Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/b5mSAx7j_TDvnQAFuEK6n6KH1Zg.roa
File: b5mSAx7j_TDvnQAFuEK6n6KH1Zg.roa (raw, json)
Hash identifier: 3FkGSgliKrMOdHHcG1TXb75b8/DJSnz49XAYZWmRqwQ=
Subject key identifier: 6F:99:92:03:1E:E3:FD:30:EF:9D:00:05:B8:42:BA:9F:A2:87:D5:98
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01872BE82F4C1A7B31D36E9F3DF259BFD91F
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/b5mSAx7j_TDvnQAFuEK6n6KH1Zg.roa
Signing time: Wed 29 Mar 2023 05:47:29 +0000
ROA not before: Wed 29 Mar 2023 05:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200247
IP address blocks: 80.120.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:e8:2f:4c:1a:7b:31:d3:6e:9f:3d:f2:59:bf:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Mar 29 05:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f9992031ee3fd30ef9d0005b842ba9fa287d598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:9d:17:72:e1:70:8c:1a:51:75:85:5e:ec:
24:65:18:c7:9e:b5:00:43:18:e3:9a:10:ec:4d:cc:
c5:a4:29:1c:16:7b:6e:b5:5f:34:85:c8:1b:17:a3:
89:8a:bd:73:e9:2a:f8:20:de:f2:6c:ab:7f:81:cc:
27:b1:67:10:b3:52:97:11:43:7b:43:96:3b:bc:ea:
32:dc:c6:77:12:5e:b8:51:5e:d2:99:25:5e:3d:95:
ef:9f:de:1e:16:02:80:82:21:ac:df:fe:58:c0:80:
88:31:9a:c3:98:3d:fa:8d:f2:91:ae:6d:09:df:f1:
c6:e5:58:10:eb:ac:26:7e:e1:98:85:6a:88:6d:c6:
3a:ee:84:05:5a:b0:58:28:f2:8c:01:c0:6c:58:1e:
21:4b:9f:f6:6d:68:78:0a:c9:ef:9f:e8:1c:10:92:
7e:45:4a:a5:90:65:ba:33:8e:c1:57:c9:07:51:15:
6b:49:d1:f5:ab:2c:e6:52:ef:67:ef:71:9b:f7:1a:
b2:2c:53:49:7c:a9:c0:da:5e:b1:05:f2:03:87:79:
61:0a:47:c4:02:ea:7e:e1:11:30:33:84:80:2d:17:
dc:37:74:3d:8a:b8:5a:04:70:2b:5b:5a:d3:e3:f4:
a8:97:ed:61:fe:ea:ca:59:88:a3:ec:33:bb:c0:d2:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:92:03:1E:E3:FD:30:EF:9D:00:05:B8:42:BA:9F:A2:87:D5:98
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/b5mSAx7j_TDvnQAFuEK6n6KH1Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c2:76:5b:45:72:df:cb:ec:28:14:76:b0:d2:9e:b8:db:99:
38:13:d0:6d:d5:34:c4:d3:ea:27:22:3d:c6:02:df:cc:6b:d9:
36:15:e7:3d:57:7b:95:02:89:21:ee:e8:cb:0e:99:e6:a5:4c:
96:c3:ae:1f:1c:6c:58:b9:b7:6b:6e:71:0b:fe:58:cf:dd:8a:
d0:49:d7:2f:5b:ee:be:5f:b0:51:88:08:ac:1f:23:e9:6b:ca:
13:ac:02:e9:b5:48:b8:4c:c6:17:28:1c:38:98:15:b3:ec:de:
38:c1:3f:e9:90:f3:9a:87:d8:e7:89:26:93:f4:b9:35:00:30:
01:d5:af:d0:3f:0b:c4:ba:76:ca:44:79:c5:66:48:42:e8:43:
4b:76:34:8e:89:ca:fa:e4:bb:fd:bf:ee:0f:ab:45:d4:4d:2e:
53:49:2c:5e:28:d5:fe:69:47:12:d7:4e:ac:2c:23:24:79:4a:
c3:74:3c:2e:6d:26:ff:72:d7:a3:9c:cf:a3:cb:9c:1d:dc:9d:
5d:0e:b4:48:9a:bc:61:86:61:c1:19:0f:90:90:ac:8b:c0:de:
8b:97:71:fd:74:e3:a6:70:2d:bb:94:52:25:7a:2b:34:b5:13:
b5:e1:5e:4e:c9:c8:4f:8a:a5:12:49:22:2e:4a:47:cb:93:5b:
45:2b:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org