Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/taJSIS007UsxoGeqdyEopEoef2o.roa
File: taJSIS007UsxoGeqdyEopEoef2o.roa (raw, json)
Hash identifier: bnYPeIpA7US16lZ+0Co6WhZVBMaQ+3Ud7If6xVYch0M=
Subject key identifier: B5:A2:52:21:2D:34:ED:4B:31:A0:67:AA:77:21:28:A4:4A:1E:7F:6A
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 018571B9F40966696D4D98B4C2344B5DCB5B
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/taJSIS007UsxoGeqdyEopEoef2o.roa
Signing time: Mon 02 Jan 2023 09:04:50 +0000
ROA not before: Mon 02 Jan 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34026
IP address blocks: 80.93.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f4:09:66:69:6d:4d:98:b4:c2:34:4b:5d:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 2 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a252212d34ed4b31a067aa772128a44a1e7f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:22:f0:cf:76:d5:34:15:0b:fb:fd:61:78:
12:98:0a:82:02:13:a5:b3:a7:11:a2:4d:aa:16:95:
6c:57:9a:da:64:a4:ac:48:1c:24:7a:71:c5:e5:ba:
4f:fa:21:a8:12:a3:c3:da:d2:e5:6c:51:f3:b2:09:
63:d0:cd:d6:f0:28:ab:61:8e:f2:6a:2d:40:0c:f5:
82:6e:40:03:fc:30:70:f0:70:56:0c:41:55:d9:3e:
2a:85:9a:37:a4:15:4a:54:30:00:f1:35:2b:9e:20:
45:d2:4b:dd:71:41:51:22:4b:71:8c:49:8f:70:0b:
59:db:70:e7:da:e5:d9:57:b8:8d:62:4b:9b:81:6c:
3b:2d:a6:60:45:5b:a5:0f:e9:52:70:fd:78:d0:d0:
4e:72:76:c6:6e:51:52:e6:41:8d:a6:05:7b:6c:6a:
ee:6f:a2:c0:e4:75:f1:ea:1e:48:57:06:0c:f7:91:
ed:87:fc:96:38:27:59:94:ac:df:e0:e3:b8:69:04:
3e:35:3e:a3:ac:b7:4f:af:36:a9:a9:e6:fd:95:8f:
bb:60:a6:42:db:07:ea:29:c0:75:f0:e8:60:3b:99:
e0:df:b9:3b:d1:ce:a6:00:cc:5b:c6:62:a2:1e:f2:
4f:88:b6:bd:60:78:9a:04:d7:95:5a:56:a0:4e:cb:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:52:21:2D:34:ED:4B:31:A0:67:AA:77:21:28:A4:4A:1E:7F:6A
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/taJSIS007UsxoGeqdyEopEoef2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.170.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ae:93:6a:90:69:bc:2c:a2:d1:a9:e7:93:44:fc:d7:13:af:
c5:2b:20:94:d4:22:90:2e:3a:ab:17:10:4f:d5:12:3d:35:7f:
15:3a:92:2b:ab:85:be:6b:a2:89:d7:9d:96:0e:3b:19:27:06:
8e:50:a8:10:8f:aa:db:cb:4d:d1:27:e6:d0:2f:ac:fc:08:40:
d7:44:4d:0a:ed:8c:68:04:d3:d9:12:72:b6:ca:12:38:2a:ed:
1f:1e:ae:b5:fa:36:cb:64:53:d4:88:ad:10:a8:f8:37:c0:fc:
4b:5a:8d:90:3f:21:a6:22:fd:5f:8b:f2:3d:d4:b7:f1:48:d7:
0b:51:8b:7c:b8:9c:e3:62:03:9c:00:b2:a4:0d:90:1e:4c:eb:
e9:0f:92:a2:1f:1d:fb:93:53:5c:6f:36:2c:79:65:a6:eb:70:
6f:6c:58:af:52:98:6d:07:1d:60:cf:4e:d0:98:cb:de:3a:3b:
90:45:10:ef:ca:6e:d4:4e:31:2d:91:fa:e6:4e:42:a6:30:ef:
75:e1:80:13:86:8a:ec:41:fa:61:45:b2:53:be:7e:b7:1a:b7:
f2:69:be:68:f0:4b:ba:db:73:4f:93:b4:07:22:d9:cc:a0:18:
fc:e3:b3:d1:aa:3e:80:17:74:f6:e5:16:31:1a:5e:c1:03:c3:
bb:ef:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:44 2024 by rpki-client on console-ams.rpki-client.org