Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7-pdtn8_oGs_T_ORa25Lj8e6wHM.roa
File: 7-pdtn8_oGs_T_ORa25Lj8e6wHM.roa (raw, json)
Hash identifier: pASqQihXSDc14YDL/o/p6HBVj8ivyZgUzot1Undeo/s=
Subject key identifier: EF:EA:5D:B6:7F:3F:A0:6B:3F:4F:F3:91:6B:6E:4B:8F:C7:BA:C0:73
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AF03A3E42D50D1C06F3E4DB70F1A0
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7-pdtn8_oGs_T_ORa25Lj8e6wHM.roa
Signing time: Sun 01 Jan 2023 11:15:11 +0000
ROA not before: Sun 01 Jan 2023 11:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198444
IP address blocks: 80.250.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:f0:3a:3e:42:d5:0d:1c:06:f3:e4:db:70:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efea5db67f3fa06b3f4ff3916b6e4b8fc7bac073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:25:fc:dc:1d:3c:dc:68:f3:ab:40:c5:1c:
30:46:e3:f1:5a:55:db:21:b0:61:03:e5:26:d9:7d:
14:27:e6:e9:67:99:16:70:49:e6:25:b5:3b:45:dc:
b4:31:81:77:5f:f1:5a:ff:fc:eb:70:8d:51:7a:31:
c4:e1:1b:f3:67:f3:d1:e5:09:e9:fd:f4:88:f1:6a:
7c:ad:06:f3:21:6a:a3:de:a5:e0:ad:f3:0d:24:27:
95:68:28:34:e1:f6:d1:45:4d:4f:68:fd:30:29:17:
63:f0:e0:ee:61:20:99:58:5b:59:83:19:4f:be:84:
ec:c1:05:fe:cc:24:b0:ed:e7:2c:ad:26:cf:00:37:
f2:2c:db:65:98:7a:30:c8:5a:3b:78:49:bf:30:46:
c9:a1:15:ba:0d:6a:23:a3:c3:bc:42:69:ce:95:b3:
f9:f7:64:88:fd:74:7a:7f:2a:64:c4:76:6f:06:e5:
ac:53:fe:53:91:a8:3b:83:94:60:a5:d7:5a:11:89:
5c:57:db:a8:1e:a0:a1:05:23:d7:2e:e9:cb:0a:2c:
cd:04:45:de:31:f0:68:77:81:61:84:41:a6:97:f5:
61:f7:e2:7c:04:75:81:76:0c:78:63:40:18:cb:b7:
5b:ac:3a:5f:9e:c9:d7:e6:28:de:39:f6:6c:83:b8:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:5D:B6:7F:3F:A0:6B:3F:4F:F3:91:6B:6E:4B:8F:C7:BA:C0:73
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7-pdtn8_oGs_T_ORa25Lj8e6wHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a1:02:23:83:ed:75:a0:5b:a2:d9:0f:32:fd:66:c8:2d:9f:
06:3a:55:3d:e0:3f:30:f9:0b:ff:ee:bd:11:9e:13:0d:e2:81:
7c:88:f0:dd:d5:d7:79:12:00:c5:ed:78:d0:f8:9c:23:40:1d:
4f:ff:39:83:08:59:07:f5:37:fe:94:f7:c9:e8:e1:06:97:19:
1f:13:45:8d:11:ad:e7:24:76:b7:95:5b:0a:a5:9c:98:65:bd:
46:ef:8a:66:c5:75:82:f4:38:d5:d7:c1:61:e9:3a:ca:ec:e6:
17:b1:b8:ee:44:4c:75:1e:c3:6c:25:10:5d:42:80:b1:39:e1:
ff:b9:f8:ac:a1:5b:2d:e5:40:a9:b4:95:c7:de:36:9b:64:72:
b9:9e:5e:91:41:09:65:47:e7:06:dc:cb:71:99:2e:d1:06:c7:
14:20:bf:98:c8:5d:ab:d5:6b:f0:da:e1:6e:6b:0c:b4:12:29:
a2:d5:c7:75:1f:ee:e2:40:12:93:ac:b0:4b:49:1a:d8:c9:a5:
9c:2a:bf:eb:99:16:60:7c:c4:bf:7e:92:f8:0e:a0:d4:7b:cf:
18:e0:aa:2c:89:cb:26:bf:25:41:a4:5b:95:7a:da:cb:17:97:
fc:e1:36:c1:2c:44:fa:08:51:71:cb:da:a9:78:b9:67:01:b6:
4a:32:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org