Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zG9y4dov6PRrUqQeW_CtDhaSNlk.roa
File: zG9y4dov6PRrUqQeW_CtDhaSNlk.roa (raw, json)
Hash identifier: 6HrzTsy5YXd6RJElqxfpuaBMSmMf1dUQlPHOjiAJP4w=
Subject key identifier: CC:6F:72:E1:DA:2F:E8:F4:6B:52:A4:1E:5B:F0:AD:0E:16:92:36:59
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018B7C5AA0A16297ECE532B8A9944DFDB27A
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zG9y4dov6PRrUqQeW_CtDhaSNlk.roa
Signing time: Sun 29 Oct 2023 16:53:15 +0000
ROA not before: Sun 29 Oct 2023 16:53:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7c:5a:a0:a1:62:97:ec:e5:32:b8:a9:94:4d:fd:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Oct 29 16:53:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc6f72e1da2fe8f46b52a41e5bf0ad0e16923659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:7c:59:ee:8b:49:67:5e:e0:0c:5b:f2:a1:
a0:d3:58:47:4c:58:82:c2:f9:bb:01:be:f6:0e:76:
59:e9:89:e5:de:f8:c2:06:8c:00:c0:bf:d8:7a:64:
9f:d6:60:0a:96:7d:fe:c2:a0:44:8f:68:be:bd:92:
0c:2d:6a:50:ca:71:29:c4:84:92:55:aa:b5:87:b5:
7f:5e:97:91:72:97:f8:2f:57:92:7a:45:56:02:3a:
be:8d:79:8a:b6:e1:2c:1b:07:18:cc:34:c7:78:9c:
76:7f:b0:6e:ab:a4:2d:0d:47:42:1c:ea:2c:b7:ef:
f5:9d:5b:40:a3:d8:be:47:48:50:5b:0e:95:c5:a1:
2a:33:30:72:11:fd:86:7d:e2:52:78:2c:f0:3b:39:
52:8c:3e:ee:6b:3d:1f:07:2d:19:c8:24:46:b1:8e:
ce:96:89:d6:cd:eb:56:32:62:11:be:40:76:a7:53:
6a:7f:71:f3:e9:5b:93:f8:a7:d1:df:2d:a8:7b:41:
7b:47:fe:4e:b5:65:ac:e0:f7:cb:c1:a9:83:0c:8a:
50:ab:07:1d:7a:12:08:81:f5:1e:03:b1:ce:bd:e8:
14:09:75:87:3c:6d:75:00:e9:54:99:1d:5f:4e:4f:
a1:fd:22:33:7b:35:2e:d1:4f:fc:61:e8:09:40:ef:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:72:E1:DA:2F:E8:F4:6B:52:A4:1E:5B:F0:AD:0E:16:92:36:59
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zG9y4dov6PRrUqQeW_CtDhaSNlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
51:bb:4e:26:17:2b:f7:a1:1b:ed:51:a9:f2:9a:81:f3:80:f4:
62:13:a5:fa:38:2a:87:83:03:dc:36:a7:e7:47:32:b9:7b:27:
0a:1f:64:e0:99:e4:f7:ed:73:20:5b:75:7e:51:d6:b8:f8:d5:
24:40:68:e5:24:3f:0b:b8:08:f9:9b:a1:e5:48:04:68:7b:73:
20:d9:30:32:55:dc:7e:13:3c:c5:34:69:d1:cd:3e:1e:14:3b:
b9:4d:69:8f:7a:78:d5:fc:66:38:93:fd:53:8f:7a:5d:85:32:
14:41:5b:2b:fe:ff:df:ed:11:1b:05:2c:50:25:be:5d:a7:b7:
5d:ac:5b:ad:eb:e9:bd:e9:2a:86:35:d1:29:0a:ce:25:ac:0c:
85:73:91:57:43:0f:c7:c7:96:7c:6f:d9:a2:cd:63:43:cb:0d:
3b:0b:06:43:83:82:70:ef:24:c9:36:c9:61:7e:5f:83:58:e9:
56:f2:18:33:2e:15:d6:15:9a:14:a8:84:97:3b:e0:7b:d0:db:
fe:97:40:d1:23:c3:6a:33:25:72:c8:39:db:fb:ab:4c:18:49:
48:79:3a:c7:1b:06:60:09:50:fa:85:c0:91:a4:2d:a5:5a:bf:
b5:08:ac:a8:2e:19:40:af:42:03:be:54:a8:2a:86:5a:0c:77:
a4:c8:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:13 2024 by rpki-client on console-ams.rpki-client.org