Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/TJRt1nmkxu3KGgcRb6l7Tpo3024.roa
File: TJRt1nmkxu3KGgcRb6l7Tpo3024.roa (raw, json)
Hash identifier: FZooDHyIVkX5r+hiwCIV8PsitP1l3YoqLkbBJCLr84I=
Subject key identifier: 4C:94:6D:D6:79:A4:C6:ED:CA:1A:07:11:6F:A9:7B:4E:9A:37:D3:6E
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F1963690490D7BB76D49069444682F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/TJRt1nmkxu3KGgcRb6l7Tpo3024.roa
Signing time: Mon 02 Jan 2023 19:24:50 +0000
ROA not before: Mon 02 Jan 2023 19:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47570
IP address blocks: 80.232.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:96:36:90:49:0d:7b:b7:6d:49:06:94:44:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c946dd679a4c6edca1a07116fa97b4e9a37d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:9d:ec:b3:97:d9:24:7e:c1:c8:82:1a:2c:
85:11:17:58:92:b2:50:1e:06:ef:d4:ec:07:0f:d0:
7c:86:43:1a:11:fb:d5:a7:a6:83:8d:c5:b3:f5:e9:
73:f7:d0:d1:44:4f:ab:10:31:5b:d4:e7:8b:80:83:
c7:36:f9:3f:a7:7f:6d:c3:01:7c:ab:1d:1d:51:a1:
ba:dc:14:ca:c6:ed:e0:d7:66:3b:4e:b1:2a:9b:37:
ce:e8:f5:8c:24:ea:66:f5:29:e7:34:59:d8:34:11:
7d:04:6e:ff:b8:b9:cb:42:ff:91:f4:43:e0:00:7b:
d4:be:d4:05:c1:ca:3f:70:c8:ed:0e:ab:f4:88:7f:
a5:d8:bb:80:5d:56:47:42:a8:7b:9f:f4:f4:22:41:
b6:65:98:33:b0:12:03:3b:f4:3c:c3:a1:a1:5a:fb:
81:db:19:86:20:f9:3a:98:33:d3:2d:4e:83:e8:bd:
3d:f4:da:67:8b:f9:5d:d0:ca:7c:fd:fd:ec:70:51:
b7:01:5d:0b:b9:3a:b7:1c:9e:a2:00:38:b5:74:6e:
2f:da:6f:af:36:9d:34:d2:fd:a7:c2:d3:0b:88:4f:
63:e4:d6:b2:ed:76:09:4b:8f:6e:60:14:d8:91:31:
3f:16:1f:34:53:15:f6:23:49:13:98:9d:87:c0:93:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:6D:D6:79:A4:C6:ED:CA:1A:07:11:6F:A9:7B:4E:9A:37:D3:6E
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/TJRt1nmkxu3KGgcRb6l7Tpo3024.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0f:7c:c4:7d:62:80:d0:e4:f6:b1:db:62:03:90:be:61:68:
aa:26:ac:f0:67:90:a7:07:86:b5:e5:fd:ed:2c:6f:1c:59:af:
e8:57:8e:e5:92:48:a0:44:21:b6:47:95:d9:41:91:27:67:ce:
8a:61:94:a6:e8:96:dd:ba:bd:e1:4e:5f:c1:a6:25:ae:09:6e:
6c:ab:b9:8c:d0:dd:93:38:37:e3:87:87:c8:09:02:78:eb:03:
49:23:27:d3:eb:28:2e:d6:9f:c6:c6:4c:59:97:6c:2c:b4:77:
4d:7b:cd:c7:0e:4e:d7:96:b9:21:b8:1e:3d:10:ff:ae:32:fb:
69:a5:1d:b6:37:d7:d5:62:59:1b:67:78:71:60:d9:31:ae:9b:
d0:f9:77:e5:97:c8:01:5f:22:e1:aa:75:76:c8:14:78:98:17:
42:71:49:04:be:6a:61:78:b5:99:32:43:02:1c:d2:97:fb:ce:
98:a9:24:fa:61:8c:27:5b:65:68:7b:36:6f:0d:d2:41:10:7b:
c4:a7:e6:47:66:df:7c:75:03:02:68:e5:6f:96:38:e1:73:a6:
cc:e4:1b:a8:19:19:2f:28:e5:aa:d3:d9:f4:b0:55:f7:74:55:
8b:b9:2f:98:f1:ef:ee:da:40:ed:f3:f2:c4:ea:83:12:33:3e:
5f:3f:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 09:55:51 2023 by rpki-client on console-fra.rpki-client.org