Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/D-MOPaHuPVwMenvM7hfgut0JbyM.roa
File: D-MOPaHuPVwMenvM7hfgut0JbyM.roa (raw, json)
Hash identifier: v5Q0fVlH+e/mb43ycviny/U4sOAc/GMFYcTcSMFFqvw=
Subject key identifier: 0F:E3:0E:3D:A1:EE:3D:5C:0C:7A:7B:CC:EE:17:E0:BA:DD:09:6F:23
Certificate issuer: /CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Certificate serial: 0186415DBED5D370469111275940D357A421
Authority key identifier: 97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/D-MOPaHuPVwMenvM7hfgut0JbyM.roa
Signing time: Sat 11 Feb 2023 16:45:08 +0000
ROA not before: Sat 11 Feb 2023 16:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 80.89.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:5d:be:d5:d3:70:46:91:11:27:59:40:d3:57:a4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97310ada6a1bbd7aa68e140223bf9c625a33be41
Validity
Not Before: Feb 11 16:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fe30e3da1ee3d5c0c7a7bccee17e0badd096f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:61:2e:e8:b6:55:7e:9c:6c:d4:c4:cb:37:
c3:d4:5a:fd:4b:84:e9:91:30:b7:84:7c:a7:88:97:
25:5c:00:3b:54:0c:05:5f:fc:06:4d:8d:30:b4:12:
de:ed:56:e2:cb:40:0f:16:c4:40:92:bf:27:20:c4:
26:61:9f:9e:92:06:a0:ff:d7:16:a1:1b:b9:56:15:
2f:18:68:1b:4d:65:8e:ad:e6:c2:2d:ae:a0:ee:f7:
a8:df:cb:cb:3d:6f:77:34:b5:5a:73:5f:20:6e:bb:
bc:83:99:fd:a4:21:43:fe:59:5c:a2:ab:e3:1c:74:
67:ca:33:6a:bc:ea:dd:6a:53:64:3d:82:3a:4e:1d:
78:9b:d2:24:d2:db:86:48:7c:c3:da:c2:87:4f:d2:
7f:af:01:be:9b:9c:8d:c7:b5:b0:ff:30:f8:0c:e8:
e3:f2:d5:b3:ab:08:a2:db:c9:a0:e8:70:d8:8d:9b:
ee:39:01:29:40:19:bb:df:56:f8:fa:9e:2f:aa:a3:
c8:9e:90:69:3c:38:d2:1f:2a:b8:04:6d:34:1d:3e:
6e:b7:20:c2:5a:bc:f4:73:b8:21:1e:04:c7:11:af:
24:b9:b4:3f:d3:5b:7d:d8:49:73:d9:9d:d5:45:87:
11:a9:9f:61:98:e3:80:dd:52:72:5c:e5:30:d8:a8:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:0E:3D:A1:EE:3D:5C:0C:7A:7B:CC:EE:17:E0:BA:DD:09:6F:23
X509v3 Authority Key Identifier:
keyid:97:31:0A:DA:6A:1B:BD:7A:A6:8E:14:02:23:BF:9C:62:5A:33:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzEK2mobvXqmjhQCI7-cYlozvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/D-MOPaHuPVwMenvM7hfgut0JbyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5b36ce-d8dd-4561-8ebf-53e9ef6073c5/1/lzEK2mobvXqmjhQCI7-cYlozvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.0.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e2:23:ae:0c:c0:12:bb:06:c4:82:e4:67:c1:40:1b:d2:49:
b2:77:26:57:d0:60:e9:fa:7f:94:a7:16:de:88:8a:07:2b:9f:
24:4c:06:12:b0:a4:d5:3f:c1:56:c3:f0:9b:6b:c0:02:28:67:
61:56:6d:cb:45:2f:bf:89:4d:64:c8:00:00:ec:60:c2:20:41:
72:d0:d6:ab:b1:d1:3f:8f:31:53:40:af:ba:fc:d1:93:ce:61:
68:49:73:22:88:1c:a1:95:09:70:b3:c5:55:f9:50:7f:5e:bf:
3a:09:b5:62:3e:8a:98:60:fb:06:a0:db:d6:74:4b:7e:98:cc:
d6:79:f9:09:12:de:6b:42:93:39:6d:b2:f1:90:f0:9a:f5:05:
57:d5:f0:6c:69:46:e8:6c:c4:ac:74:6c:4e:31:cd:42:91:70:
fe:ec:d6:fc:11:01:ff:6f:24:c5:13:23:be:aa:b7:52:75:6f:
77:75:ac:2a:0f:51:ed:f9:f9:4a:3c:00:80:f8:ae:47:81:f4:
67:3c:d6:49:93:27:de:d9:fa:d2:98:9e:12:d2:9b:d3:8d:e4:
d7:a0:ae:a6:f5:67:65:5f:39:fb:09:88:ff:41:00:34:a2:66:
05:2c:38:8b:d7:64:fa:6e:84:d8:e7:6a:45:bc:75:15:b7:67:
56:e0:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:19 2024 by rpki-client on console-ams.rpki-client.org