Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/2JprySXYCpsvsaDTocCNC0LUurw.roa
File: 2JprySXYCpsvsaDTocCNC0LUurw.roa (raw, json)
Hash identifier: x7jsnIf5FRsHk54WnJC2POv6SAQuTzToUIXVqmeSEXQ=
Subject key identifier: D8:9A:6B:C9:25:D8:0A:9B:2F:B1:A0:D3:A1:C0:8D:0B:42:D4:BA:BC
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DD115295625E1F250C9E21FAD30C6
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/2JprySXYCpsvsaDTocCNC0LUurw.roa
Signing time: Sun 01 Jan 2023 22:04:57 +0000
ROA not before: Sun 01 Jan 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202856
IP address blocks: 80.120.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d1:15:29:56:25:e1:f2:50:c9:e2:1f:ad:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d89a6bc925d80a9b2fb1a0d3a1c08d0b42d4babc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:e9:63:42:b2:1e:c1:74:b4:86:34:bf:d2:
08:82:1f:02:aa:f3:76:b9:f7:5b:51:f0:39:77:49:
0b:f9:de:f9:3a:dd:82:b8:07:df:4c:ca:08:84:c9:
61:0c:ba:84:b8:60:c7:f8:f9:62:da:58:ca:59:9b:
98:a0:dd:c1:61:3d:a3:3b:d8:35:3e:be:e0:94:38:
a3:c8:2d:02:d3:8b:7c:11:9f:fa:c4:03:5c:3c:06:
06:11:42:ca:bd:e9:c7:91:22:2c:fe:eb:69:12:52:
7b:f4:38:53:48:0f:2d:17:b8:48:4e:7c:c7:9b:b6:
a0:21:8e:b6:ff:2a:9f:23:18:26:04:45:0f:96:16:
02:d9:40:b5:e1:45:19:4d:23:06:20:da:20:0a:12:
b0:bf:12:d7:e9:2f:d8:88:48:60:34:8c:33:19:04:
df:67:65:62:f5:75:9d:92:71:9d:57:cf:15:0e:73:
ea:e6:83:44:f4:0b:f5:f9:d7:4a:ec:8c:7f:ed:7d:
d0:7b:d5:0b:0c:1a:d2:9b:13:aa:17:2e:be:cb:29:
72:ad:91:1a:df:24:f5:da:34:87:b5:0b:f1:e1:69:
6a:51:2d:ca:e8:10:00:79:4b:82:f0:71:85:fc:96:
ed:0c:3a:7a:31:65:2e:30:bf:d4:b2:75:92:f3:0e:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:6B:C9:25:D8:0A:9B:2F:B1:A0:D3:A1:C0:8D:0B:42:D4:BA:BC
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/2JprySXYCpsvsaDTocCNC0LUurw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.145.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cf:47:69:3f:f3:59:77:21:b3:9e:d4:32:15:8b:4e:5d:90:
2c:66:42:04:79:2b:f3:6b:99:f6:d3:77:10:9f:14:b1:ec:bf:
58:b0:fa:f0:c7:ce:f2:4d:0e:cc:c4:5f:da:fd:30:55:9b:8c:
ba:b5:e7:cf:2d:1a:7e:72:0e:5b:ce:4c:77:f4:99:53:65:9e:
ab:90:13:20:4a:65:9e:1b:09:f0:e1:fa:d5:70:25:be:c1:a5:
8a:ea:82:cb:92:98:2d:b9:c9:d5:79:10:c5:29:1f:ed:89:f1:
ee:32:66:98:23:28:fe:70:da:1b:07:54:02:1f:ae:cc:4f:1c:
10:38:87:47:44:d9:43:ff:9e:4b:0a:d8:4f:30:02:bb:c0:8c:
a1:dd:1b:59:29:e9:e6:ab:6a:45:67:1e:27:95:46:23:d7:0e:
c0:1a:b3:01:86:ed:ff:49:2d:31:44:ea:eb:38:9b:3f:fa:8c:
12:36:f8:1b:14:79:c6:70:19:c9:4e:a7:fe:e9:57:84:0c:ca:
24:78:26:0c:13:2b:b9:99:dd:51:3c:85:28:4f:23:cf:be:fe:
d1:e5:c8:b4:58:4b:4c:f9:47:1f:47:21:1a:5c:ed:cb:7c:84:
b4:9b:b0:00:7b:fd:06:e8:1d:b4:e2:24:04:e2:09:8c:11:98:
0b:56:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:34 2024 by rpki-client on console-fra.rpki-client.org