Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/4LbS5RU0wM9uCzQ3dRY0C7H5_9U.roa
File: 4LbS5RU0wM9uCzQ3dRY0C7H5_9U.roa (raw, json)
Hash identifier: bs7SKgAcMbPC3DDGVPp3k2XIcGC/fDaCc3Xyis2GSHU=
Subject key identifier: E0:B6:D2:E5:15:34:C0:CF:6E:0B:34:37:75:16:34:0B:B1:F9:FF:D5
Certificate issuer: /CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Certificate serial: 018B2410B186FA2617536D4EBBAEACD8BD88
Authority key identifier: 97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/4LbS5RU0wM9uCzQ3dRY0C7H5_9U.roa
Signing time: Thu 12 Oct 2023 13:25:55 +0000
ROA not before: Thu 12 Oct 2023 13:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21105
IP address blocks: 80.89.9.0/24 maxlen: 24
80.89.10.0/24 maxlen: 24
80.89.11.0/24 maxlen: 24
80.89.8.0/22 maxlen: 22
80.89.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:10:b1:86:fa:26:17:53:6d:4e:bb:ae:ac:d8:bd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Validity
Not Before: Oct 12 13:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0b6d2e51534c0cf6e0b34377516340bb1f9ffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f8:96:41:7f:95:22:a2:d3:e7:64:a4:ca:0b:
d8:be:04:c3:b3:8b:8f:06:d2:f0:79:d1:fb:6a:00:
fa:1b:77:b2:82:f4:7f:41:4f:08:63:dc:e6:37:ce:
8f:53:22:36:e6:28:5c:bd:d5:5c:30:cc:e2:46:0a:
ba:11:8e:d4:69:57:bb:fd:c9:6c:3d:cf:39:dc:50:
24:ad:87:5c:65:80:b7:f1:16:0a:da:b4:cb:9e:20:
e5:91:d4:fa:f6:e0:74:e2:25:ea:8a:42:9d:ea:ee:
2a:c2:71:00:a5:50:56:db:d7:44:a7:de:8b:59:5e:
c1:f3:58:22:4b:14:41:d3:ee:87:66:e7:0c:28:9c:
19:ee:2b:07:ca:21:3b:a1:6d:cc:0f:6e:67:d1:19:
0a:b0:4c:86:0b:1b:8b:66:fe:7b:23:f3:e2:d3:52:
33:1a:85:8f:be:67:fa:2b:59:f4:67:c2:df:9b:d5:
0d:ff:de:24:35:8a:cb:36:05:e2:22:ea:24:8a:c9:
37:b1:fb:00:7b:c1:23:ea:5a:a9:d9:75:13:bd:30:
96:2f:b7:62:32:c7:ac:61:39:8a:93:d6:06:ae:ac:
69:14:d1:33:76:46:14:09:4b:b4:22:90:83:7a:7f:
d9:16:d4:66:a8:d5:fb:07:2e:07:09:45:cc:fd:32:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B6:D2:E5:15:34:C0:CF:6E:0B:34:37:75:16:34:0B:B1:F9:FF:D5
X509v3 Authority Key Identifier:
keyid:97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/4LbS5RU0wM9uCzQ3dRY0C7H5_9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:61:f0:ac:2b:98:3b:10:86:5e:29:b3:a7:8e:35:99:dd:7c:
b9:59:e2:19:3e:59:5a:ef:c3:d4:74:bb:19:59:71:be:44:a8:
0d:dd:2b:a2:09:c9:20:22:d1:03:70:8a:85:c9:24:6e:48:ae:
80:ee:a0:51:28:7a:22:fe:52:d8:23:5b:8c:1f:68:0b:71:fe:
b1:93:80:0e:49:38:2a:a3:13:f4:58:dd:75:11:9b:15:82:dc:
ca:ca:ce:68:40:56:2d:37:d8:b6:c6:dc:cd:d7:47:0b:b5:24:
fb:1a:cc:18:7e:2e:f9:60:b7:49:81:ee:b5:35:3a:c8:95:4d:
8d:71:aa:da:ae:36:64:43:86:bc:5b:d6:44:88:df:35:68:f5:
84:f1:99:e8:15:a6:1f:9f:5c:64:2d:3f:c0:0e:3c:58:1d:af:
4e:dc:0c:e1:23:df:a3:06:8b:f0:bb:d9:99:14:f3:5c:b8:0c:
11:08:49:97:3a:72:ab:a2:e9:c4:9b:d2:78:39:df:5f:8a:37:
0f:81:04:d3:2e:a5:13:ad:93:f3:4e:47:2c:e1:24:1f:c0:eb:
52:5c:4e:49:74:3d:dc:c8:ee:8b:a3:be:a4:3d:cb:ae:2f:cf:
da:5a:66:59:f4:53:62:3c:e0:45:7f:93:db:69:2a:13:ff:45:
13:e0:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:57 2024 by rpki-client on console-ams.rpki-client.org