Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/fNutA14tCu-SeMPnUHSjw5FHP9o.roa
File: fNutA14tCu-SeMPnUHSjw5FHP9o.roa (raw, json)
Hash identifier: VCXUADvaIuHhZGr+ic6KNcHh+Qe5gCGC6/OYxY+hqOc=
Subject key identifier: 7C:DB:AD:03:5E:2D:0A:EF:92:78:C3:E7:50:74:A3:C3:91:47:3F:DA
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D2459C08981401EC251DA4C4FDC4DD
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/fNutA14tCu-SeMPnUHSjw5FHP9o.roa
Signing time: Thu 28 Dec 2023 14:26:59 +0000
ROA not before: Thu 28 Dec 2023 14:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47499
IP address blocks: 80.233.228.0/23 maxlen: 24
80.233.252.0/23 maxlen: 24
80.233.160.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d2:45:9c:08:98:14:01:ec:25:1d:a4:c4:fd:c4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cdbad035e2d0aef9278c3e75074a3c391473fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:17:49:a0:8a:7f:4e:82:40:57:53:32:da:
12:15:fe:39:94:d8:60:f4:9c:dc:43:db:a6:7d:eb:
15:b6:86:89:0b:a8:7b:88:5b:98:e4:2e:d3:4c:c1:
d6:f1:e0:93:e3:0b:a8:53:a3:bb:1c:68:c4:a0:6e:
20:79:50:a3:49:44:8b:fc:ce:fd:7b:21:92:b4:0b:
c5:4a:4e:3a:69:f9:25:a6:70:02:92:37:f3:d0:7c:
f9:78:41:37:b6:91:06:ea:7b:2b:a8:1b:2c:70:42:
4e:34:05:6b:11:9f:41:05:c8:8a:4f:9b:16:d2:18:
d0:86:3f:bb:99:40:c5:a7:d3:e9:39:b4:9f:65:84:
49:8b:2f:83:02:39:8c:8f:a9:8a:0e:8a:23:07:b3:
3a:4e:6f:3d:b5:35:58:84:a5:3a:19:e0:8e:11:20:
7c:9b:f7:bf:dd:25:01:6e:6e:97:12:18:05:47:14:
c6:99:3b:73:db:80:09:83:84:c9:2c:58:71:3f:7a:
18:2c:eb:86:a6:a5:40:d2:df:95:38:76:7f:60:82:
fe:44:82:99:84:27:34:2b:43:c3:10:34:3a:9d:1f:
1b:49:9c:27:d3:ba:90:0f:42:ea:99:82:ca:66:f6:
af:32:6e:fd:20:c3:62:8f:30:d9:9e:bd:53:8e:19:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:AD:03:5E:2D:0A:EF:92:78:C3:E7:50:74:A3:C3:91:47:3F:DA
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/fNutA14tCu-SeMPnUHSjw5FHP9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.160.0/23
80.233.228.0/23
80.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
83:85:35:a7:c9:e4:0c:01:ae:b6:f7:01:53:3c:33:cb:01:fc:
55:42:12:0d:7c:b6:33:10:41:39:db:24:bd:16:75:1d:7e:27:
0f:89:2b:7f:15:6b:db:85:c3:ab:be:8f:3f:9a:d9:9b:dc:80:
41:41:7f:61:3b:a6:b6:1a:d0:bd:df:79:33:67:94:53:e9:f8:
3b:03:48:07:23:7f:f7:c9:e6:42:ed:c0:7b:59:75:4e:da:ab:
6d:f6:f7:93:06:9d:f4:df:17:01:b3:a1:f6:12:fb:8e:b9:8a:
60:68:8a:ce:db:dd:cb:58:94:44:d5:c7:d0:ee:07:82:2d:f7:
14:aa:c9:6f:34:9e:6e:6c:93:96:fd:25:06:d6:ca:00:5c:85:
4e:81:77:75:22:fb:3c:88:c7:02:10:08:bd:e0:82:97:bc:0e:
98:8e:6c:59:63:33:05:b1:b2:36:de:4a:ea:7a:13:4b:05:b5:
03:1d:e6:fc:ab:e0:8b:59:76:4e:16:e9:aa:b1:8c:e5:4a:87:
ec:e0:26:b8:c1:9d:45:51:d2:17:ef:35:a2:97:81:89:cc:af:
b4:8e:54:1e:46:b2:d3:4f:c8:08:d4:9a:5e:33:f7:2f:96:ea:
4c:91:7d:50:29:ba:af:cf:a1:9b:0d:c5:a4:ec:51:27:00:60:
6b:ac:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org