Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/RVJ28Kjfr9UZScOakEc6Vxsd5oM.roa
File: RVJ28Kjfr9UZScOakEc6Vxsd5oM.roa (raw, json)
Hash identifier: 5Xi5YCUuXC5YQml8z5/+MRFfjWIbtGebDKyckWP3xb4=
Subject key identifier: 45:52:76:F0:A8:DF:AF:D5:19:49:C3:9A:90:47:3A:57:1B:1D:E6:83
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 0185728C869ECCB198E60A955D9555033DED
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/RVJ28Kjfr9UZScOakEc6Vxsd5oM.roa
Signing time: Mon 02 Jan 2023 12:54:50 +0000
ROA not before: Mon 02 Jan 2023 12:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204708
IP address blocks: 80.67.184.0/24 maxlen: 24
2001:913:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:86:9e:cc:b1:98:e6:0a:95:5d:95:55:03:3d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 12:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=455276f0a8dfafd51949c39a90473a571b1de683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:c9:fa:60:70:30:63:65:be:d0:f9:69:c9:
12:a4:12:b9:b2:84:9a:a4:a6:c9:eb:76:2f:01:50:
26:30:b9:af:7c:69:c3:73:03:2f:07:6c:6b:bc:30:
b5:89:80:8a:9d:89:fe:d8:55:5f:bd:2e:ad:53:e8:
3c:2f:d3:92:40:60:96:f4:ad:fc:c2:35:b4:ff:58:
9f:21:b3:6f:a8:53:68:fb:46:c4:55:8a:12:c0:a2:
be:e7:ab:e3:fb:ed:0b:a1:96:f9:3b:04:fd:f2:98:
3d:8a:d3:7b:ce:70:47:1b:78:7a:20:19:2b:18:44:
41:99:d2:0b:30:b7:61:1d:c3:76:6b:89:35:ef:fc:
0a:f4:ec:3b:b0:b7:80:8d:ae:2d:dd:5f:94:64:87:
e2:ca:59:c6:f6:75:6a:6f:1c:40:b0:c3:4e:8d:02:
9b:cf:45:6e:15:46:e0:8d:c9:7c:11:1c:50:a6:2a:
a4:df:95:61:41:e1:39:64:a7:f7:b0:63:bb:07:b9:
f0:22:39:44:cf:90:53:39:37:1c:87:60:ee:00:d1:
57:07:5e:6d:5e:d6:df:69:4c:a0:51:a5:c3:d8:9f:
58:b2:4e:1c:c1:ed:6a:b6:a5:1d:d5:c1:53:33:d0:
a2:5a:3a:ec:89:59:ff:5d:03:58:62:97:ba:e0:db:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:76:F0:A8:DF:AF:D5:19:49:C3:9A:90:47:3A:57:1B:1D:E6:83
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/RVJ28Kjfr9UZScOakEc6Vxsd5oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.184.0/24
IPv6:
2001:913:3000::/36
Signature Algorithm: sha256WithRSAEncryption
c5:f0:35:44:7d:b0:7a:4f:a3:39:3d:13:26:e8:d6:b1:db:f3:
da:a1:33:ed:ee:19:db:f9:46:93:71:97:85:f9:a4:a2:97:c5:
aa:7d:20:33:68:0f:3b:fc:33:0b:a4:f4:99:ff:37:63:f0:03:
86:b3:51:de:87:d3:d8:8d:e8:ba:fb:da:64:a1:d8:54:cb:b8:
da:f0:c5:bd:69:d2:6e:bd:7b:43:da:04:27:0b:d9:7d:6d:3a:
4b:8e:6a:02:40:77:2a:36:c5:25:e2:de:58:cc:fb:78:48:bd:
6e:2c:7a:1f:9e:7e:d7:1d:08:a4:18:77:5b:54:05:c3:e4:47:
80:00:8e:60:05:e2:35:84:09:60:48:63:e6:f7:4f:98:86:03:
f4:49:24:6a:1b:31:5e:ec:d4:62:51:2a:d4:e4:75:53:12:fb:
90:c7:11:8b:55:f0:f1:ba:71:66:18:62:eb:76:ee:ab:68:58:
37:63:dc:dd:25:94:a3:15:65:76:27:6e:1d:49:68:49:4f:e1:
2a:19:01:9a:a0:69:c1:cd:d8:71:fb:57:bf:bf:d4:02:95:6b:
fb:4f:83:8a:da:69:d0:b0:7d:67:44:f1:1e:67:8b:89:86:77:
7d:e0:fb:f4:7a:29:b0:57:bd:e6:eb:2c:22:cf:e3:d3:4f:94:
d4:ba:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:16 2024 by rpki-client on console-ams.rpki-client.org