Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/RNpOEM4iFikq29Xo9nK1878Ss8A.roa
File: RNpOEM4iFikq29Xo9nK1878Ss8A.roa (raw, json)
Hash identifier: H8HO2YaFJigJb4MoZig2kDlm6xiHbUfimm4OQWpsjQo=
Subject key identifier: 44:DA:4E:10:CE:22:16:29:2A:DB:D5:E8:F6:72:B5:F3:BF:12:B3:C0
Certificate issuer: /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial: 0189788E1D54EE5B27566E52104BCD7E9186
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/RNpOEM4iFikq29Xo9nK1878Ss8A.roa
Signing time: Fri 21 Jul 2023 13:05:26 +0000
ROA not before: Fri 21 Jul 2023 13:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25151
IP address blocks: 80.85.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 09 Aug 2023 12:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:8e:1d:54:ee:5b:27:56:6e:52:10:4b:cd:7e:91:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Validity
Not Before: Jul 21 13:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44da4e10ce2216292adbd5e8f672b5f3bf12b3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:45:13:0d:b3:4f:7c:9a:d1:94:63:25:64:
ba:09:c1:68:e5:63:e1:c4:b9:e3:f5:22:ad:36:41:
0b:26:42:93:93:1d:cf:e0:8f:ce:76:51:2b:7b:48:
d7:3e:16:32:0a:69:52:91:de:16:41:b7:56:8c:42:
76:7f:1c:bc:a0:52:53:0b:b8:ff:44:6b:03:ab:91:
ae:32:76:b9:f9:f2:2e:e1:69:d1:85:d2:e5:f9:d2:
4e:d9:86:73:8e:9d:0c:38:b5:bc:20:af:16:89:25:
b9:54:03:8c:74:59:77:b4:bb:e7:7f:c7:80:52:32:
0a:2d:e6:fb:12:1a:ff:a2:6c:aa:64:a4:a2:63:39:
c3:24:50:45:99:e3:11:b7:3b:58:91:9e:38:ac:3c:
ff:f9:39:c6:54:55:9d:6a:fa:c4:4d:3c:03:6b:f9:
c2:79:76:af:0e:fe:f8:91:70:78:a0:68:e6:da:e7:
a4:8a:dd:80:37:e9:82:ee:66:09:68:6d:53:67:36:
4f:83:40:2e:dc:51:37:0e:0a:d7:d0:b1:59:bd:b2:
35:b7:63:4c:24:ff:49:ef:a1:6b:a2:33:a7:df:53:
75:1f:10:ad:03:42:9f:bd:d7:fe:98:a5:24:43:0d:
23:31:83:0a:ba:c7:70:db:42:82:b5:29:d5:cc:4c:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:4E:10:CE:22:16:29:2A:DB:D5:E8:F6:72:B5:F3:BF:12:B3:C0
X509v3 Authority Key Identifier:
keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/RNpOEM4iFikq29Xo9nK1878Ss8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:79:08:29:87:42:91:5e:9f:38:d0:48:4f:6d:97:b9:ad:4b:
69:da:3f:d9:0e:b3:0e:b0:a7:50:0c:84:0a:fe:5c:a1:3d:d3:
d7:1c:28:2d:3b:22:ce:06:24:30:3b:e0:02:6c:e7:42:41:7e:
f9:62:57:e6:94:7f:f4:41:c3:09:34:bf:2e:99:a2:99:15:d3:
9e:5b:b4:ba:76:f3:ea:bd:cb:65:9d:11:f2:8a:1a:ba:d0:15:
f0:97:70:74:f1:61:50:6f:4d:b6:b6:d0:d8:db:45:63:48:8c:
b1:de:51:aa:f7:ed:71:03:03:79:e1:5a:39:69:35:2b:2a:56:
fc:3b:15:86:b2:96:db:c1:a0:2b:ca:3b:ec:f4:02:36:17:89:
65:9c:ab:4b:2a:45:70:83:1c:43:fd:e2:d4:3e:af:02:87:48:
68:3f:e2:f9:92:7e:8f:00:f6:f4:8f:a3:b0:bc:f8:fa:33:2d:
b8:e6:26:8d:eb:47:e6:97:f5:e8:da:81:b1:bb:05:c8:79:04:
f6:27:51:6f:e3:b1:01:f0:38:80:4e:e3:8c:ec:29:f1:b3:c7:
68:89:2b:d3:4b:bc:f2:b9:59:2d:0e:bc:b0:ac:f8:fd:e3:b3:
e5:c3:3e:f3:34:f7:92:08:27:ab:d0:06:f4:b4:1c:cb:b0:75:
73:43:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org