Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/O6wnqK3subURiHRlOJQdyd_subU.roa
File: O6wnqK3subURiHRlOJQdyd_subU.roa (raw, json)
Hash identifier: LdMt7rYLB1ki54X67phM/O+NHl+7l92M4nNeCi0cZuQ=
Subject key identifier: 3B:AC:27:A8:AD:EC:B9:B5:11:88:74:65:38:94:1D:C9:DF:EC:B9:B5
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01891FD74B3A0574AFD7E0F23958DF7D82BD
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/O6wnqK3subURiHRlOJQdyd_subU.roa
Signing time: Tue 04 Jul 2023 07:39:10 +0000
ROA not before: Tue 04 Jul 2023 07:39:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202279
IP address blocks: 128.0.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:d7:4b:3a:05:74:af:d7:e0:f2:39:58:df:7d:82:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jul 4 07:39:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bac27a8adecb9b51188746538941dc9dfecb9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:ea:b5:88:79:40:df:dd:c7:bb:0b:93:92:
5f:e1:14:5b:c9:7f:06:d1:14:e8:1a:c1:d0:93:b4:
e5:a8:57:27:00:f8:fa:09:e9:88:05:f3:87:75:9c:
19:a4:f4:79:8d:ba:9b:bb:c9:e4:ff:2f:e1:3c:1d:
17:cc:a0:c9:8a:3a:9f:ee:eb:3a:37:eb:1e:12:8c:
b8:7a:b0:d3:96:0e:c3:b4:dd:05:78:77:4c:ca:b5:
07:80:da:3b:1e:fc:68:1c:51:16:8d:a3:ad:ac:a7:
99:80:25:27:e3:22:ea:45:d0:aa:18:2d:ed:ef:33:
07:bf:23:5b:7d:f3:f6:a9:b3:f9:d7:22:b6:ab:54:
00:b9:ac:fc:08:ab:57:0a:6c:04:70:de:8d:b7:87:
6a:14:cb:e9:c7:e0:5f:5e:71:59:53:96:97:5d:0c:
f4:e3:46:18:1a:75:0a:c7:68:33:5c:df:24:f1:af:
1f:b8:40:3e:19:b2:9a:cf:d5:88:88:3e:7e:d5:12:
79:82:61:49:49:e7:a4:fe:42:70:b9:9a:2c:9b:d9:
fc:ba:33:c5:3e:69:4f:05:4f:50:4d:62:1d:d4:29:
a6:26:10:82:66:8f:06:b2:ff:20:e7:8c:2f:9a:12:
7a:df:06:93:b1:66:a7:79:69:e0:53:97:14:5a:76:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AC:27:A8:AD:EC:B9:B5:11:88:74:65:38:94:1D:C9:DF:EC:B9:B5
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/O6wnqK3subURiHRlOJQdyd_subU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:b0:c1:30:5a:7f:a1:4f:c4:bd:5a:39:d8:93:06:c7:04:da:
09:01:5c:05:15:9c:b5:09:7e:97:e0:03:77:ad:9d:a3:dd:b4:
36:7c:31:df:63:7b:93:17:ef:0f:e7:76:14:8b:ae:9e:a8:e5:
b5:8d:c8:88:a2:21:4d:3f:55:24:4d:2c:a7:3c:90:28:c7:2c:
b2:58:80:a9:0f:85:58:70:b1:e1:6e:04:c6:3c:c8:40:f2:62:
83:08:64:f2:e2:0f:3d:16:12:d9:ee:84:b8:03:a0:17:ad:c0:
65:f3:4b:e9:2b:95:c4:08:86:db:d2:8a:2e:22:20:e2:5a:c9:
1d:b1:ff:d2:48:a6:89:dd:5a:df:1b:69:21:b7:ba:1b:8e:80:
73:1a:2b:58:73:5f:b9:78:b6:13:bd:8f:e1:dd:04:34:dd:cf:
c1:09:c7:ba:b1:d9:30:86:6a:c9:c0:63:90:f9:bf:67:71:b1:
e2:e4:92:2e:78:2b:44:5f:f0:0b:36:f3:ed:0b:ae:08:ed:30:
4c:b5:29:cf:59:e3:0a:ac:34:5a:4e:4d:e1:fd:4f:01:20:10:
c4:53:66:51:3a:90:5f:b7:4c:d8:85:45:e4:f5:ec:b8:12:b3:
fc:c9:6f:24:71:72:39:eb:5b:86:11:ca:36:0d:67:4e:29:1c:
ac:b3:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:30 2024 by rpki-client on console-ams.rpki-client.org