Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/uS8aWSaiSXltwQeF9mvzH0W3yk0.roa
File: uS8aWSaiSXltwQeF9mvzH0W3yk0.roa (raw, json)
Hash identifier: Sox8eOQ194zqTZusy/wDg/4ZWpD7G6jSwsEnQg0dyUU=
Subject key identifier: B9:2F:1A:59:26:A2:49:79:6D:C1:07:85:F6:6B:F3:1F:45:B7:CA:4D
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018A981D471F1471DB2C2DD00AE819C74856
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/uS8aWSaiSXltwQeF9mvzH0W3yk0.roa
Signing time: Fri 15 Sep 2023 09:12:50 +0000
ROA not before: Fri 15 Sep 2023 09:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 80.83.80.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:1d:47:1f:14:71:db:2c:2d:d0:0a:e8:19:c7:48:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Sep 15 09:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b92f1a5926a249796dc10785f66bf31f45b7ca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:1e:73:7e:66:59:d1:1f:39:85:32:0c:96:
4e:99:de:8b:ff:cb:53:b3:64:ae:3d:a9:30:87:36:
05:2a:62:0a:d0:97:77:48:6b:8d:26:f1:95:73:0a:
48:9f:6f:c8:54:36:4a:d4:c2:fd:46:47:31:7b:e8:
df:32:8b:a6:19:e5:5e:48:77:ec:26:d0:3f:40:0b:
77:84:71:36:62:fe:5b:d7:91:61:4b:13:c7:ec:d6:
f0:91:94:71:87:bc:bb:87:2e:7b:29:a7:66:02:f4:
30:13:53:73:dd:32:3a:dd:7f:52:06:74:b1:f5:16:
4c:5e:9d:ac:46:78:04:e4:9c:00:c9:fb:ec:f4:36:
a1:e5:77:5d:bd:fe:0d:26:65:56:48:20:8d:66:ed:
b6:00:7f:93:a0:0f:64:9d:8a:6f:7b:fe:0f:10:7e:
30:e7:15:b6:32:a1:d5:0a:37:11:2c:e7:da:74:e2:
49:8c:52:d9:1d:3b:f6:7c:ad:db:f3:e9:59:b3:62:
0e:42:b0:42:35:b5:e1:e9:4b:71:aa:e4:fe:d6:ce:
7f:55:07:cd:62:0f:b5:95:5e:74:3a:9f:36:4d:2a:
67:c9:ba:5b:cc:37:85:33:88:21:a2:7c:a2:bf:fe:
82:1c:57:9d:a5:39:42:14:e8:a1:0d:ac:d1:2b:92:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:1A:59:26:A2:49:79:6D:C1:07:85:F6:6B:F3:1F:45:B7:CA:4D
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/uS8aWSaiSXltwQeF9mvzH0W3yk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:70:f4:ef:74:06:ac:92:fa:db:f2:8f:0b:b1:de:f1:40:ca:
52:96:a8:a3:58:03:dd:ff:93:d7:b4:6e:7e:c8:5b:0e:bf:52:
5f:92:c7:72:3d:f7:f1:b9:a6:e6:46:f9:d0:cd:e4:22:fe:69:
04:4c:a4:9a:32:2e:4e:53:83:4a:b5:f6:fb:58:78:c7:be:1c:
55:bb:41:54:06:db:02:bd:c5:01:7e:f7:e4:4b:48:75:3c:10:
e5:a2:85:88:a8:2e:f5:52:92:83:24:a7:62:d0:4c:05:81:01:
46:33:5c:b3:25:ca:aa:10:2e:0b:b6:24:3e:56:aa:4f:fe:3b:
44:0c:e6:0d:e3:c1:78:af:dd:ba:f7:96:2d:d9:1e:b5:5f:d1:
b4:61:d9:57:75:a0:85:06:b7:eb:c5:cf:68:89:f7:95:f3:a5:
9d:d7:54:ef:26:52:78:70:5c:0d:fd:4c:92:8e:a0:1e:52:db:
4d:05:6e:3e:b8:03:41:85:ec:b7:49:07:0c:9d:bc:f6:17:f0:
fd:5a:f9:95:15:4b:32:06:68:62:4c:86:be:41:88:5c:30:2d:
60:c5:b8:75:a4:ce:99:41:80:e5:3c:b5:c5:55:7e:9d:39:c3:
81:d8:e5:a2:ef:00:88:d2:09:3f:49:91:96:ba:06:c9:62:ec:
eb:5a:4f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:00 2024 by rpki-client on console-fra.rpki-client.org