Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/Ye8U9Wn49bQ3C_98P7VZmlt-knE.roa
File: Ye8U9Wn49bQ3C_98P7VZmlt-knE.roa (raw, json)
Hash identifier: b/IKlKQE3y8aKZZ3PZ5KEX+UC1213EJTY0Eqqo9n61I=
Subject key identifier: 61:EF:14:F5:69:F8:F5:B4:37:0B:FF:7C:3F:B5:59:9A:5B:7E:92:71
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 018D6588206B45019CF8B2889DBAA7C13D9D
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/Ye8U9Wn49bQ3C_98P7VZmlt-knE.roa
Signing time: Thu 01 Feb 2024 16:37:16 +0000
ROA not before: Thu 01 Feb 2024 16:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213296
IP address blocks: 80.75.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 16:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:88:20:6b:45:01:9c:f8:b2:88:9d:ba:a7:c1:3d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Feb 1 16:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61ef14f569f8f5b4370bff7c3fb5599a5b7e9271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:85:29:bb:2a:e6:d5:d4:9b:ca:e2:bd:00:
36:80:bb:d0:fe:c0:c7:e6:1e:e0:92:05:5f:e4:e1:
d2:62:60:0d:57:68:58:9f:ac:8c:fa:c4:a2:08:fb:
74:da:d2:fb:ff:f3:5c:ee:21:94:64:e2:dd:c5:f5:
13:9f:2b:41:ee:9c:35:31:3c:81:30:ec:15:c5:dd:
61:a4:3d:66:f1:8c:42:85:4b:0a:85:0e:5d:30:09:
e7:5d:be:7a:c8:3d:97:44:8c:43:6e:e5:b3:f5:e1:
19:21:0e:99:32:85:57:cf:00:de:ee:01:c3:50:31:
3b:bc:68:c6:dd:0f:07:8d:e7:c3:fb:3c:e7:88:40:
4c:3d:f3:49:b5:05:96:dc:40:e2:32:25:d6:29:02:
eb:54:85:e2:b3:f5:dc:2c:33:3a:af:8d:6d:8b:36:
e3:9a:aa:88:16:91:fa:1a:28:b8:66:2b:ef:c7:af:
0b:28:17:61:eb:7f:0b:2f:9b:9e:a4:9e:01:84:c7:
fa:33:41:6f:b5:d1:8f:2d:71:10:21:08:c4:52:f5:
a4:eb:ec:24:55:7e:2a:d8:8a:ba:20:b8:ee:e5:ba:
3e:75:67:d8:06:0e:f0:a4:e6:4d:07:fd:07:ce:8d:
fa:e7:4a:1c:10:d2:9a:00:5d:f5:2d:2e:8d:c2:ec:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:14:F5:69:F8:F5:B4:37:0B:FF:7C:3F:B5:59:9A:5B:7E:92:71
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/Ye8U9Wn49bQ3C_98P7VZmlt-knE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fd:ac:ab:ef:24:06:1f:04:16:33:79:5b:dd:f1:e5:10:72:
8d:fd:1a:36:1e:d6:30:e1:67:74:8e:03:81:b0:b1:ad:71:cb:
e1:99:20:9b:93:95:65:85:87:25:3e:aa:09:0e:04:4a:6f:16:
3b:c8:4b:cd:26:cb:1b:1d:c0:1b:8b:61:1c:72:89:8f:c4:d1:
b2:37:e0:0f:92:b5:96:93:91:72:84:c5:f5:41:09:71:16:47:
7b:5a:75:f3:d8:69:02:d3:16:78:61:28:5e:11:01:de:7a:1e:
f5:0f:38:9a:d7:f9:29:f4:e0:a5:ce:0d:ee:56:6a:57:a5:c1:
d2:6b:fa:19:ce:8c:37:2a:50:9f:50:dc:13:2f:c9:5b:b1:84:
3a:33:a6:15:dd:f9:0c:2c:df:b5:5f:c1:e6:aa:f0:1e:59:a1:
de:af:84:b5:7e:42:ce:e5:73:cf:6a:8c:86:aa:72:4f:e3:75:
45:19:b1:2b:62:99:76:f8:cb:b7:ea:0a:25:1a:96:be:ba:ae:
5d:9f:bb:d8:52:d2:71:04:6a:18:1e:50:f7:94:35:cb:0a:a8:
39:5c:58:64:89:b6:63:dc:84:f6:f7:16:ab:53:be:41:12:72:
48:fe:8f:4b:63:dc:99:74:8c:d6:cd:d2:30:85:96:d4:9f:62:
84:08:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 20:02:52 2024 by rpki-client on console-fra.rpki-client.org