Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/oCvvfKUUSx1RAcT3ZMsXKYX2BaU.roa
File: oCvvfKUUSx1RAcT3ZMsXKYX2BaU.roa (raw, json)
Hash identifier: in5xnKwBXLMKwN/K66SvoGKx/nnktCXHWcfv2m6IxsE=
Subject key identifier: A0:2B:EF:7C:A5:14:4B:1D:51:01:C4:F7:64:CB:17:29:85:F6:05:A5
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF9753076EE8ED8366553AE789811F0
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/oCvvfKUUSx1RAcT3ZMsXKYX2BaU.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 80.76.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 14:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:75:30:76:ee:8e:d8:36:65:53:ae:78:98:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a02bef7ca5144b1d5101c4f764cb172985f605a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:1e:8c:55:b3:5f:64:a6:e5:d6:e5:d9:57:
b8:82:46:89:38:2e:3f:b0:fa:67:cb:07:c7:b2:5a:
7c:81:c4:fc:26:30:ce:38:e7:74:bf:e3:9a:25:62:
b2:40:cb:2e:89:7e:6c:8d:06:1e:60:db:88:89:b5:
52:ae:27:ec:8c:e8:04:14:1d:77:2f:43:9e:c6:e5:
8c:ca:d9:07:2e:14:6e:2c:2b:f7:fe:c5:1f:b1:04:
c9:c7:33:63:83:d9:6c:c1:e1:ab:2c:e4:35:66:da:
24:ab:55:7b:72:0b:e6:4c:e4:32:48:17:19:25:4b:
ba:77:35:ad:ac:b3:1c:26:6f:37:13:07:5f:39:d8:
c2:05:ac:9f:c2:68:7d:09:48:51:9c:33:7b:6b:3e:
be:5e:4d:11:a1:51:a0:55:62:1c:3e:34:79:9f:21:
6d:dd:36:b0:c0:63:fd:7a:b1:96:c4:bc:bc:8c:e2:
65:e9:96:03:d3:a1:4f:0f:d2:a9:41:a6:42:4d:d0:
a5:a8:16:c5:8e:cc:0a:96:fb:39:18:f4:ff:0b:42:
8d:f6:b1:bd:42:a0:84:65:06:a0:75:80:6c:c0:ed:
a4:9f:8b:01:43:f3:15:86:ca:be:b3:3e:73:90:6b:
da:5a:99:fb:03:ac:aa:06:79:89:2b:63:d7:bb:fb:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:EF:7C:A5:14:4B:1D:51:01:C4:F7:64:CB:17:29:85:F6:05:A5
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/oCvvfKUUSx1RAcT3ZMsXKYX2BaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.43.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6e:29:74:a2:aa:07:fa:ed:e6:ee:bd:b5:f5:0d:57:bf:a0:
bf:0c:32:e8:11:5c:33:71:55:de:f7:06:02:c2:98:d4:74:e0:
a7:cc:fe:8f:3e:d0:ae:2d:58:a3:72:40:c7:9d:b1:c1:4d:ea:
ee:0b:3e:de:0e:d4:05:0c:1b:61:f5:64:a5:bd:f9:ab:c2:d0:
9d:bb:d7:30:83:79:79:c2:e4:6b:88:d0:ac:6d:cc:b0:f7:75:
5e:6b:ce:91:0d:dc:0d:b7:ba:53:e9:a7:ab:60:f9:9b:a0:13:
e0:1c:eb:00:46:84:f8:59:ef:d1:f0:a6:fd:96:e5:09:a4:45:
dd:99:2f:9c:51:16:e7:01:8f:c8:b2:7c:db:8a:ef:0a:48:18:
c5:be:66:df:41:95:6f:65:ef:bd:6d:45:19:74:3d:18:5b:46:
88:67:f5:c8:c6:b1:4e:89:d5:18:c4:31:d0:0d:23:bd:91:5a:
ef:05:c8:54:ca:74:a8:8f:88:50:d4:f5:77:7b:b7:2e:42:48:
13:19:70:72:14:42:07:94:03:42:8b:f2:64:68:8f:c1:f4:23:
d6:1c:fa:f3:6e:91:af:d7:8a:5f:54:b8:dd:80:07:7a:f9:6d:
a6:d8:cf:ce:bf:c5:9b:d6:2c:5e:07:cf:a1:03:1a:f2:d8:6e:
d1:db:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org