Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8OVISl6C2DWCfeUU2ThLIU0HmHQ.roa
File: 8OVISl6C2DWCfeUU2ThLIU0HmHQ.roa (raw, json)
Hash identifier: taT0jCJGZlVBxNhtvBS9W2ZTXCWt45Wfn1JlA8ajEBQ=
Subject key identifier: F0:E5:48:4A:5E:82:D8:35:82:7D:E5:14:D9:38:4B:21:4D:07:98:74
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018A88EC1EDFF4895025FFB738780B70DC32
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8OVISl6C2DWCfeUU2ThLIU0HmHQ.roa
Signing time: Tue 12 Sep 2023 10:24:50 +0000
ROA not before: Tue 12 Sep 2023 10:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31479
IP address blocks: 80.66.112.0/20 maxlen: 20
185.28.48.0/23 maxlen: 23
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:ec:1e:df:f4:89:50:25:ff:b7:38:78:0b:70:dc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 12 10:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0e5484a5e82d835827de514d9384b214d079874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:0c:de:0c:9b:1f:57:da:fe:46:1f:f8:ee:
46:c1:b5:03:8f:40:47:1f:66:ae:24:e1:64:65:16:
a9:63:18:ea:ea:97:d8:fd:e8:b9:21:55:16:b1:bd:
81:97:a8:57:63:0d:b1:24:ae:9e:ae:75:d0:3c:6b:
59:42:2f:b6:c5:d8:52:ab:4f:9e:0f:54:81:d3:cf:
6b:75:ed:ec:0b:bb:b7:55:57:a7:08:1a:73:41:83:
69:93:7f:1e:45:eb:56:e1:f3:2f:43:54:97:b4:cd:
3c:8f:dc:ff:77:5d:e9:e1:6f:32:ad:3a:55:1d:8e:
f5:a5:4f:f0:f9:37:b0:5b:64:59:c4:be:80:f6:e3:
8f:64:20:46:05:db:85:ae:29:cc:b5:89:75:f3:12:
ec:95:60:a0:fa:80:8b:93:4e:89:05:e6:7b:ef:90:
7c:ff:41:39:d2:4a:98:6b:e5:b7:f8:a3:3f:09:aa:
80:7f:92:a2:af:20:7e:b6:76:7e:99:02:60:16:5e:
98:19:fc:e1:2e:e7:8f:c0:3a:da:fe:21:af:98:cc:
79:a4:fd:5c:71:c6:b4:2d:14:1a:da:18:cb:01:57:
6d:c3:72:7e:34:ed:c5:69:00:d0:b4:fa:f0:b9:94:
d2:63:37:39:fb:d3:ad:54:e1:a5:df:99:88:24:06:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:48:4A:5E:82:D8:35:82:7D:E5:14:D9:38:4B:21:4D:07:98:74
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8OVISl6C2DWCfeUU2ThLIU0HmHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0/20
185.28.48.0/23
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
72:23:1e:28:a6:f6:fb:dd:7e:17:16:f7:1f:5f:bb:ba:b4:6f:
8d:26:cc:26:e2:2f:ad:4d:8b:e8:36:7e:04:78:98:6d:59:8f:
a4:ff:60:01:a5:aa:db:d2:4c:3f:24:23:e0:93:55:9e:30:ed:
21:77:eb:01:b7:5d:86:d5:73:c5:34:7c:39:8e:ec:c0:94:55:
68:b5:00:3e:6d:13:f9:59:5f:1b:15:ea:ff:3c:3f:a5:37:82:
95:24:6e:ce:0e:0c:0c:37:cc:14:a8:00:ed:56:2a:53:92:a8:
0c:10:c2:d3:37:0e:6e:77:91:7e:e6:5d:76:21:2b:46:76:52:
be:15:66:49:aa:24:fa:ab:a8:61:b2:9e:e3:b8:21:28:28:2c:
ce:41:96:cc:6f:46:28:72:c5:a9:cc:13:26:96:db:61:be:97:
fa:50:fe:d9:3f:bb:88:2e:d1:f4:70:4a:7e:44:ae:4b:2c:ff:
d1:80:d4:c8:9e:8e:98:68:6f:90:28:b5:ce:3d:ae:e1:23:54:
57:1e:02:b7:7a:c0:5e:a0:4c:47:3f:82:53:d8:56:b8:a6:95:
b5:52:10:8e:ad:d4:d3:00:6e:08:9b:11:58:c2:6c:62:b7:f7:
e3:64:31:34:24:91:28:06:19:67:af:27:c4:33:a5:00:7b:23:
96:36:aa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org