Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/THbXTXMCRiAPMvDlaagTDcqFCcI.roa
File: THbXTXMCRiAPMvDlaagTDcqFCcI.roa (raw, json)
Hash identifier: 1ui+HQNlZEt4lfoFwakJM1c69FgzRPXIM3PC1hphLEs=
Subject key identifier: 4C:76:D7:4D:73:02:46:20:0F:32:F0:E5:69:A8:13:0D:CA:85:09:C2
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AEE633270E7D9DC0D88BD27B20DC6
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/THbXTXMCRiAPMvDlaagTDcqFCcI.roa
Signing time: Sun 01 Jan 2023 11:15:10 +0000
ROA not before: Sun 01 Jan 2023 11:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59706
IP address blocks: 80.250.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 10:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ee:63:32:70:e7:d9:dc:0d:88:bd:27:b2:0d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c76d74d730246200f32f0e569a8130dca8509c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:fc:97:e2:05:36:7f:31:56:b1:fe:51:c1:
06:4a:c8:5a:14:8b:8f:b4:ba:87:d3:28:3d:cf:76:
2c:73:87:90:0a:6b:42:94:17:b8:ad:dd:0c:5f:b0:
3a:d2:87:45:07:f8:1c:8a:da:e9:4f:c4:ad:9b:b6:
0b:c3:f3:37:44:6d:f3:39:6e:f9:34:1c:f2:d6:01:
6a:91:23:81:d1:d2:07:bb:75:f7:57:b3:89:00:02:
90:ef:eb:fc:94:e1:e5:5e:bb:70:89:16:06:4b:7e:
9a:73:0d:91:d9:13:f6:fe:06:f2:95:29:c5:86:fc:
df:45:ea:19:53:86:8b:89:4a:6e:fb:93:79:aa:c6:
b5:72:9e:f7:33:05:27:41:71:ae:96:3b:98:ac:f2:
0c:ae:58:3d:f8:a5:ce:55:b1:56:d0:a5:61:d8:bf:
99:15:a5:8a:df:98:a1:e9:29:37:ae:36:55:77:e9:
0c:f7:0e:da:60:45:a5:de:3e:cb:dd:c9:ae:3a:d8:
cd:18:a0:4f:0e:bc:19:69:d8:9d:37:df:c6:6f:8a:
b6:96:3e:52:1f:fc:f6:c6:b9:09:15:d8:ef:22:75:
27:68:aa:03:18:83:75:a6:29:cd:46:fc:b1:47:b6:
a1:d8:6b:3b:65:b8:a2:d8:94:c0:d6:22:9d:ea:ef:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:D7:4D:73:02:46:20:0F:32:F0:E5:69:A8:13:0D:CA:85:09:C2
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/THbXTXMCRiAPMvDlaagTDcqFCcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:19:da:3c:b3:92:4f:02:ca:6d:a0:be:44:5c:ba:36:72:5f:
8c:0c:dc:fa:e8:45:46:e1:09:bc:29:3d:24:8b:d6:da:f4:b7:
d6:cf:5a:62:79:46:41:6b:59:ae:7e:e3:9c:88:fd:22:0e:da:
91:a4:6d:b7:12:b0:f7:3f:e4:59:f0:74:47:d2:d2:68:de:06:
7a:34:d1:2a:2f:f3:cd:d2:67:e1:c7:f4:d5:e4:77:c2:48:3e:
a4:4d:b2:11:64:e8:e3:be:80:39:7d:43:88:71:71:3a:8a:ef:
76:5f:51:85:71:eb:cc:fb:8a:e3:a5:95:46:e6:f2:af:12:a1:
74:fc:ab:6b:1e:54:15:4a:6e:ac:e1:ec:92:0c:31:77:6f:bd:
65:9b:2d:80:59:99:44:28:9f:e7:94:ca:53:e0:b2:a2:bb:74:
f1:b8:89:3f:d7:b5:03:6c:bb:fb:68:ed:35:3b:2c:c8:f5:7d:
1a:6f:b7:f1:cd:8e:84:ce:80:1c:21:3f:ed:87:a0:92:2b:cb:
07:a1:0b:46:f0:8d:8c:16:d0:16:d5:b1:61:b7:fa:35:75:b4:
79:01:86:d5:53:b8:98:b7:4b:6f:6a:4d:be:bf:58:08:84:75:
f8:21:b6:36:59:59:69:99:11:67:04:21:d1:02:7f:91:d7:8a:
ab:49:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org