Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jPoGao0Fpl7CyM81-YcEEcOfOS4.roa
File: jPoGao0Fpl7CyM81-YcEEcOfOS4.roa (raw, json)
Hash identifier: yWBOT6jDCO8G+5Wx5p8UYE8XBFRG9NiW1ieZt7q0DUo=
Subject key identifier: 8C:FA:06:6A:8D:05:A6:5E:C2:C8:CF:35:F9:87:04:11:C3:9F:39:2E
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01856F94C7C5A73EC7FF37CB6C40C933B92F
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jPoGao0Fpl7CyM81-YcEEcOfOS4.roa
Signing time: Sun 01 Jan 2023 23:04:59 +0000
ROA not before: Sun 01 Jan 2023 23:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61239
IP address blocks: 80.253.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c7:c5:a7:3e:c7:ff:37:cb:6c:40:c9:33:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 23:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cfa066a8d05a65ec2c8cf35f9870411c39f392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:47:1b:1f:48:9f:2a:ef:21:5e:5b:5c:ad:
87:06:a5:7e:46:e4:8f:85:5b:6c:b5:ac:ca:ba:c0:
7a:9d:9b:a2:42:8b:50:a5:9a:2c:fb:7e:f2:4d:11:
15:fe:67:66:b4:10:1b:ed:9c:65:24:7a:84:21:65:
33:88:fa:7c:77:0c:ef:e5:a7:e2:86:eb:1d:c9:cb:
e4:31:72:95:74:7b:76:4b:48:06:1e:55:25:25:1d:
fc:ed:c0:ad:38:90:3c:a1:68:4b:51:b7:1b:6f:23:
52:8e:3c:32:8a:9d:82:29:12:8a:12:bd:62:65:8b:
9a:57:5b:9d:ed:ce:c9:87:68:c7:df:30:34:0c:20:
b8:fe:d0:8f:87:9d:5c:41:14:c7:8b:47:dc:80:22:
a1:5b:66:a9:41:c5:46:7c:9f:03:5e:1d:15:1b:6d:
7e:e2:a2:97:63:36:40:f3:67:45:29:0e:71:1d:13:
f1:54:39:a5:9f:7c:eb:cd:46:48:90:05:85:a3:66:
40:60:e9:e6:7f:cc:4b:d6:e8:aa:9d:4a:f5:3e:e8:
a5:75:96:cb:1a:84:0f:ba:87:84:3f:11:d6:36:c1:
46:8e:b6:b1:77:a7:d0:77:29:c1:1a:86:a3:76:f5:
88:81:70:33:9d:4c:86:d1:aa:f0:bf:9d:24:27:f1:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:06:6A:8D:05:A6:5E:C2:C8:CF:35:F9:87:04:11:C3:9F:39:2E
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/jPoGao0Fpl7CyM81-YcEEcOfOS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.159.0/24
Signature Algorithm: sha256WithRSAEncryption
60:08:22:62:43:09:92:6c:37:7d:00:4e:04:f6:28:86:2a:64:
61:44:d9:97:7c:28:33:12:6c:93:3f:3c:15:24:18:79:8b:b4:
89:ae:f3:25:99:c0:99:97:3b:e5:bd:0d:25:44:e6:bd:74:c4:
b9:0b:85:ae:eb:6f:f2:e4:3a:c0:ee:f6:a2:53:2b:c6:64:20:
63:03:27:1a:00:63:82:a6:d5:e5:98:9a:59:99:b2:a6:9c:f8:
a4:f6:8c:80:e1:ce:a0:0a:6d:51:1d:a7:a0:43:5c:97:18:ad:
79:aa:26:94:bc:e5:65:7b:d2:cb:b7:82:8c:34:63:8e:c9:c9:
e4:ea:62:a7:e3:5a:d8:da:2e:0c:76:ba:af:91:45:8a:f3:e1:
c9:b0:62:c6:77:71:8d:b0:83:fd:9b:45:56:bd:03:7a:a6:55:
2f:42:40:ce:86:c0:6f:a4:26:56:4e:e7:a1:be:fa:2c:1d:3e:
2c:76:7d:ae:8e:d0:75:ed:db:64:13:a4:bf:11:ec:9b:2d:6b:
e1:db:85:e9:11:af:46:99:7d:ad:c6:88:e8:93:c2:3f:f7:ef:
6f:27:a1:68:77:d9:6a:fa:5f:f9:47:29:ca:7c:69:bd:f5:f8:
93:34:9c:bc:73:a7:58:fe:fd:74:d5:42:7e:e5:a7:5a:f0:57:
08:01:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org