Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/2vPyUgdCpfJT-VIDcxrMkRANcEA.roa
File: 2vPyUgdCpfJT-VIDcxrMkRANcEA.roa (raw, json)
Hash identifier: rd2YLySNzwWI2l/GfHkApNphGmMqZpYBiXe8ZVvdJW0=
Subject key identifier: DA:F3:F2:52:07:42:A5:F2:53:F9:52:03:73:1A:CC:91:10:0D:70:40
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018B8073D2038AED52A07D0FA300BB5986C3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/2vPyUgdCpfJT-VIDcxrMkRANcEA.roa
Signing time: Mon 30 Oct 2023 11:59:15 +0000
ROA not before: Mon 30 Oct 2023 11:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 185.80.196.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:73:d2:03:8a:ed:52:a0:7d:0f:a3:00:bb:59:86:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 30 11:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daf3f2520742a5f253f95203731acc91100d7040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:f3:cf:18:0d:83:71:12:d2:1b:80:e2:21:
22:3d:c0:6c:46:ea:79:28:cc:66:c3:d0:25:38:34:
68:9b:51:80:91:14:3a:7e:6d:37:12:8e:b5:44:35:
f7:2c:c6:72:05:e0:0f:d8:66:72:1e:2f:ca:3e:39:
b9:95:80:93:55:50:aa:65:ae:55:b2:df:1a:de:17:
f9:db:39:05:3e:05:2e:bf:26:a7:1a:2a:f0:9e:d0:
7a:23:0e:65:f3:bb:0e:53:87:50:d7:1a:d3:2a:13:
21:02:d2:49:91:74:98:f2:5c:20:f8:c3:71:04:88:
fe:40:65:e5:2f:4e:1a:8b:28:6d:72:e1:44:87:75:
eb:bb:bd:8f:cf:24:55:b3:48:bf:6e:a4:ce:b4:a7:
85:d9:b3:4b:55:16:36:df:95:95:51:40:db:2c:fd:
dd:47:5f:21:5f:af:3a:52:58:5e:eb:2b:00:41:3a:
8e:f1:87:8a:20:d5:fd:32:64:54:48:f9:36:68:a6:
e4:8a:36:64:a3:af:ba:b5:97:85:03:aa:8a:d6:42:
91:7f:37:76:3a:0a:ef:fa:47:4a:cd:cc:1c:11:c5:
d4:23:07:00:55:63:90:4d:bd:6a:bd:9d:ee:9e:07:
e4:5e:43:05:c3:06:29:5e:7f:ea:d6:40:7c:a7:9f:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:F2:52:07:42:A5:F2:53:F9:52:03:73:1A:CC:91:10:0D:70:40
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/2vPyUgdCpfJT-VIDcxrMkRANcEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.13.0/24
185.80.196.0/24
Signature Algorithm: sha256WithRSAEncryption
68:96:7c:e3:88:64:42:85:25:6d:c8:a5:1c:f1:f9:77:9a:40:
0a:f3:55:c8:16:90:b3:d4:b7:db:4b:61:70:3d:0e:94:97:02:
f4:2c:9e:fa:d5:90:5a:ef:5a:eb:3d:7c:9e:85:fa:d5:8a:7b:
39:b7:dd:b5:93:85:38:9f:81:d1:6d:5e:1c:ee:47:6c:14:df:
12:3a:6d:10:da:ec:65:52:15:de:68:27:de:2b:03:67:ae:4f:
b4:b6:17:6d:f7:2a:63:4c:f5:10:3b:14:4e:d6:cf:82:02:02:
04:d0:ca:3c:10:65:66:71:89:a1:ff:3b:be:12:24:2c:59:81:
3b:96:e3:97:5b:10:fd:1e:8c:dd:42:c6:2c:38:a9:bf:38:3a:
96:60:9e:cf:e4:9e:5e:54:47:0c:4e:08:0d:1c:f4:4f:95:d1:
8e:c7:bb:20:fd:f4:24:92:5b:77:82:4f:48:cb:2c:0f:00:04:
ad:86:9a:9e:ab:c8:c6:63:42:a2:9e:a7:33:76:7c:c9:e5:a9:
c9:c4:1a:cb:60:cb:b2:ef:63:27:98:e1:38:f2:e4:b7:fb:8e:
b9:ed:d3:6d:2c:8a:b1:27:ba:10:e7:79:c8:b6:2f:49:53:a8:
66:d0:65:75:cb:d9:5d:3c:f1:c0:fa:9b:df:10:ce:3b:f2:f6:
68:75:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 25 10:18:28 2023 by rpki-client on console-ams.rpki-client.org