Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/v6tlrHUiyBtbW47_zzcBUlyGg48.roa
File: v6tlrHUiyBtbW47_zzcBUlyGg48.roa (raw, json)
Hash identifier: /OWLMCdt9CGQTs8r+tAQ3We0n2Lfm0IXlatZ5Fl06xs=
Subject key identifier: BF:AB:65:AC:75:22:C8:1B:5B:5B:8E:FF:CF:37:01:52:5C:86:83:8F
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0185F9B503EEB77352DDFA439AD3E13A44AC
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/v6tlrHUiyBtbW47_zzcBUlyGg48.roa
Signing time: Sat 28 Jan 2023 18:47:47 +0000
ROA not before: Sat 28 Jan 2023 18:47:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 80.90.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 09:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f9:b5:03:ee:b7:73:52:dd:fa:43:9a:d3:e1:3a:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 28 18:47:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfab65ac7522c81b5b5b8effcf3701525c86838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:26:0c:3c:28:71:09:a2:df:bb:1d:1f:7e:
83:52:f8:09:f0:63:7b:77:20:4d:03:d1:6c:aa:f6:
20:f0:34:90:2c:8c:f0:f8:97:d8:ee:6c:68:22:a6:
31:6e:2b:46:d0:2e:4c:eb:5a:48:c6:1c:91:e2:0f:
b3:53:6b:34:be:e5:0d:ab:39:91:3f:db:b5:12:de:
98:ef:6a:69:fb:a7:02:f4:ff:b8:c3:ce:b2:3b:9d:
41:01:34:d9:fc:eb:49:cd:67:2e:2e:f3:cd:68:e1:
ed:8c:b0:63:47:2c:a0:55:8b:d0:14:bd:f0:7f:83:
a6:1a:c3:a2:9a:4d:b6:10:90:fc:cb:b2:57:a0:15:
12:7a:82:40:23:a8:40:48:e6:41:48:2e:bd:c7:3d:
e8:db:2a:a3:9d:b0:72:5a:51:a2:91:f0:4a:62:98:
c1:a8:a3:fe:4f:14:49:77:09:b3:43:44:f7:ff:f7:
f4:d0:8c:6c:ee:e2:2e:32:da:b0:0b:7c:15:c7:03:
c1:e2:42:bd:aa:0c:77:58:bd:20:2f:a3:1d:ef:78:
70:a4:95:39:22:a7:98:2d:a8:5a:3e:62:ce:bd:77:
31:34:d6:b2:77:3c:f4:e1:15:65:88:82:5e:48:2d:
3e:80:9c:c7:8f:ea:fe:f5:4a:20:7f:75:f3:14:f2:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:65:AC:75:22:C8:1B:5B:5B:8E:FF:CF:37:01:52:5C:86:83:8F
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/v6tlrHUiyBtbW47_zzcBUlyGg48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.184.0/21
Signature Algorithm: sha256WithRSAEncryption
11:7f:49:f5:43:cf:69:df:1f:fe:b3:e6:0c:e7:65:d6:a9:47:
ab:c0:16:c0:06:d9:2c:eb:b1:a6:8a:2d:94:e6:e4:c6:f5:85:
ff:0a:0f:93:67:e1:61:68:76:d8:96:a2:60:3d:91:ec:e3:85:
ad:5b:98:d7:d2:56:f2:f7:b6:4e:5b:4e:b4:11:4e:61:ec:90:
24:47:0d:2e:37:ec:58:c8:3a:91:6c:1d:58:63:51:ec:0a:6e:
27:30:27:f3:2e:84:e5:e7:7a:a4:66:82:ae:30:f9:ea:f0:91:
ce:15:d8:31:fe:35:e5:2d:64:e6:23:ee:f5:19:c3:ff:c2:56:
f9:a1:4f:b6:a7:f0:45:55:7d:49:b9:c3:13:42:f4:b1:49:a2:
45:a0:46:ae:d2:d9:63:11:a3:c1:8c:77:61:49:61:fe:03:29:
ed:45:a9:86:cf:d0:50:46:ff:bf:23:62:c5:8d:b9:bf:47:61:
70:b5:88:37:bd:3c:f7:14:fd:36:f5:a6:a5:75:b8:18:6d:ce:
64:9f:6c:05:61:3a:97:29:94:3a:52:6a:7d:3e:40:cc:de:44:
39:05:d7:ad:d6:99:88:d9:a9:02:fc:38:e1:db:fb:ae:76:6c:
b0:b8:76:25:1d:2b:ff:aa:78:a0:fc:0c:78:64:c5:ef:b7:60:
e9:6f:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org