Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/PWGsKda-qI5hP_-hZ_BgIXljelI.roa
File: PWGsKda-qI5hP_-hZ_BgIXljelI.roa (raw, json)
Hash identifier: 9D0z3/GSmrsviFB97ah4w/03DQygzLN5mLbEFwGmBio=
Subject key identifier: 3D:61:AC:29:D6:BE:A8:8E:61:3F:FF:A1:67:F0:60:21:79:63:7A:52
Certificate issuer: /CN=814abafbb08ff47201d9b1ed633393b6bd92581e
Certificate serial: 018571BA1ABA3D6FEAEEA08EE688B4812AF7
Authority key identifier: 81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/PWGsKda-qI5hP_-hZ_BgIXljelI.roa
Signing time: Mon 02 Jan 2023 09:04:59 +0000
ROA not before: Mon 02 Jan 2023 09:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 80.68.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:1a:ba:3d:6f:ea:ee:a0:8e:e6:88:b4:81:2a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814abafbb08ff47201d9b1ed633393b6bd92581e
Validity
Not Before: Jan 2 09:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d61ac29d6bea88e613fffa167f0602179637a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:f1:8a:13:8d:51:cb:f2:e9:cd:a4:34:18:
47:67:0f:8f:d6:7e:53:d3:03:64:26:07:de:31:18:
cc:e8:46:15:00:3b:e5:e4:6c:fa:f7:18:95:5a:0c:
78:d3:ef:54:2f:0d:6d:31:4f:47:9f:c7:14:cd:63:
51:3d:0b:31:40:fd:e5:9c:21:13:9e:7f:94:56:f6:
ce:ab:f9:b4:6a:81:81:d9:67:0a:49:be:bc:a8:1b:
28:c7:63:fd:db:07:d5:ea:a1:ed:24:b4:64:f8:55:
b8:a6:ee:26:0d:81:71:da:d9:28:6b:9f:62:a4:27:
86:af:9b:2b:c0:c8:e7:99:48:d7:15:33:f1:cf:05:
3c:7e:fb:e9:c0:9b:1e:9e:c4:5b:fa:d6:62:c3:3f:
6c:cc:b6:b6:36:61:a6:e7:f0:d2:81:39:c1:9b:fe:
f6:9e:d6:68:45:ac:60:6d:cb:f6:2c:8d:7c:1b:94:
24:d3:85:f4:4c:0a:b2:8d:1b:c1:56:95:6c:3c:f0:
58:ed:47:3c:fc:87:ca:b7:06:cb:8f:71:e7:a5:0e:
47:f6:26:f4:af:bc:18:f3:fd:3b:57:a2:7e:89:b3:
b5:ea:ae:30:bd:cc:29:a3:30:ce:85:db:1c:29:42:
9a:ad:f0:70:b5:76:5d:8b:e6:d8:b0:1f:34:58:18:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:AC:29:D6:BE:A8:8E:61:3F:FF:A1:67:F0:60:21:79:63:7A:52
X509v3 Authority Key Identifier:
keyid:81:4A:BA:FB:B0:8F:F4:72:01:D9:B1:ED:63:33:93:B6:BD:92:58:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUq6-7CP9HIB2bHtYzOTtr2SWB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/PWGsKda-qI5hP_-hZ_BgIXljelI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a23fec-0474-4345-8073-85f8152916dc/1/gUq6-7CP9HIB2bHtYzOTtr2SWB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.159.0/24
Signature Algorithm: sha256WithRSAEncryption
43:14:4a:f5:ff:3e:53:50:35:20:29:92:12:55:f4:d1:b6:39:
16:db:81:9d:88:7c:75:af:19:47:73:7e:ec:13:64:24:9b:eb:
f1:d4:10:20:6b:3a:56:fb:0c:c8:c3:e0:96:3d:45:e8:22:af:
ab:88:92:44:46:45:2f:31:43:54:28:c9:82:3f:3a:81:14:b7:
9e:11:80:06:cc:78:88:4b:ed:c6:50:86:e7:9b:f4:b9:53:df:
a8:d7:ee:b1:e7:a8:00:26:c2:95:d2:ec:c8:47:b0:9c:fa:d4:
b4:0e:6a:26:7e:cd:6f:e4:ec:1b:64:5a:60:03:f0:ca:d5:a6:
21:f7:8e:1b:f0:b6:1e:67:4e:4f:44:51:ad:f3:9a:b2:c3:af:
6a:50:79:35:bf:13:2e:d3:75:db:34:a7:d3:69:98:24:22:79:
f4:d2:a4:c3:49:2d:70:18:5b:28:4b:3a:25:10:2b:02:5b:19:
9a:58:31:14:51:ab:e9:0c:81:0e:31:dd:c2:8c:c1:c1:5c:f9:
d3:3b:1f:2d:62:3f:c0:37:61:fa:f7:d9:3b:e6:71:d7:bd:c8:
63:c3:13:ea:8f:8a:75:4e:bb:86:78:44:2e:57:d8:22:d4:d6:
3e:96:47:b6:e7:b0:6a:41:b6:12:ea:eb:88:8c:a1:3a:5e:2d:
4b:e4:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org