Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/kcgZBIIe9-p216T2i5O-Lx8Z0r4.roa
File: kcgZBIIe9-p216T2i5O-Lx8Z0r4.roa (raw, json)
Hash identifier: fYbFU3edNkQqR4Cy0EaWoYa8iSZEEinj8C9Rz+Nfa2E=
Subject key identifier: 91:C8:19:04:82:1E:F7:EA:76:D7:A4:F6:8B:93:BE:2F:1F:19:D2:BE
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F1999B1C8935E82727B83F4D415CBA
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/kcgZBIIe9-p216T2i5O-Lx8Z0r4.roa
Signing time: Mon 02 Jan 2023 19:24:51 +0000
ROA not before: Mon 02 Jan 2023 19:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62436
IP address blocks: 80.232.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:99:9b:1c:89:35:e8:27:27:b8:3f:4d:41:5c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91c81904821ef7ea76d7a4f68b93be2f1f19d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:21:35:7d:06:5b:29:c1:a0:a3:71:a5:44:
a0:67:3b:20:a3:43:bb:a2:e3:ca:ee:55:bf:7a:25:
99:5f:45:b0:c9:95:27:98:7e:04:39:1e:ee:38:ea:
9c:59:a1:85:e5:00:f9:20:c6:fd:69:f2:6c:02:94:
fe:ae:99:71:54:b4:3a:71:10:45:7d:00:3c:fb:aa:
63:a7:61:4f:c9:94:14:d7:2c:65:17:6f:2c:51:ce:
13:97:c4:e1:40:c4:8f:fe:cd:f1:ab:79:71:89:8d:
56:10:d7:61:01:13:cf:91:cc:26:54:15:0f:77:41:
d9:29:83:97:c7:00:e9:d9:d2:96:4e:60:d6:22:13:
b9:8b:0a:ea:f7:53:81:a3:05:f3:69:0c:f3:e2:3c:
22:b6:e4:23:79:da:ee:ef:7a:fa:16:98:1a:fc:53:
90:1a:fe:06:32:36:0f:63:6b:2a:c6:80:76:aa:81:
53:b4:0a:66:91:2f:17:07:9f:1c:5e:78:99:88:84:
64:50:6c:3e:75:19:61:b2:14:af:9e:32:64:2d:23:
cf:fb:d3:52:b4:27:c5:6e:05:84:58:10:4b:bd:c6:
14:c0:bc:ee:7f:d9:96:fa:eb:2a:be:7e:1b:d0:1c:
95:10:49:8c:6c:de:cd:12:eb:f8:a4:34:68:c8:68:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:19:04:82:1E:F7:EA:76:D7:A4:F6:8B:93:BE:2F:1F:19:D2:BE
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/kcgZBIIe9-p216T2i5O-Lx8Z0r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b6:1d:a9:6d:d1:1c:c6:88:91:bb:f0:32:7d:ad:7d:92:97:
22:a6:34:38:56:4e:ae:8a:cb:2b:1e:bb:76:e1:62:7a:e2:56:
6d:55:de:a3:73:e0:8b:77:b8:d6:fe:ef:6c:3d:0c:b4:f7:44:
b6:41:57:28:81:4c:44:e4:d5:85:da:98:cb:c5:a6:0f:7a:54:
2a:71:4a:3e:b9:96:10:eb:a8:10:aa:40:fa:96:28:39:d1:65:
1c:4a:30:dc:d5:8e:29:bc:ad:90:ab:31:1f:5b:a4:61:aa:ed:
15:f6:59:e0:0e:51:d0:00:f8:a4:5f:4b:a3:a7:1e:96:fb:77:
c7:71:48:29:3a:cd:ac:10:22:7b:7c:33:8c:4a:10:cd:68:2b:
aa:11:e1:39:18:1c:af:f0:21:ce:43:cf:26:94:1e:03:f6:24:
a4:c7:d0:9b:15:2d:51:db:ba:c7:8c:5d:ea:a0:51:3e:37:23:
bc:dc:30:fd:e8:29:06:ce:0e:ef:66:01:0b:51:70:ab:0b:1c:
69:db:d0:95:ba:3e:3f:db:6e:cd:7d:97:63:08:77:be:7d:34:
2b:f2:29:09:1e:b6:be:05:82:c9:41:77:c2:7e:df:31:8b:ad:
c2:3d:7d:51:6e:19:f6:12:6c:92:5f:95:0c:41:a7:8f:8d:4b:
e7:16:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:12 2024 by rpki-client on console-ams.rpki-client.org