Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5Wjsm1pnqnoBlR_DaazKdLxKeBY.roa
File: 5Wjsm1pnqnoBlR_DaazKdLxKeBY.roa (raw, json)
Hash identifier: AbD7AINZuoqDE48ipK0zeNe041X+NTX+GG5JkB1Lt3s=
Subject key identifier: E5:68:EC:9B:5A:67:AA:7A:01:95:1F:C3:69:AC:CA:74:BC:4A:78:16
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01856F14E775204811DCB88C6588A8DB5EF6
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5Wjsm1pnqnoBlR_DaazKdLxKeBY.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206112
IP address blocks: 80.92.237.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e7:75:20:48:11:dc:b8:8c:65:88:a8:db:5e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e568ec9b5a67aa7a01951fc369acca74bc4a7816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:14:5e:3c:e0:10:7e:41:27:b9:7f:99:e8:
00:88:fd:fa:b8:8c:01:36:e4:de:d2:f5:56:f6:59:
e3:e1:17:cf:dd:d5:69:bc:62:f8:dc:08:78:7d:ad:
a6:4f:6c:24:47:1d:45:6e:f7:fd:1b:5b:99:68:7f:
69:b3:58:8a:0c:b9:4c:f3:f4:9f:84:20:27:a1:8a:
5d:0e:22:7c:8b:37:af:16:c5:78:ed:3a:6f:f7:43:
30:af:39:f6:90:5c:f0:45:a2:81:44:c7:b1:5e:ec:
4f:eb:ba:ae:61:3d:42:82:7d:ff:a3:ff:0b:6e:c8:
7d:08:ff:1e:ea:10:5a:c9:63:51:4e:dc:ba:08:89:
32:21:eb:4b:ef:54:f9:99:06:48:da:97:35:60:c1:
00:ce:23:f9:be:54:5d:06:f3:83:aa:1f:1c:93:cd:
5e:41:6a:c4:88:f2:00:0d:d1:f8:6b:8c:b5:b8:5d:
97:e0:bc:12:b8:c2:06:bd:df:35:29:2c:04:ef:3a:
4d:e0:fc:bc:90:e9:86:b4:11:7c:ed:70:65:4a:ba:
88:f0:f8:11:89:76:87:15:ee:53:f8:bb:8d:62:0a:
48:a8:f6:72:8f:28:9c:20:6b:a3:1a:c8:01:bd:99:
e7:01:b7:7f:90:77:b8:da:25:97:5e:bb:e8:0e:0a:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:EC:9B:5A:67:AA:7A:01:95:1F:C3:69:AC:CA:74:BC:4A:78:16
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5Wjsm1pnqnoBlR_DaazKdLxKeBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.237.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2f:8f:dc:dd:3b:d5:d8:5d:3d:53:57:13:e0:6b:56:1c:b5:
00:7a:22:cd:67:4b:20:f3:07:73:84:13:00:a7:e4:52:ef:bf:
30:41:54:5e:e8:48:13:7c:6b:a0:58:c7:6a:c4:26:d3:93:6a:
5a:32:40:24:a3:60:f4:06:e7:55:22:67:f2:00:52:ff:c9:ab:
4f:f1:24:0d:0f:51:6d:80:30:c7:08:81:f6:21:87:81:43:07:
a4:1f:d5:69:c5:ce:d1:ba:50:3e:63:bc:e4:d4:83:07:15:0f:
71:1d:53:7f:3b:ae:5f:30:1e:24:06:d0:10:b4:ec:94:aa:ab:
7b:d5:a6:91:d6:08:59:77:7c:82:a3:b8:1a:2c:9a:a8:fa:0a:
d7:3d:02:6d:e6:1f:0f:ea:14:5c:8f:4b:95:2f:3b:27:87:cb:
e4:16:30:43:3b:e2:b5:2d:b2:d9:f1:0d:13:00:76:1f:90:bb:
62:0a:cd:88:de:98:aa:1b:d6:25:0b:d9:89:e8:3d:da:17:ac:
bf:ed:39:e6:af:c3:bb:b7:18:3b:dd:9f:25:32:8c:3f:5e:7d:
2e:52:89:63:ec:25:d5:d8:f8:35:1a:86:80:2a:8f:a2:ab:76:
d7:ea:01:f6:67:e1:6f:e8:69:66:e9:33:f6:53:2c:e4:3a:93:
9d:f4:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:10 2024 by rpki-client on console-fra.rpki-client.org