Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/8mXnLqtODQcL7IvF9sxE8zsbzzI.roa
File: 8mXnLqtODQcL7IvF9sxE8zsbzzI.roa (raw, json)
Hash identifier: s+dXGwwcCHDp+FxG8J1cNgEuLWRn0Sf6DgQpVUuRHNk=
Subject key identifier: F2:65:E7:2E:AB:4E:0D:07:0B:EC:8B:C5:F6:CC:44:F3:3B:1B:CF:32
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 0185728C82F34A60F70B14EFB74F03F2761A
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/8mXnLqtODQcL7IvF9sxE8zsbzzI.roa
Signing time: Mon 02 Jan 2023 12:54:49 +0000
ROA not before: Mon 02 Jan 2023 12:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51083
IP address blocks: 80.67.185.0/24 maxlen: 24
80.67.183.0/24 maxlen: 24
80.67.180.0/24 maxlen: 24
80.67.189.0/24 maxlen: 24
2001:912:2000::/36 maxlen: 36
2001:912:3000::/36 maxlen: 36
2001:912::/36 maxlen: 36
2001:912:1000::/36 maxlen: 36
2001:912:4000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:82:f3:4a:60:f7:0b:14:ef:b7:4f:03:f2:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 12:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f265e72eab4e0d070bec8bc5f6cc44f33b1bcf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:ac:a5:1b:6f:9f:7d:bd:aa:12:5e:04:ce:
73:9d:e6:32:0d:11:40:ba:0b:fc:ea:09:41:8a:79:
b9:42:c6:64:94:c3:6e:56:fb:1e:3c:29:a5:88:e3:
4e:e7:cb:55:77:f8:15:cc:c5:9c:94:30:6f:44:54:
ba:0d:c2:c9:ba:ca:65:19:10:0e:63:1d:f0:42:20:
88:3a:62:c4:e0:33:fe:61:dc:9f:d7:3a:f8:01:52:
c8:65:78:18:6f:33:39:6e:26:7d:a3:c7:e7:ff:e5:
44:f7:e8:31:de:92:60:fd:72:62:19:48:bd:00:7c:
e1:52:45:b7:3e:3b:b9:bf:2d:1f:52:46:6a:ad:ac:
26:01:e0:be:4f:69:5a:68:cb:3e:1c:f0:4b:e7:cb:
e5:c2:fb:95:c2:e4:34:25:c4:d7:b3:88:45:05:52:
b3:e6:f1:6e:e8:27:45:be:c6:bc:60:d1:f3:82:65:
59:62:df:b9:b7:a0:9c:2e:cf:f1:1d:1e:57:81:30:
4a:20:6b:25:47:41:52:b0:0e:3c:74:05:8b:82:21:
19:1f:16:fc:a6:fa:9e:03:14:d6:9f:53:76:f5:60:
0c:ed:1d:c0:bc:e1:df:6f:f7:ec:3b:6a:40:b2:7e:
06:bd:bb:0c:46:69:82:67:09:7a:d9:23:b8:e6:18:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:E7:2E:AB:4E:0D:07:0B:EC:8B:C5:F6:CC:44:F3:3B:1B:CF:32
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/8mXnLqtODQcL7IvF9sxE8zsbzzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.180.0/24
80.67.183.0/24
80.67.185.0/24
80.67.189.0/24
IPv6:
2001:912::-2001:912:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c6:22:0f:37:a0:eb:6d:ad:c3:07:e4:65:6b:79:cd:03:04:a3:
71:26:55:7d:fe:fb:e8:18:17:16:5f:ed:eb:7a:cb:61:b6:b1:
a7:fc:6b:bc:19:82:e0:b8:02:ac:d2:cc:90:b6:39:15:53:91:
70:d6:a2:e7:9d:f9:a2:c3:11:b8:cb:b6:5a:bd:91:f2:4a:de:
e1:ad:14:27:97:6a:2a:b4:65:1c:3e:1e:6e:bf:0b:d6:81:aa:
95:09:a2:cf:a0:db:40:bb:22:ae:e8:5e:c0:9d:51:af:c1:47:
f2:b4:9c:a9:68:2b:89:f6:8f:8b:6a:f3:d4:6b:f2:36:79:30:
ae:46:56:bc:90:21:52:38:92:8c:a6:e0:ce:db:1b:8a:99:69:
0c:e9:f6:db:9f:06:14:c0:06:b5:d8:90:a9:49:8e:cb:5b:c4:
e1:b1:3b:1b:cb:fb:b4:62:1d:8d:7f:ef:02:e6:a6:f5:85:6c:
42:94:54:a4:2f:f2:a1:c7:a8:50:58:41:a7:e9:e6:b9:a6:d4:
b0:e4:97:6b:29:c0:84:20:85:13:cf:5f:b3:7b:b5:26:3b:2a:
b4:ed:bc:3a:90:2b:34:63:fb:26:c3:26:19:48:5e:be:7c:b1:
b7:ad:62:96:5d:2a:24:53:2d:03:4a:d4:86:48:06:b1:8d:aa:
96:5b:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:28 2024 by rpki-client on console-ams.rpki-client.org