Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5V_lwmmOftbnq5hDLdh5uW7OK9w.roa
File: 5V_lwmmOftbnq5hDLdh5uW7OK9w.roa (raw, json)
Hash identifier: X+dq7nvURO5Gm1LEBKprjdN6UEON/aj35LiHx3lfXts=
Subject key identifier: E5:5F:E5:C2:69:8E:7E:D6:E7:AB:98:43:2D:D8:79:B9:6E:CE:2B:DC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0186E61F7B5A44A9104595FE132C2445B414
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5V_lwmmOftbnq5hDLdh5uW7OK9w.roa
Signing time: Wed 15 Mar 2023 16:34:28 +0000
ROA not before: Wed 15 Mar 2023 16:34:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31479
IP address blocks: 80.66.112.0/20 maxlen: 20
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Sep 2023 10:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:1f:7b:5a:44:a9:10:45:95:fe:13:2c:24:45:b4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 15 16:34:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e55fe5c2698e7ed6e7ab98432dd879b96ece2bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:05:e8:54:66:ad:49:f8:28:c5:4a:fe:82:
2b:72:07:e1:84:cf:03:1b:99:33:f3:c9:51:e8:36:
a6:62:44:78:2a:c2:79:22:70:22:c7:9a:0d:73:04:
97:0d:e2:e7:ae:1e:c1:80:a4:3e:53:7f:8b:88:90:
e2:7a:03:88:bb:93:ee:d8:08:5d:2d:1d:c7:ef:60:
d2:00:e4:a8:ce:73:2d:a3:a3:b0:30:4d:09:dc:c8:
ec:72:53:1c:fe:ae:59:a8:ff:48:e9:d0:91:c3:6b:
9c:88:38:3a:df:66:0b:59:c4:e4:00:08:7b:9b:b7:
55:07:fd:cc:50:66:2c:5c:78:94:1f:96:47:dc:eb:
19:8e:e4:6c:7d:88:50:85:aa:20:d8:ab:87:99:30:
89:93:88:4a:c0:36:72:49:26:c7:b9:ad:fd:90:24:
5b:1b:28:08:d1:c5:ba:59:f6:b9:fb:fa:3b:70:be:
52:db:76:b1:18:98:24:a3:ad:67:bb:47:f4:a9:f3:
68:b0:66:b3:3e:b6:78:26:cc:7f:fa:55:f5:bb:3b:
0a:cc:54:42:b4:37:c1:1b:d3:00:8c:bd:01:4e:c5:
a1:f0:4a:48:ab:77:d8:66:76:5b:52:9d:ec:aa:06:
fe:f5:67:d0:81:40:27:d7:cf:b4:5e:67:f9:f0:f5:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:E5:C2:69:8E:7E:D6:E7:AB:98:43:2D:D8:79:B9:6E:CE:2B:DC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5V_lwmmOftbnq5hDLdh5uW7OK9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0/20
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
1e:7a:bc:90:08:a5:02:e8:f9:9f:d6:b6:b7:1b:c2:8b:d5:64:
c3:31:a8:34:fb:c7:48:ee:e7:03:64:e0:35:f6:f5:89:76:2f:
69:90:d3:49:aa:10:79:d5:24:fc:3d:47:af:c8:39:96:28:47:
35:a5:8b:ee:d2:fe:2f:4d:9c:73:d4:a0:8b:89:7b:09:0f:67:
ed:f1:c9:4d:a5:cb:07:6d:30:6b:10:cc:eb:b1:01:5f:89:54:
5e:a7:ac:6f:fd:36:69:19:ee:07:eb:d7:41:9c:a8:f8:f6:01:
4e:02:b1:ef:0b:7d:89:1d:e8:ff:04:49:f3:43:91:1a:70:48:
73:ed:f9:30:f3:55:21:91:21:54:4a:b9:6c:a2:62:3d:41:f5:
ac:bd:b1:fd:2b:37:f6:9f:6d:29:32:7a:4b:90:b8:23:f4:7b:
c4:1f:35:90:34:3d:0a:25:66:ea:ba:e4:18:e7:6b:c0:8a:9c:
ba:0e:02:8c:1e:df:05:c1:e3:a6:28:9b:77:e6:91:9a:a6:12:
f8:48:4d:8a:19:10:df:6a:f8:a3:07:59:8c:ed:3b:d4:ab:3e:
c2:ce:ad:0b:b4:35:ed:b5:38:34:e3:2f:17:fe:c6:58:e0:a8:
5f:96:7e:ca:49:1d:76:15:a0:0a:65:8f:c7:80:8c:57:ea:00:
3e:bf:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:56 2024 by rpki-client on console-fra.rpki-client.org