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:53 2024 by rpki-client on console-ams.rpki-client.org