Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/_mHADzT18HhkHMTeCQKAdsxk3dc.roa
File: _mHADzT18HhkHMTeCQKAdsxk3dc.roa (raw, json)
Hash identifier: OupyMvj9qUVBLuAYm5zaMW0/LNqkY0jlXLFZPKv0W6k=
Subject key identifier: FE:61:C0:0F:34:F5:F0:78:64:1C:C4:DE:09:02:80:76:CC:64:DD:D7
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 018A6F62662EAE275DC4353010519688D28E
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/_mHADzT18HhkHMTeCQKAdsxk3dc.roa
Signing time: Thu 07 Sep 2023 11:23:54 +0000
ROA not before: Thu 07 Sep 2023 11:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41354
IP address blocks: 185.80.84.0/23 maxlen: 23
185.80.84.0/22 maxlen: 22
185.80.86.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:62:66:2e:ae:27:5d:c4:35:30:10:51:96:88:d2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Sep 7 11:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe61c00f34f5f078641cc4de09028076cc64ddd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:44:be:db:1d:18:79:8e:88:59:df:83:b2:
0a:6c:cc:07:b1:d8:ab:18:fd:2c:b0:58:62:b1:be:
d6:40:57:47:25:f9:f4:f9:3b:99:46:f7:42:7f:7c:
cc:96:2b:b3:bd:54:23:08:b5:1d:d6:e5:97:ee:29:
90:48:0d:61:17:6d:87:b9:22:73:83:17:3f:8b:3a:
4a:34:6a:f5:0c:f0:a4:5a:a4:2b:83:dc:81:57:54:
4f:aa:12:ac:4c:0a:6e:07:ba:ec:13:0a:04:7d:81:
8a:d0:07:72:dc:e2:0d:10:e0:9a:41:8e:44:34:01:
49:72:f3:43:4d:2c:7d:e8:45:bf:40:f7:2f:23:81:
66:73:c8:84:0f:fb:2a:6c:62:88:b6:83:c7:b7:2b:
c3:26:0e:36:9a:65:6a:eb:fb:8d:d4:3b:8b:87:e6:
bc:cc:61:12:ac:fe:1e:67:e9:e3:08:4b:5f:07:b8:
44:38:41:15:b2:04:d8:d7:d8:b0:c8:3b:83:db:87:
2b:aa:f2:df:8d:62:60:d1:36:a0:82:b2:82:66:2d:
e2:76:77:0a:90:5f:89:85:07:5f:b5:25:7d:22:0e:
e6:e8:de:7f:fd:51:c5:1a:d5:ed:a2:67:ec:5b:ef:
07:b6:12:65:b4:6a:a5:95:a7:65:9b:d3:29:be:ac:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:61:C0:0F:34:F5:F0:78:64:1C:C4:DE:09:02:80:76:CC:64:DD:D7
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/_mHADzT18HhkHMTeCQKAdsxk3dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.84.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:5d:0a:b1:01:dc:de:a2:59:d4:ef:b5:78:86:81:9c:d0:8d:
65:84:46:d9:91:18:ae:90:00:3c:46:d5:cc:34:2d:13:79:a4:
8c:9b:0c:ce:cb:7f:89:83:fa:4e:50:fb:01:7d:db:bf:71:6d:
0c:11:72:9b:c5:23:8e:ed:ba:55:43:6f:50:b7:3a:0e:86:4c:
fa:2d:6b:34:38:3e:e2:b2:b6:27:ed:92:96:64:0d:5e:86:1b:
57:0a:32:52:25:27:bc:f6:d5:82:55:3a:f0:cd:c4:04:70:39:
dd:19:af:b0:45:2c:aa:6a:59:59:0b:f8:7e:2c:3f:de:91:f3:
09:1c:b0:06:7d:1e:4a:7a:b3:eb:2b:a9:67:81:64:75:9e:9d:
04:c3:83:ee:6b:d2:91:9d:a3:d2:44:9d:63:94:1f:71:ca:a6:
62:0a:b7:48:6f:ae:09:d9:d2:d5:19:b9:92:16:43:f5:cb:74:
d9:f6:ad:b0:ca:ac:8f:fd:5e:86:74:13:f7:59:72:1a:76:5b:
a7:73:3f:cc:83:f6:16:c8:38:d4:f8:76:fb:0e:40:60:60:f7:
98:d4:47:14:8d:04:84:ac:03:14:6e:82:3a:3c:06:4b:5a:70:
28:0c:11:13:6c:b6:bf:89:69:52:92:51:61:55:9d:54:23:3d:
2b:02:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:23 2024 by rpki-client on console-ams.rpki-client.org