Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/bjj4CPCSLxj40qBB00SFvZOm_8o.roa
File: bjj4CPCSLxj40qBB00SFvZOm_8o.roa (raw, json)
Hash identifier: nBupzf/cKY0VsFFh3QVR1imPJMqShVYQN0/pYC8fFpE=
Subject key identifier: 6E:38:F8:08:F0:92:2F:18:F8:D2:A0:41:D3:44:85:BD:93:A6:FF:CA
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DD4265598794CDB28B931AD86569A
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/bjj4CPCSLxj40qBB00SFvZOm_8o.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207868
IP address blocks: 80.120.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d4:26:55:98:79:4c:db:28:b9:31:ad:86:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e38f808f0922f18f8d2a041d34485bd93a6ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:60:4d:f1:a2:2b:4f:6f:ba:d1:95:89:be:
28:0e:5e:5d:f0:72:36:40:51:0b:76:c4:cc:85:df:
d8:56:26:c4:c7:59:1b:9a:10:ba:41:ef:e6:2c:24:
36:63:98:64:f5:a4:0e:6a:e5:f5:bd:47:db:5f:10:
86:8d:f8:9b:65:bd:21:0e:c8:68:c5:66:f7:f1:79:
24:52:57:2a:5c:b4:a3:18:28:38:7c:4e:6a:e3:a9:
40:ec:1a:a5:b3:5a:6c:1d:d0:49:1a:a9:ef:44:a3:
8a:d7:2f:79:95:a5:86:52:fc:bf:3e:38:8c:5e:f1:
70:2e:d6:ef:16:72:c7:bb:32:40:79:80:0d:6b:85:
c7:71:c5:7e:bc:69:e0:0c:8c:43:fc:33:16:ad:8b:
78:cf:1a:4a:ad:d5:de:1f:59:7b:13:52:7b:2f:4e:
33:0d:97:1f:85:a5:aa:e0:69:f4:79:fa:b6:9d:81:
5c:8f:71:0c:d1:ec:5b:09:4e:ca:6f:a4:b2:ae:a7:
34:fd:d9:e6:36:57:74:45:6b:82:26:2e:92:06:f7:
fe:04:74:38:63:55:2b:09:c6:bb:e5:df:60:60:45:
44:93:5e:57:97:3d:25:bd:32:a0:5b:10:9f:89:0a:
f1:44:e3:cf:e9:d9:0c:02:7f:d2:ab:20:d2:b0:82:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:F8:08:F0:92:2F:18:F8:D2:A0:41:D3:44:85:BD:93:A6:FF:CA
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/bjj4CPCSLxj40qBB00SFvZOm_8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8c:fb:ba:05:39:4e:df:54:68:45:6b:1c:93:bf:60:eb:c3:
d6:60:b9:39:fd:df:b7:5b:6c:f5:4e:88:32:5e:bd:7c:82:9f:
ef:45:fe:ed:30:b1:ae:29:49:fa:f0:0f:52:e7:65:5e:c5:d2:
c8:b0:44:02:23:38:b2:a4:d7:63:55:c2:87:47:e0:30:84:a3:
7b:f2:74:50:a2:0e:cc:a2:a2:cf:a2:e8:87:b8:24:33:4b:51:
50:96:8e:94:a4:78:48:4d:de:b7:b7:20:b4:4c:4e:b5:ff:a3:
41:a0:e0:3b:e5:e0:d7:01:00:89:88:31:85:f1:7f:b0:b9:c7:
a5:91:b0:de:82:9d:c3:ad:c8:6c:55:5b:50:2c:bf:fe:dc:b2:
3a:9c:12:63:0e:14:3c:74:fc:3a:12:4d:c6:b2:89:19:5e:7f:
ae:4b:61:ca:24:bc:9e:92:90:b1:39:c4:42:f0:b2:d2:42:a2:
34:da:93:fa:21:b0:62:5f:13:84:ab:5f:c7:f0:fb:d4:2a:06:
37:d0:78:41:5d:67:60:34:a3:56:84:63:2a:96:22:e1:6c:a1:
96:39:f1:b5:74:de:98:db:94:d9:1f:65:e7:91:34:81:2a:dc:
96:8b:3a:eb:53:f9:d1:03:b6:f5:aa:49:c9:aa:95:3a:dc:4f:
b5:6e:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:49 2024 by rpki-client on console-ams.rpki-client.org