Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/HqtPjPIS5Z5KqabMHXWM7C7_x5k.roa
File: HqtPjPIS5Z5KqabMHXWM7C7_x5k.roa (raw, json)
Hash identifier: Aa4RQBCPEPZ03JPqjasaDpLzr0oEXKoaZSA7le3RNhA=
Subject key identifier: 1E:AB:4F:8C:F2:12:E5:9E:4A:A9:A6:CC:1D:75:8C:EC:2E:FF:C7:99
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0185B395FBE085C9B31CF176E9CB60345E43
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/HqtPjPIS5Z5KqabMHXWM7C7_x5k.roa
Signing time: Sun 15 Jan 2023 04:00:29 +0000
ROA not before: Sun 15 Jan 2023 04:00:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 80.83.80.0/21 maxlen: 24
80.83.88.0/23 maxlen: 24
80.83.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b3:95:fb:e0:85:c9:b3:1c:f1:76:e9:cb:60:34:5e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 15 04:00:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eab4f8cf212e59e4aa9a6cc1d758cec2effc799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:12:db:a6:6f:a0:2e:53:da:5e:d5:c3:e8:
5a:44:74:18:53:2d:8b:af:b0:a5:d2:14:9b:af:8a:
4d:e4:2b:c8:94:a7:13:fe:41:e9:c4:97:ac:29:05:
6f:eb:a5:ae:92:4b:aa:93:00:b7:9c:05:e9:54:1d:
bc:0e:e7:18:eb:a6:2b:f3:18:bc:ae:39:9e:e5:25:
d7:ab:82:1c:ed:ca:53:b6:b6:16:7d:13:5a:4f:d9:
82:6c:08:50:4d:64:18:e8:dd:18:bd:88:68:2a:3a:
5c:d7:eb:44:46:23:6d:2e:50:f0:eb:08:5e:6c:e7:
f8:87:9c:b2:c7:27:29:93:19:36:e9:25:89:f0:f3:
78:03:3b:ff:10:3f:f0:69:80:85:c6:42:9b:72:9e:
c4:50:53:66:16:67:85:fd:61:86:dc:f4:bc:1a:a7:
7f:99:a1:a3:e9:af:79:a6:33:22:b6:03:7b:25:b1:
3a:9c:71:b8:52:05:48:60:84:2e:1b:f3:a3:a6:fe:
7e:27:52:6e:5b:34:13:a2:2c:c1:b9:29:ac:eb:48:
8c:99:97:87:dc:92:f1:03:7a:b5:53:b3:17:a9:14:
49:e7:57:30:2f:9d:91:ab:9d:0a:40:cd:f9:87:73:
35:03:1a:4c:4f:67:62:5e:a6:c6:37:e9:a6:80:c7:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AB:4F:8C:F2:12:E5:9E:4A:A9:A6:CC:1D:75:8C:EC:2E:FF:C7:99
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/HqtPjPIS5Z5KqabMHXWM7C7_x5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.80.0-80.83.89.255
80.83.92.0/22
Signature Algorithm: sha256WithRSAEncryption
74:a2:86:7f:39:50:69:22:9e:38:7f:65:5a:e0:28:4b:90:10:
6d:17:a6:12:d1:74:5d:c2:84:26:75:05:cc:3b:c7:45:22:90:
5a:c2:58:0d:23:b9:9b:3d:3a:c2:9b:ba:3c:4e:18:e0:03:0c:
46:db:a3:8f:db:d0:0a:95:ed:be:ad:3a:02:bd:18:d3:d2:5c:
07:2f:92:23:97:56:df:ef:25:ce:16:cb:42:37:2e:27:d2:ff:
fb:94:9e:7b:76:0a:e3:06:79:e6:ad:ab:9a:3f:de:78:a1:9c:
6d:2c:58:82:89:42:86:8f:b9:bb:68:63:e0:e4:16:5c:2a:30:
17:34:66:bc:81:d8:c6:83:0a:3f:ee:6d:c9:b0:5d:1d:26:1f:
61:09:f7:17:bf:1e:56:d6:3e:97:68:aa:de:0c:65:25:08:96:
e2:89:26:5b:27:ce:1b:51:43:df:8f:d2:d0:ce:2a:1d:e4:2b:
e7:7c:e0:37:d9:4a:9f:6e:d3:d6:94:d5:d9:44:37:10:c4:74:
66:3f:2f:59:3c:77:e7:c2:98:0c:a0:af:53:ea:93:ed:8e:d9:
42:c0:33:f7:d1:04:a9:cf:6a:53:24:0b:fc:fa:11:1f:00:4c:
ad:6a:69:63:d7:c1:c1:71:2f:4c:b8:56:29:a8:0e:9c:29:1d:
41:44:48:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:10 2023 by rpki-client on console-fra.rpki-client.org