Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/RaBjGspkP1FAuZ5nzh1l3gSjp68.roa
File: RaBjGspkP1FAuZ5nzh1l3gSjp68.roa (raw, json)
Hash identifier: co5cfpa5u3nDS5dtIuH7NHXVq2Ih8fAmgHj2pK9NlDY=
Subject key identifier: 45:A0:63:1A:CA:64:3F:51:40:B9:9E:67:CE:1D:65:DE:04:A3:A7:AF
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D246005B75FA5B565F14F1266017BD
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/RaBjGspkP1FAuZ5nzh1l3gSjp68.roa
Signing time: Thu 28 Dec 2023 14:26:59 +0000
ROA not before: Thu 28 Dec 2023 14:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47570
IP address blocks: 94.100.0.0/20 maxlen: 24
94.100.2.0/24 maxlen: 24
80.232.163.0/24 maxlen: 24
94.100.6.0/24 maxlen: 24
94.100.7.0/24 maxlen: 24
94.100.8.0/24 maxlen: 24
94.100.9.0/24 maxlen: 24
94.100.11.0/24 maxlen: 24
94.100.12.0/24 maxlen: 24
94.100.13.0/24 maxlen: 24
94.100.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d2:46:00:5b:75:fa:5b:56:5f:14:f1:26:60:17:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a0631aca643f5140b99e67ce1d65de04a3a7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:1f:71:de:58:45:98:45:df:85:78:5f:ae:
fd:d0:fa:d9:c0:14:ff:e5:b9:0f:63:45:69:65:5e:
97:f9:b0:56:4d:69:d7:58:43:29:e7:c3:28:eb:22:
43:81:be:3d:9b:2f:04:b7:be:e1:55:f7:96:2f:4d:
94:4c:29:61:41:d4:75:35:55:d6:ed:a1:8b:fe:5c:
03:db:25:f3:4a:ef:e9:5b:18:b4:c7:7c:99:7f:2b:
bd:b7:79:3e:6f:c2:cf:2d:93:8c:72:af:04:d6:dd:
91:f8:c7:5b:0d:e0:e9:f8:5c:a8:dc:0a:1d:b0:03:
11:ee:8b:20:86:d7:e0:e8:20:d3:45:ef:a7:0d:f7:
4e:3d:3d:b7:18:a5:43:64:f1:c5:f6:7b:48:66:a2:
3b:d9:3c:55:fc:66:92:97:69:8a:11:1a:c6:d6:18:
be:1b:bf:12:26:76:4a:a1:61:3a:f9:3c:bb:e1:44:
da:9d:73:7a:c0:95:40:3f:05:84:a8:73:66:2e:8c:
6c:0e:53:86:24:45:0d:1e:7f:c5:62:e6:c1:60:8a:
d8:2b:01:ee:3f:35:49:b5:59:7f:1b:c0:d8:6d:64:
a5:32:84:9a:e9:36:0d:1e:76:8f:62:6c:10:d6:8f:
13:9b:43:c5:e1:41:0b:5e:a3:85:5a:bc:a0:fb:68:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:63:1A:CA:64:3F:51:40:B9:9E:67:CE:1D:65:DE:04:A3:A7:AF
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/RaBjGspkP1FAuZ5nzh1l3gSjp68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.163.0/24
94.100.0.0/20
Signature Algorithm: sha256WithRSAEncryption
39:72:4b:ab:db:d6:2a:15:b2:d5:ce:7d:64:89:34:73:5c:84:
3e:09:ce:5f:56:0e:7a:f1:a1:ce:04:c3:a0:1f:2a:db:16:9e:
40:12:1f:9d:53:3a:db:2c:4f:d7:bb:49:b6:69:71:4a:c3:c8:
81:8f:52:3c:35:95:26:54:b6:60:6d:b5:4a:44:8f:a2:70:81:
9c:a3:90:54:5c:d0:63:56:b9:6c:1f:4a:6b:a8:79:e9:74:ac:
19:36:91:5f:f7:f9:f4:04:da:e3:11:f1:d2:27:c1:cc:c2:f6:
18:9c:3a:05:1d:4b:a4:ad:db:54:17:74:11:d1:0a:b3:a0:9e:
29:2d:0b:50:b5:74:50:67:5d:6c:95:90:01:27:62:7c:c5:bf:
a8:50:2a:94:29:50:73:29:20:ed:9e:c0:2f:e4:5e:66:c0:48:
e6:90:e5:18:7c:86:79:af:10:78:9c:37:f7:6a:02:91:d0:b7:
6e:b6:73:66:a1:1d:c2:5e:2f:26:3e:94:3d:71:5b:ea:9f:04:
d7:8f:42:af:33:f4:25:9d:61:91:56:1f:41:04:e7:f6:99:8d:
2c:4b:bb:55:1f:00:86:0f:21:db:a2:11:2b:f1:51:a5:a7:bc:
d6:d3:38:ae:7c:ce:76:b3:48:32:25:f0:60:ba:c7:ed:44:b5:
19:48:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org