Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62H6Iw2zYbTVczL8nj_OIKMMqCU.roa
File: 62H6Iw2zYbTVczL8nj_OIKMMqCU.roa (raw, json)
Hash identifier: /zLSKxlZ6AH1sPyl8nkNoJL3fQWRJnxzfts0qJfM194=
Subject key identifier: EB:61:FA:23:0D:B3:61:B4:D5:73:32:FC:9E:3F:CE:20:A3:0C:A8:25
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A98199DAC491755E477B8866BD781843E
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62H6Iw2zYbTVczL8nj_OIKMMqCU.roa
Signing time: Fri 15 Sep 2023 09:08:50 +0000
ROA not before: Fri 15 Sep 2023 09:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43956
IP address blocks: 80.233.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:19:9d:ac:49:17:55:e4:77:b8:86:6b:d7:81:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb61fa230db361b4d57332fc9e3fce20a30ca825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:9b:54:cd:8a:cd:95:09:6c:b2:a1:0c:4c:
76:91:d8:ef:ca:07:be:72:62:22:42:19:46:e7:36:
b4:35:5a:76:7e:44:7a:af:6e:20:5b:d3:e9:43:dd:
9f:dc:fa:b5:45:57:c4:43:75:78:0c:54:a3:07:2c:
fc:4c:56:1c:b6:b6:7b:71:02:1b:68:ce:a0:fc:96:
64:92:e6:00:61:10:b0:47:29:08:e8:10:51:19:25:
eb:9a:74:74:c7:91:a5:ea:93:2f:8e:ab:12:5f:40:
c1:c1:c6:12:79:cb:f7:67:c9:79:ff:5c:67:79:1f:
ac:85:de:48:00:5f:a4:c0:dc:71:c2:42:2f:1c:31:
b4:28:49:d7:04:e6:7c:e3:cb:61:5c:25:2c:52:77:
8d:68:a4:e3:82:83:80:b8:32:f2:4f:38:de:5c:93:
87:71:40:23:13:66:8c:d5:5d:b9:6b:6c:28:31:2f:
cf:5f:9a:62:18:2f:a1:50:43:48:ce:7c:a9:2b:1f:
6a:b1:59:f5:3c:dd:70:26:e2:73:0d:62:d1:c6:37:
c6:e7:f1:0a:16:bf:94:cc:cf:52:90:ea:7d:31:76:
02:83:2b:9e:2a:06:5c:d5:c0:0d:48:23:e3:4d:12:
60:b7:09:06:77:c5:f5:83:ac:aa:0f:4e:22:bf:9f:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:FA:23:0D:B3:61:B4:D5:73:32:FC:9E:3F:CE:20:A3:0C:A8:25
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62H6Iw2zYbTVczL8nj_OIKMMqCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b1:2d:3f:8c:66:2a:a5:52:95:e1:64:bd:98:29:7c:21:ee:
a6:72:7a:00:60:4b:55:24:0e:b7:e6:8e:6d:ac:36:ed:c3:f2:
28:0c:47:78:24:06:da:f3:bd:1a:4d:e1:c0:35:15:ca:bb:bf:
54:55:50:a0:a2:84:63:9b:a7:2f:4d:87:75:9a:bf:f7:ab:49:
c5:1e:d0:f4:19:7d:38:0d:82:b0:29:bf:09:41:0f:97:6f:05:
0d:cb:04:3b:76:0c:8c:73:e2:f0:5d:8d:14:2c:81:eb:b2:7a:
b6:d1:f7:f1:84:a7:8d:dc:24:a2:62:1e:9d:40:a0:bd:ce:93:
44:71:47:58:91:15:10:f3:6d:78:93:f5:32:9f:51:a6:64:e2:
b1:32:11:41:e6:48:d7:67:0f:d0:b1:05:bc:75:ab:51:ff:92:
37:01:04:9c:66:23:9a:c9:4b:69:bf:c7:af:82:52:28:30:74:
08:f6:4d:90:fa:5d:22:2c:f8:cd:a9:ae:eb:83:1e:c4:48:a3:
5a:2c:d2:75:24:b4:04:74:5e:3c:cb:6f:06:81:c0:54:78:3d:
4c:12:f9:0c:58:f6:84:bc:6a:35:46:4d:46:cb:ef:e2:81:df:
e2:33:d1:03:5e:92:12:3f:38:fb:2f:74:50:17:04:65:7d:30:
15:a9:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org