Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fL-w764y5rnqn7Dp_QdNgzspJ9g.roa
File: fL-w764y5rnqn7Dp_QdNgzspJ9g.roa (raw, json)
Hash identifier: gwoSqKBVPvC9JnhJgiWuVOYjrsTCUyXViqYX3RJ4VFI=
Subject key identifier: 7C:BF:B0:EF:AE:32:E6:B9:EA:9F:B0:E9:FD:07:4D:83:3B:29:27:D8
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0185708CE1156BB6AA297F5147DA5D8B838A
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fL-w764y5rnqn7Dp_QdNgzspJ9g.roa
Signing time: Mon 02 Jan 2023 03:35:58 +0000
ROA not before: Mon 02 Jan 2023 03:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 80.83.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e1:15:6b:b6:aa:29:7f:51:47:da:5d:8b:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 03:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbfb0efae32e6b9ea9fb0e9fd074d833b2927d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:77:51:67:c1:06:a4:2f:ad:48:78:b5:ec:
5c:2f:4d:49:35:51:77:ce:c1:68:76:cd:51:78:89:
f3:9f:5b:06:2a:c0:d4:63:a5:34:0e:70:86:92:2d:
5c:25:cc:2e:5b:81:1f:f4:bf:8d:d0:ab:6e:2a:50:
88:d9:7e:cd:e0:9e:c9:f8:9f:b8:33:a6:eb:54:a7:
e8:13:e9:62:d2:c3:1d:88:f9:93:4c:04:84:d7:35:
c2:9d:56:ff:9d:7e:79:45:94:aa:d9:94:86:89:8d:
50:45:f9:6e:8a:8c:17:1e:94:63:f6:73:3e:85:f9:
33:ce:08:f0:2e:07:99:eb:7c:70:ac:fc:17:ce:0a:
45:3a:69:39:77:c6:b3:0d:61:81:4d:6c:93:11:f4:
12:30:06:e2:bc:4a:5c:88:97:03:9e:06:03:5c:fe:
54:04:f2:e8:79:c9:65:5e:6b:33:f0:52:dd:8f:b7:
c2:c4:a7:fb:f1:a6:58:72:2f:35:25:3c:99:cd:b6:
81:b0:e8:67:67:81:93:1b:56:20:a5:4d:23:c2:11:
74:97:32:38:0f:b5:eb:fa:d8:87:6b:78:c9:da:c6:
ed:82:bb:37:06:85:4d:2d:87:ef:d3:2b:07:87:77:
3b:ef:47:cb:e2:5c:66:ff:b1:35:42:6f:1b:bb:ac:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:B0:EF:AE:32:E6:B9:EA:9F:B0:E9:FD:07:4D:83:3B:29:27:D8
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fL-w764y5rnqn7Dp_QdNgzspJ9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.91.0/24
Signature Algorithm: sha256WithRSAEncryption
53:74:85:8c:0f:ae:15:c3:4d:92:f5:7c:d3:81:fd:87:cd:e3:
1a:30:56:75:dd:ac:26:81:41:6f:c1:a9:2d:b9:e1:e6:9b:7d:
b0:31:cf:fb:28:6b:36:99:a6:72:46:07:4c:3c:74:47:bc:dc:
c4:60:98:6f:c3:fe:cb:15:91:5b:bf:40:f5:35:e4:86:c8:8f:
64:61:76:87:c2:46:c0:af:73:2a:86:b4:65:25:6a:99:9f:7e:
20:ed:fa:19:04:f2:1a:5a:64:5e:40:0e:68:60:f6:bb:07:8b:
cb:6e:6a:3e:cb:7e:9e:05:c8:28:21:5b:c6:e6:e7:f2:c7:ae:
cc:ea:99:6c:f5:54:dc:ea:ce:96:52:54:62:06:f1:6e:16:42:
34:0c:ba:7e:56:dc:0e:6c:c0:c1:1b:9b:a2:91:1a:c8:c9:09:
f6:9b:f0:bf:61:4f:77:2c:22:16:3c:b7:df:a1:37:ff:d1:93:
fd:f0:cf:40:ff:c9:c4:78:43:09:c5:9b:9d:13:9a:e5:b1:d4:
a1:6e:90:2b:e4:d8:6d:b3:6f:7b:33:c3:d9:e5:64:2a:9b:4c:
85:45:a5:75:fe:f6:19:04:58:52:1f:dc:25:8b:9e:10:fb:30:
8c:79:54:3b:46:07:d2:c1:55:9b:31:46:0f:18:52:89:30:69:
c5:9e:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:13 2024 by rpki-client on console-ams.rpki-client.org