Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/T1VBDX9ne0KE3iJK75WJsVOaSCs.roa
File: T1VBDX9ne0KE3iJK75WJsVOaSCs.roa (raw, json)
Hash identifier: CnGwvMbFn2kNX+CJr0CBaQVl9nBzywkcvCnaYOK7B4A=
Subject key identifier: 4F:55:41:0D:7F:67:7B:42:84:DE:22:4A:EF:95:89:B1:53:9A:48:2B
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A982F98FEB6AF2E096B5DA71EF1E08396
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/T1VBDX9ne0KE3iJK75WJsVOaSCs.roa
Signing time: Fri 15 Sep 2023 09:32:50 +0000
ROA not before: Fri 15 Sep 2023 09:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197616
IP address blocks: 80.233.240.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:2f:98:fe:b6:af:2e:09:6b:5d:a7:1e:f1:e0:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f55410d7f677b4284de224aef9589b1539a482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:09:82:2b:66:b6:5f:d1:68:39:c6:aa:dc:
8e:31:4d:66:96:16:70:f5:6e:bd:6e:20:4c:6f:69:
d8:f7:7a:72:06:37:50:31:99:df:6d:2e:8a:19:6c:
51:42:e2:d1:32:4f:82:be:7c:0c:a9:7e:29:c4:57:
96:4f:46:62:28:ed:89:6f:1e:8e:90:5d:b6:9f:98:
b8:f1:b9:0a:06:c5:59:aa:8f:3a:02:53:d9:fd:1d:
c9:6d:9e:dd:de:66:64:96:e6:f9:c6:2a:b7:f1:e8:
fc:9f:31:1a:e5:c4:6f:cc:89:d0:ca:1e:f7:ed:f0:
01:ca:ce:f8:b5:9b:48:3a:4e:28:e1:85:5e:f8:d8:
d7:72:53:a9:1e:b1:2f:93:9b:5c:27:70:5d:b8:d2:
62:4a:60:4c:6d:3c:c6:3f:28:83:a6:51:8e:2f:1c:
bd:ac:86:c0:63:c8:40:fe:81:1a:18:7f:fa:fe:36:
e5:6b:dc:b0:e5:09:e7:d1:26:51:17:70:17:bb:6a:
f1:ea:e5:a4:8a:16:47:9c:c2:23:78:c9:92:d5:75:
5b:c0:c0:6e:45:22:9e:08:81:2b:07:6b:da:d5:36:
b1:3e:2d:6d:6f:14:a0:d6:42:43:d7:69:12:22:85:
da:e8:6f:e2:17:1e:82:ff:2d:97:24:a6:86:47:64:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:41:0D:7F:67:7B:42:84:DE:22:4A:EF:95:89:B1:53:9A:48:2B
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/T1VBDX9ne0KE3iJK75WJsVOaSCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.240.0/22
Signature Algorithm: sha256WithRSAEncryption
12:8f:9d:ac:00:a9:97:5b:84:db:ad:9d:58:69:43:75:e6:bc:
cb:2b:ab:97:b8:65:24:6a:7c:ce:76:6c:5c:44:24:d0:12:17:
29:86:a5:fa:1e:b2:2c:2d:ba:04:d5:06:c7:45:79:b3:fa:dd:
c6:e7:59:8c:53:cd:f4:7f:7d:4f:d9:a7:e2:ba:41:6c:db:fa:
54:89:b0:f2:8c:94:df:88:a0:ef:b3:10:17:eb:40:ae:4f:74:
af:1f:1d:fb:a7:99:00:95:27:af:de:0f:46:22:19:d8:da:62:
2f:70:79:c1:b0:0a:85:6f:ed:f8:76:25:10:62:9b:f7:62:57:
72:ba:1a:eb:fb:9d:98:aa:c4:2b:02:00:63:8a:84:a8:05:36:
a8:7e:f9:14:e8:1e:17:e3:f3:56:b5:a3:76:75:71:cf:91:fc:
9c:a1:11:9f:37:04:c7:15:c5:20:a1:9b:f8:c4:39:cd:80:53:
ef:05:07:0a:9e:14:49:72:ec:e5:65:5b:bd:5f:48:75:3b:47:
2f:80:aa:6e:e9:2b:3b:6a:bc:19:9b:d4:a4:90:d9:e5:c4:36:
b1:9a:f8:14:fb:d9:6d:aa:4a:e8:68:46:e2:1c:0f:b2:3c:32:
71:a7:2c:62:f8:24:fb:8d:0a:f0:a3:fe:a2:40:6d:17:0c:1f:
6a:a5:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 16:03:52 2023 by rpki-client on console-fra.rpki-client.org