Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/P1GRZhXvZlZb_fGLLILeItffbKk.roa
File: P1GRZhXvZlZb_fGLLILeItffbKk.roa (raw, json)
Hash identifier: y3RJ89e8wlwTOMRfqryeIa38YbApyxg/npZ0bOkLrUw=
Subject key identifier: 3F:51:91:66:15:EF:66:56:5B:FD:F1:8B:2C:82:DE:22:D7:DF:6C:A9
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DC7F41E7C9DE772F97CE509F21344
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/P1GRZhXvZlZb_fGLLILeItffbKk.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34905
IP address blocks: 80.120.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c7:f4:1e:7c:9d:e7:72:f9:7c:e5:09:f2:13:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f51916615ef66565bfdf18b2c82de22d7df6ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ef:cc:8d:8a:7d:e6:2b:18:a4:88:83:93:fd:
8f:76:52:3e:58:6e:21:3f:5c:d4:71:c2:11:b2:20:
ba:e6:4a:a0:38:85:21:3e:32:38:5b:6a:8d:16:48:
66:35:48:e7:c8:bc:3b:b4:21:1c:7d:12:d5:d8:3e:
74:59:3e:46:59:97:e7:52:48:65:35:b1:86:79:d6:
9e:64:2d:06:28:70:3e:4c:34:05:8d:c7:c3:60:01:
d5:04:d0:91:19:cc:f3:f1:e5:0b:e4:69:9a:c3:bd:
cc:8c:7c:cc:3d:63:c2:fd:be:81:20:88:04:53:95:
b9:0e:5b:43:40:ad:11:84:e3:ae:3e:83:f3:d5:24:
b9:86:2a:68:12:8f:f7:62:30:fe:46:75:ad:06:54:
bc:be:5f:45:68:5f:c9:86:00:e0:69:0f:19:49:e9:
e6:69:16:c9:6c:c3:06:84:92:fb:83:d2:77:ab:a8:
bf:32:be:1f:17:69:79:d1:6f:eb:34:23:04:ec:70:
c1:d5:0d:b2:e9:21:e8:be:75:f5:a0:38:a4:4d:ae:
ae:1a:0c:60:29:2e:a5:77:a1:d0:58:53:16:e8:6c:
0d:c4:3f:e4:e3:fa:aa:d0:a9:6b:5d:ec:f3:0a:1c:
3f:21:d8:2d:21:27:97:da:41:aa:c5:91:dc:b8:8c:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:91:66:15:EF:66:56:5B:FD:F1:8B:2C:82:DE:22:D7:DF:6C:A9
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/P1GRZhXvZlZb_fGLLILeItffbKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:93:de:b7:43:3c:6b:5f:69:27:96:9e:1c:90:2b:1f:17:6e:
63:ce:8b:5c:78:7e:b8:e7:63:f5:1f:3a:f0:fd:3b:e4:a5:85:
f0:94:70:a7:0f:d1:cd:35:fe:78:a0:ca:06:93:9e:b3:67:aa:
f1:0e:c4:54:45:32:8d:5c:7d:ea:dc:5e:33:9d:ef:f8:fc:30:
41:15:5d:9d:e7:d7:cb:a9:b3:3d:c7:8d:ff:af:15:52:4c:4c:
90:d0:51:5b:91:36:8c:04:e9:d9:df:08:f3:02:af:2a:c8:1e:
0b:85:af:f3:c2:ec:bc:b6:31:0a:a2:90:df:93:d0:92:6d:81:
14:c4:c4:30:7e:39:58:22:40:fb:8c:6c:bb:e0:40:04:35:e8:
b1:33:67:1e:c0:fa:bb:a2:2c:6c:d7:04:46:51:54:5f:89:6c:
c7:0a:5c:68:66:cb:20:95:f5:64:3c:5c:92:f2:73:64:c6:16:
43:5f:93:46:2a:5a:5d:6e:c2:68:f7:90:7d:81:3b:bc:73:8b:
99:8e:03:b7:23:d4:94:a8:f2:d8:78:f9:b7:77:a4:f0:81:3e:
6a:d1:65:ea:a3:6d:99:0d:69:0a:df:8a:d7:d8:a8:e4:61:d1:
f0:f4:67:c5:8b:39:1b:1a:f3:a2:85:af:0e:ee:91:87:ad:c6:
e3:d8:f6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org