Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/pX2HAQpNPV_Gx-7AWWxPM32fGYI.roa
File: pX2HAQpNPV_Gx-7AWWxPM32fGYI.roa (raw, json)
Hash identifier: tkGCYBmtbjLnLVCUpdNPQp2x7KkjhUUn73Dl5xfgbqw=
Subject key identifier: A5:7D:87:01:0A:4D:3D:5F:C6:C7:EE:C0:59:6C:4F:33:7D:9F:19:82
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 0186A20F31B2B78400CFB6DF15F739DC3470
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/pX2HAQpNPV_Gx-7AWWxPM32fGYI.roa
Signing time: Thu 02 Mar 2023 11:22:30 +0000
ROA not before: Thu 02 Mar 2023 11:22:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21364
IP address blocks: 80.245.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:0f:31:b2:b7:84:00:cf:b6:df:15:f7:39:dc:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Mar 2 11:22:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a57d87010a4d3d5fc6c7eec0596c4f337d9f1982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:ea:54:c3:36:87:59:ea:7a:81:81:59:b3:
82:16:22:9a:72:bd:db:45:f2:04:5b:3c:75:16:8e:
50:c4:57:95:a8:28:b2:43:ca:63:7d:dc:5b:f9:bb:
8d:87:25:3a:69:6b:72:8c:af:bb:fd:c0:9e:5f:51:
61:9b:92:dd:41:0a:f1:04:d6:59:98:97:b6:93:39:
d4:8e:fa:36:e1:f8:c4:c0:9f:c2:2c:97:bb:e3:7a:
cd:a8:91:60:ea:7f:21:7a:4a:be:a6:d5:9d:53:86:
3b:48:ca:56:d7:84:42:df:a4:7b:e0:90:b1:04:4b:
34:64:71:e6:54:46:c2:2e:c2:99:54:b9:c6:8a:83:
8b:90:09:88:7e:b1:8b:36:10:36:9d:62:f5:01:23:
d8:1d:fa:72:05:b6:13:40:ae:53:4c:e9:aa:2a:c8:
3a:59:11:57:d8:44:c7:a9:e1:75:27:a2:2c:42:25:
58:75:64:c1:cd:8e:92:77:4b:db:bb:39:ee:21:a0:
ef:ce:77:43:7a:37:9e:b3:f1:2d:3a:cc:0c:e7:05:
87:1b:e8:b9:d2:da:a5:86:6a:d1:51:0f:3b:c3:ec:
ff:c1:a7:6e:e0:90:ee:37:80:9f:79:5b:e1:05:d4:
e8:b7:36:5a:ee:bb:59:d8:91:48:fb:45:50:5b:74:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:87:01:0A:4D:3D:5F:C6:C7:EE:C0:59:6C:4F:33:7D:9F:19:82
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/pX2HAQpNPV_Gx-7AWWxPM32fGYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.0.0/20
Signature Algorithm: sha256WithRSAEncryption
62:af:90:49:85:13:8a:4d:5b:52:ba:f5:88:6c:2c:bd:65:77:
58:c2:dd:f5:fa:24:ef:cd:64:d6:1c:15:19:45:0d:29:07:52:
ba:27:e8:31:aa:57:bb:ed:1d:53:21:bf:57:e7:60:4e:6b:11:
45:33:da:86:28:83:33:01:e4:52:97:4d:da:93:0a:21:25:d5:
da:51:b9:64:17:8b:d7:79:02:d1:e9:37:8a:65:4b:09:d5:81:
7d:60:3b:bc:25:24:da:51:e7:a0:81:29:b1:bc:e8:13:80:85:
84:96:c6:7e:43:24:07:1c:a0:da:9d:4c:10:93:17:e3:b6:a3:
40:c6:34:96:ca:f5:da:dd:86:93:38:8b:8b:2e:98:22:13:08:
51:de:50:9d:7e:0d:7a:4a:4b:34:9a:8a:06:b0:77:92:77:96:
69:f4:3b:d9:a0:68:d7:b9:87:03:e5:f7:7d:c9:70:55:de:3e:
7e:0d:3e:6e:74:39:30:19:10:d5:8d:0a:66:e7:27:44:4c:06:
e6:cf:82:9a:a6:8b:be:67:47:07:17:73:0c:5b:c1:3c:0f:c9:
1b:3c:0d:5d:8e:d8:0a:7d:f0:93:c7:1e:c0:e6:1a:28:55:47:
54:cc:10:01:cd:af:be:44:7d:d8:7d:9b:ff:d0:4e:80:e2:b8:
d6:c3:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org