Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/9nHGIkRsZLzC10jdqvF43LRLYDw.roa
File: 9nHGIkRsZLzC10jdqvF43LRLYDw.roa (raw, json)
Hash identifier: GKa9FCeMvHrMXXn1pEp/atcTY1V+vqxw67KccXh3hzg=
Subject key identifier: F6:71:C6:22:44:6C:64:BC:C2:D7:48:DD:AA:F1:78:DC:B4:4B:60:3C
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018ACE13796252F21EB7E908103149B3942F
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/9nHGIkRsZLzC10jdqvF43LRLYDw.roa
Signing time: Mon 25 Sep 2023 20:41:37 +0000
ROA not before: Mon 25 Sep 2023 20:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ce:13:79:62:52:f2:1e:b7:e9:08:10:31:49:b3:94:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Sep 25 20:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f671c622446c64bcc2d748ddaaf178dcb44b603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:e8:21:a4:47:0c:3e:2b:63:b7:c8:ad:7e:
ad:69:6a:b4:6c:d0:a0:f5:ba:99:aa:1b:4f:a5:13:
61:75:10:de:44:0e:d7:33:ce:21:d3:af:06:87:ee:
a1:7f:50:86:5b:cc:b6:8f:c6:90:1c:c2:ac:03:52:
66:f3:fc:eb:d6:69:b7:5b:c9:b5:d3:c8:18:7c:15:
96:17:27:e9:9b:72:2c:91:0d:36:0b:12:0b:48:31:
44:e4:2e:20:3c:4a:5b:86:98:e3:34:43:bb:a5:90:
06:96:bf:ba:d8:dc:75:d8:c0:e5:0d:0f:18:1e:ca:
f6:41:1a:bc:04:92:69:98:77:10:f3:7d:6c:29:7e:
dc:86:81:a0:ca:45:5f:b1:e1:ec:a6:b4:17:5b:9d:
5e:d3:33:78:57:b7:a2:24:0d:fe:ed:39:62:ec:ff:
78:48:f5:f0:d5:ef:d1:6f:18:80:03:35:be:af:7b:
70:16:17:e6:8a:b5:dc:b3:39:dd:fa:4c:cd:88:0d:
d4:a3:74:7e:2d:2c:51:d0:c3:3f:2f:90:d5:7f:23:
f7:d7:1f:52:91:63:dd:12:24:ce:30:85:8b:56:49:
d3:0a:39:10:9a:33:8b:eb:d2:28:81:8e:21:91:55:
66:a7:58:69:6d:6f:ee:ee:5b:a8:bf:6d:b4:65:71:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:C6:22:44:6C:64:BC:C2:D7:48:DD:AA:F1:78:DC:B4:4B:60:3C
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/9nHGIkRsZLzC10jdqvF43LRLYDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
17:46:00:75:9d:3a:6e:13:3a:40:9c:69:2e:b3:82:2b:e0:17:
d1:66:f3:fe:77:9e:30:d6:c6:b6:2d:60:ee:2e:c7:c0:05:aa:
9b:cd:09:25:50:9f:69:a8:60:cb:16:b4:cc:e2:50:50:e1:c6:
6a:4b:bb:7d:d9:87:59:67:f6:47:46:6e:5b:a5:72:de:0e:bf:
6c:17:f3:73:de:49:f9:44:b8:a7:a6:b5:4c:d5:ae:ee:e3:32:
f5:08:56:90:9f:17:60:2b:13:6b:fd:46:37:c3:6b:4e:0e:2d:
c3:78:a1:17:d9:35:21:05:02:04:e2:81:62:0a:14:ce:93:2f:
1d:b9:9a:e3:98:96:02:dd:e6:33:dc:32:27:e3:7a:3c:44:61:
11:90:31:4f:a1:27:dd:09:6f:b1:6d:1f:f8:53:03:1c:5e:0b:
2f:b3:3b:ab:c2:30:45:25:d9:d0:32:2f:1d:72:98:8c:84:1c:
9e:a9:2e:ed:3f:94:4f:e1:a4:30:03:c8:ce:9e:5b:4f:b8:64:
70:f5:3f:06:bb:5e:ef:e0:08:cc:5e:4b:2a:14:62:eb:40:9c:
8e:79:4c:45:25:a6:cd:ef:e5:4f:44:0d:28:dd:6d:a6:a4:c0:
58:40:1d:9a:1d:d8:89:63:2c:0e:bf:ef:c6:f3:d2:d2:a0:ec:
8e:96:42:22
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 1 16:32:20 2023 by rpki-client on console-fra.rpki-client.org