Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/l74DrgrKd9ZdjaunrXcWJ1RgmmY.roa
File: l74DrgrKd9ZdjaunrXcWJ1RgmmY.roa (raw, json)
Hash identifier: Szif3IlZAFWGIBES6T1Ery5nZ1FKeY3N0YwGsWWwAjQ=
Subject key identifier: 97:BE:03:AE:0A:CA:77:D6:5D:8D:AB:A7:AD:77:16:27:54:60:9A:66
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 01857343895580A2250E4F155F008F2E0BC8
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/l74DrgrKd9ZdjaunrXcWJ1RgmmY.roa
Signing time: Mon 02 Jan 2023 16:14:43 +0000
ROA not before: Mon 02 Jan 2023 16:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24806
IP address blocks: 194.182.64.0/19 maxlen: 24
80.211.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:89:55:80:a2:25:0e:4f:15:5f:00:8f:2e:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 2 16:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97be03ae0aca77d65d8daba7ad77162754609a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:6a:c5:ef:17:df:3e:15:f1:bd:ee:68:a6:
6d:d2:90:e3:8b:2e:51:36:70:65:b2:24:b4:3b:78:
a0:32:b0:ad:76:63:7d:59:af:33:f4:38:c6:c6:b3:
12:88:4a:d8:ea:ee:3e:de:3a:8d:64:24:a0:04:7e:
4a:7a:00:76:12:17:cb:b4:67:bd:2c:4d:dd:a4:ec:
46:d5:99:1e:3a:86:03:b6:03:e9:c2:6b:77:52:12:
e5:65:e0:71:14:ff:4c:df:88:f9:69:8c:5b:81:bb:
b6:64:04:02:89:e6:72:27:dc:f2:46:e2:4b:af:c4:
ff:a9:43:d2:e7:51:51:74:86:84:df:e8:ea:1d:a3:
d4:a2:9d:5d:b8:d6:90:ad:5c:b0:a9:b5:aa:ad:66:
55:de:a5:db:29:48:e3:90:e9:c1:56:2b:ca:19:1b:
8e:a1:a0:cd:d3:12:5e:3c:50:72:c4:d5:4f:8a:22:
db:bb:1f:ff:73:3b:bc:71:50:0c:12:e1:0e:06:2b:
4a:b8:36:7c:6a:d7:10:4e:86:c9:58:55:a8:39:4e:
34:29:ae:e9:3f:4e:10:0f:66:9e:ad:03:85:17:74:
72:54:48:af:4e:0a:61:72:a2:c7:91:61:ba:84:54:
2d:11:d9:37:cd:d3:10:2f:90:af:80:d4:19:3f:81:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:03:AE:0A:CA:77:D6:5D:8D:AB:A7:AD:77:16:27:54:60:9A:66
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/l74DrgrKd9ZdjaunrXcWJ1RgmmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.211.192.0/19
194.182.64.0/19
Signature Algorithm: sha256WithRSAEncryption
32:16:c5:58:14:05:d2:ad:92:1e:b0:8d:2d:b7:bd:69:99:15:
7b:73:e2:ed:14:98:66:3f:44:2d:13:30:84:4f:c0:0f:5e:63:
6e:04:3d:31:70:06:03:1d:12:2e:fc:42:f7:d9:dd:cf:55:d1:
ec:c3:b4:3b:26:bd:da:a7:db:ab:81:96:45:5b:1b:a9:40:3c:
89:1b:85:ea:95:f8:61:d6:b1:33:aa:64:ff:09:c8:55:dd:f8:
56:07:a4:ce:93:6e:de:8e:a2:6f:3f:14:31:4b:ac:24:87:0f:
2b:56:8d:fb:03:31:b6:55:61:9b:13:40:43:da:dd:53:97:20:
68:3b:e3:af:fb:9e:e3:53:f7:ab:81:eb:d7:25:fe:a6:4a:b8:
bb:2c:c1:46:ac:e8:b6:f9:bd:57:72:8b:a1:20:a7:2d:22:28:
36:e1:0e:b1:60:cd:ce:17:d5:00:f1:39:d9:f9:a9:13:8c:e5:
62:9a:2d:9b:5d:0c:7d:b3:6e:43:de:12:1e:42:9f:8f:c3:2d:
17:87:74:43:a4:df:75:b0:6a:ae:61:52:b1:06:ac:c5:35:52:
1c:5e:89:ae:3a:25:0a:94:21:53:6d:91:03:e1:82:40:8e:7b:
7b:08:9b:4d:13:dc:5a:1b:a1:6e:0d:9b:ca:40:05:01:41:47:
72:e8:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:32 2024 by rpki-client on console-fra.rpki-client.org