Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/05hbchAT7dmSqt_YhgLZOxTXdJg.roa
File: 05hbchAT7dmSqt_YhgLZOxTXdJg.roa (raw, json)
Hash identifier: 7BGgaUuvx12KcnUzNX2/YYkd3x1g4xuBG+nmEB3ZMtg=
Subject key identifier: D3:98:5B:72:10:13:ED:D9:92:AA:DF:D8:86:02:D9:3B:14:D7:74:98
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C765440DD0A363A2628FAFAC20551
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/05hbchAT7dmSqt_YhgLZOxTXdJg.roa
Signing time: Mon 02 Jan 2023 12:54:46 +0000
ROA not before: Mon 02 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51353
IP address blocks: 80.82.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:76:54:40:dd:0a:36:3a:26:28:fa:fa:c2:05:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3985b721013edd992aadfd88602d93b14d77498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:6c:14:c8:79:6f:e1:67:fd:03:5b:55:c5:
6f:f9:9d:50:5e:ed:90:03:2e:1d:14:c7:37:9c:60:
af:d9:81:43:7b:23:f8:7c:f5:3d:28:61:0b:36:b2:
0a:9c:78:17:27:3c:0d:4b:6c:36:8d:7e:be:21:c8:
b6:43:6e:ae:f2:26:83:98:53:77:33:5f:50:e2:0a:
96:80:34:3e:7d:5f:ba:13:ee:eb:46:61:1e:98:7f:
2f:8f:9d:73:50:97:93:74:b4:ee:71:c9:d4:0f:ba:
0e:65:6f:1c:ea:68:45:f4:49:63:54:53:eb:63:27:
16:f1:f3:d2:95:d0:ec:a9:cf:45:86:7d:25:00:71:
e6:86:b9:85:3a:2a:b6:d8:8c:3c:51:4e:96:04:f8:
6b:48:ac:89:3b:9b:4c:89:c3:87:97:57:08:c6:84:
d3:02:94:34:1c:00:82:79:9f:11:d3:4d:e1:18:56:
15:8f:e7:f2:36:a2:ac:62:f9:66:0d:46:ea:2d:21:
d5:41:7a:93:fc:3b:84:ae:88:f8:a4:60:e7:89:9b:
9a:95:0e:a7:c6:a3:eb:ab:3a:d4:25:4b:21:42:a7:
24:5e:8e:99:7e:22:b0:ca:d5:3b:c6:2c:7b:16:1a:
ae:37:f8:01:37:62:6a:fd:9d:91:b9:30:f2:a1:28:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:98:5B:72:10:13:ED:D9:92:AA:DF:D8:86:02:D9:3B:14:D7:74:98
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/05hbchAT7dmSqt_YhgLZOxTXdJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.24.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c8:52:36:53:c0:9d:8a:a1:f8:95:04:f2:80:88:0b:3d:26:
c9:9c:c6:3d:84:c7:48:2d:e3:42:7c:53:80:cb:13:e1:19:f2:
7b:04:29:ca:49:6d:73:fa:26:c3:29:a5:1e:e1:79:30:f7:79:
a0:06:a5:a0:b5:1d:d6:ad:63:8b:41:d2:fa:f9:40:89:5e:1f:
9b:31:20:4f:96:7c:9b:a2:db:de:17:ee:0c:6e:be:ec:82:40:
66:fe:f9:73:2f:d2:78:fc:cd:81:56:03:6e:e4:13:58:af:ab:
8a:d5:50:39:f7:0f:8f:c0:a3:ce:5e:7d:b6:36:8c:16:19:6a:
90:94:70:dc:22:12:05:1b:e9:7a:c9:6c:4d:b9:dc:5e:84:3a:
6c:07:6a:cb:d5:f3:62:6e:ed:de:32:0f:a6:5f:37:5e:04:ac:
79:b8:c3:75:cb:c3:95:eb:b7:19:13:be:e7:9a:3f:46:7b:a6:
d9:11:ff:51:14:6b:f8:46:d1:57:51:78:16:15:b8:b2:40:9f:
e5:60:21:67:8c:af:4d:2d:e2:75:94:e9:44:fa:99:14:c1:19:
84:12:2f:06:58:1c:3d:4d:69:02:f5:5a:00:3f:f1:cc:84:14:
e4:f7:c1:6a:e1:ba:0e:35:fe:ba:32:5e:ff:06:48:82:7b:26:
67:95:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:47 2024 by rpki-client on console-ams.rpki-client.org