Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/80ezDtoivCvPLfyQbt_B4MBazt4.roa
File: 80ezDtoivCvPLfyQbt_B4MBazt4.roa (raw, json)
Hash identifier: y1quPQeS31EwEh+O+DDaUV+dZnL0mT+pqW1nRAU1lVk=
Subject key identifier: F3:47:B3:0E:DA:22:BC:2B:CF:2D:FC:90:6E:DF:C1:E0:C0:5A:CE:DE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018934EB1B055B4FA2965A049366B66E26A6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/80ezDtoivCvPLfyQbt_B4MBazt4.roa
Signing time: Sat 08 Jul 2023 09:52:50 +0000
ROA not before: Sat 08 Jul 2023 09:52:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 2.57.241.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 09:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:eb:1b:05:5b:4f:a2:96:5a:04:93:66:b6:6e:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 8 09:52:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f347b30eda22bc2bcf2dfc906edfc1e0c05acede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:04:7b:51:80:88:d0:28:c2:75:e8:f0:c3:
18:f6:42:e0:e6:9c:6c:a0:3e:ad:54:fd:66:4b:6e:
5a:6d:37:83:96:27:0b:ff:96:c3:34:a5:cd:c1:a1:
64:35:d6:99:5f:9d:cb:3d:fa:19:fb:a8:cc:dd:8a:
ba:99:cf:28:a8:d8:cc:1a:77:c1:83:a3:41:c4:99:
ab:0c:b4:7b:5b:f3:f9:d9:8e:5b:14:e7:c8:00:bd:
49:ac:bf:4f:89:e8:8d:a8:01:e2:62:e8:b5:d3:07:
55:a6:d4:41:5e:e9:36:19:fc:49:14:78:61:f4:35:
59:ac:e8:a5:22:00:89:bc:16:4c:01:01:6a:92:51:
b0:5b:3a:ad:5d:43:50:e7:32:10:6f:f6:cf:bf:2d:
6e:ed:60:e2:d9:3a:8a:79:35:2a:dd:c5:90:ac:1b:
c8:57:2d:ad:e1:c2:b1:78:39:41:80:95:22:36:85:
b2:be:c7:af:82:1a:dc:5d:d2:ac:40:f1:09:ec:cc:
58:58:48:a8:92:ea:1a:b7:c2:49:51:f9:9a:40:8a:
3f:96:25:47:40:8e:76:ef:ea:e9:0d:c3:30:88:f1:
74:5f:7a:9e:19:c7:2d:74:d1:ea:6d:c0:ff:1c:3f:
81:ed:96:ed:6b:eb:49:cf:b9:cb:a2:80:4d:16:97:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:B3:0E:DA:22:BC:2B:CF:2D:FC:90:6E:DF:C1:E0:C0:5A:CE:DE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/80ezDtoivCvPLfyQbt_B4MBazt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
93.90.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e8:f1:ce:c3:c7:25:3e:6f:e6:f0:d6:5b:b7:47:17:f5:12:
13:e5:c0:63:1e:1c:ba:2e:b1:e7:a4:ab:00:24:ec:e0:89:3b:
d5:11:b5:67:df:6d:a6:c1:96:b8:4c:27:39:77:ff:86:68:b4:
dc:9e:71:44:d9:62:fa:85:9c:a6:a0:17:2a:49:3d:1e:c4:9b:
24:b7:45:e0:ee:de:13:fd:f6:ef:27:fa:73:d3:5f:85:90:f9:
02:62:f1:2c:99:70:a4:be:10:9a:40:af:98:4c:4c:02:d8:40:
27:88:1f:8e:8a:c3:c8:5a:18:31:83:51:c7:7f:34:fd:9e:4f:
59:c3:da:8f:48:ef:ae:ff:92:fc:ce:88:65:99:04:a0:0f:80:
09:ff:f8:54:4b:ec:14:61:4d:70:5b:7b:da:87:59:8f:2e:02:
94:f5:21:b6:a2:2b:eb:22:41:c8:68:50:2d:eb:6e:eb:ed:3e:
70:d8:fb:df:de:32:7f:30:f1:ad:a7:5b:d7:bb:72:b9:3b:0f:
27:04:d6:a8:98:19:35:d6:69:f5:bf:a2:c6:43:7a:ed:84:f4:
0a:f7:ad:ff:69:b7:02:0d:67:a0:aa:e6:c0:15:a0:56:7e:fd:
d7:b1:30:7e:16:0e:dd:67:8f:99:69:80:3a:82:98:ec:0a:cd:
08:73:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org