Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/PVBg75S66uzyGDft5GtvN1Mw0Yw.roa
File: PVBg75S66uzyGDft5GtvN1Mw0Yw.roa (raw, json)
Hash identifier: Zwsp+R0schY8rf8q4Qzzu50PaXB6Vs4c51UNHPfCwws=
Subject key identifier: 3D:50:60:EF:94:BA:EA:EC:F2:18:37:ED:E4:6B:6F:37:53:30:D1:8C
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 01856F94BFEBB996D9A705DEB017AE41A7AC
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/PVBg75S66uzyGDft5GtvN1Mw0Yw.roa
Signing time: Sun 01 Jan 2023 23:04:57 +0000
ROA not before: Sun 01 Jan 2023 23:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34086
IP address blocks: 80.158.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:bf:eb:b9:96:d9:a7:05:de:b0:17:ae:41:a7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 23:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d5060ef94baeaecf21837ede46b6f375330d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:d3:c8:30:bc:7b:b6:75:ec:af:57:17:c7:
47:19:ed:d3:3b:d0:cd:ea:91:ae:74:49:01:17:37:
c1:2c:5b:a3:71:2b:56:bc:4c:d1:00:bd:f7:39:62:
c1:65:49:55:82:a2:d6:83:5d:95:c6:12:63:78:4e:
70:dc:1c:99:07:79:bc:bd:e1:91:9d:84:c9:c8:00:
01:be:f7:ee:43:a8:94:c4:86:e5:0d:7e:5d:2f:7e:
8e:52:90:2b:ec:3e:3e:04:aa:1a:20:41:6f:3f:21:
73:f9:3a:35:4e:8c:4c:e2:0b:fe:67:1d:8b:50:9d:
9e:b6:64:ab:94:17:2d:db:a0:67:bd:1c:cd:6e:ac:
ae:b6:09:1f:a4:f9:07:91:b7:f9:b3:90:ec:51:88:
12:b4:49:e6:cc:cd:62:0c:72:07:84:1a:d9:15:88:
fc:dd:7b:1c:c1:66:d0:8e:ef:f8:37:59:c7:17:25:
0f:41:7a:aa:27:fc:d5:c3:f3:11:4d:0a:5c:4c:5d:
6b:1a:ac:7d:05:6c:bb:e1:39:ec:65:f0:eb:a3:05:
9f:7a:50:b1:9b:16:f2:5d:b6:0d:e7:ee:d3:db:c5:
d7:62:31:f3:a8:d9:6a:cb:ac:75:7e:73:1c:dd:1f:
6d:14:e8:20:4d:21:5f:8e:af:43:76:91:2b:55:97:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:60:EF:94:BA:EA:EC:F2:18:37:ED:E4:6B:6F:37:53:30:D1:8C
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/PVBg75S66uzyGDft5GtvN1Mw0Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.158.0.0/17
Signature Algorithm: sha256WithRSAEncryption
01:d2:b8:9e:e9:a2:3a:28:02:1d:11:35:ee:47:b9:e1:0b:93:
ea:e6:e5:fd:60:9d:c2:4d:31:cf:09:44:bb:90:00:88:7e:a4:
1c:44:c7:76:ac:c2:f8:d8:6d:17:a3:11:da:44:1c:55:16:4f:
93:ef:60:a9:55:de:79:25:87:3e:f7:3e:9d:2d:89:1a:31:e1:
8a:a4:d1:4b:fb:d0:26:fe:97:c9:0c:96:8b:c0:d9:90:f9:5a:
ea:e6:47:f6:28:53:b2:29:97:67:5c:82:b0:f2:a2:e8:da:16:
b7:dc:00:ab:67:76:c0:7f:ea:00:ae:a2:32:ca:e3:2e:53:12:
e0:08:46:2d:89:e3:e0:ad:58:92:3f:62:a2:fc:9d:1c:c7:e8:
c1:4e:de:83:34:87:d0:25:e7:06:87:de:77:fc:7c:10:73:af:
87:61:c1:24:3a:8d:58:2e:42:1a:14:ff:c2:d5:af:31:f6:80:
39:f1:74:3a:0b:da:a2:55:5d:8d:5a:20:c7:a0:3f:08:0a:f4:
b9:11:fc:40:98:32:c5:eb:d6:a4:fb:69:e6:90:f0:f6:86:11:
b8:5d:56:10:71:6a:a8:03:07:61:b6:83:4b:a0:48:3c:06:f8:
ae:2b:d6:81:11:6d:cd:fa:af:67:ed:69:47:42:f3:54:e0:18:
9c:a6:05:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:12 2024 by rpki-client on console-fra.rpki-client.org