Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/vxDKJ-qxqHxwgu3lEMX10bGQ120.roa
File: vxDKJ-qxqHxwgu3lEMX10bGQ120.roa (raw, json)
Hash identifier: Kn7ZKOyepznw+z2WB9FgxoGveYOnOnQaKcvm8DbbUdY=
Subject key identifier: BF:10:CA:27:EA:B1:A8:7C:70:82:ED:E5:10:C5:F5:D1:B1:90:D7:6D
Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial: 0185701528A4CABDEACB3437822D897E61E4
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/vxDKJ-qxqHxwgu3lEMX10bGQ120.roa
Signing time: Mon 02 Jan 2023 01:25:12 +0000
ROA not before: Mon 02 Jan 2023 01:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43905
IP address blocks: 80.79.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:28:a4:ca:bd:ea:cb:34:37:82:2d:89:7e:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Validity
Not Before: Jan 2 01:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf10ca27eab1a87c7082ede510c5f5d1b190d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:de:9c:0b:af:87:7e:b4:6f:4e:4c:ff:02:
63:8c:2a:ed:66:8b:03:92:28:20:67:e1:07:d3:ee:
d0:a9:1d:7e:eb:35:12:d4:2c:ca:af:b1:53:6f:25:
01:35:95:60:7d:b8:07:2d:c9:0f:8a:5b:a8:ac:2a:
d4:cd:3c:2e:b3:94:a2:01:d7:40:aa:b9:61:b2:67:
9e:59:43:b9:8a:f4:8d:03:b9:0d:e2:9b:11:6b:c2:
55:d3:73:58:b4:3b:39:09:6e:8c:6b:c6:7e:c2:b9:
ae:cd:8d:0b:39:d9:9c:e6:79:75:68:26:16:21:7b:
60:22:05:81:c9:d3:81:02:ee:8b:2f:09:b8:c0:59:
2c:6f:fc:0c:64:1a:c8:d0:93:58:71:9c:f8:83:78:
6b:53:9a:bc:20:30:e7:c8:6f:22:23:ac:0e:cd:ed:
a4:b3:a8:87:30:b0:30:99:4f:70:8f:25:07:e7:e7:
9c:f3:5a:e7:cf:af:07:c3:07:aa:76:d0:89:4a:40:
a0:8c:3a:d5:ac:7d:16:48:c8:cc:85:cd:c0:a8:67:
b3:69:39:4c:43:2e:48:d0:b6:ce:11:d4:cf:fb:78:
d7:35:d9:d9:09:93:a6:6c:55:89:54:17:7c:af:e7:
6e:aa:e1:ae:1f:8a:72:77:ab:a4:6e:75:50:10:4c:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:CA:27:EA:B1:A8:7C:70:82:ED:E5:10:C5:F5:D1:B1:90:D7:6D
X509v3 Authority Key Identifier:
keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/vxDKJ-qxqHxwgu3lEMX10bGQ120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:18:07:6c:87:0c:d8:8d:4f:5d:f5:3d:c9:fe:d0:9c:8f:cc:
5a:a2:4c:95:0e:f9:3c:9d:16:71:29:f2:3d:b6:f5:da:38:6c:
e5:3e:75:22:0f:2e:5f:c4:4a:87:2c:26:4b:d0:40:9e:fa:e0:
d3:b9:51:9a:47:bf:51:c9:38:3e:78:13:20:d9:4e:f4:16:a5:
0b:7e:94:2a:e7:34:22:e9:80:8a:8e:af:ab:fb:f8:ac:cc:61:
89:d4:99:a4:d2:e9:34:d8:7f:93:5d:0a:a1:be:51:25:a3:cc:
c6:85:b7:01:70:4d:6e:78:1c:95:13:87:81:ec:5c:c5:b3:99:
3a:44:86:8e:c9:b3:af:c8:f7:5d:94:66:63:92:4e:4a:9f:b7:
3e:36:23:80:72:03:c5:e1:16:71:d9:54:d7:60:a3:d5:99:26:
9d:7a:bd:1c:95:21:63:b3:fe:57:42:c0:79:51:59:d4:4c:23:
b0:8b:10:03:9c:e8:3b:b9:25:ed:2b:31:1e:43:2e:0f:58:ed:
f0:76:89:f7:8c:7a:76:5b:a5:c3:03:25:0b:30:5f:24:98:df:
14:ff:e9:2e:75:c2:96:74:0c:00:8b:27:29:d7:de:e7:d3:ff:
cd:75:9d:2f:87:ea:af:63:23:75:94:eb:74:cb:98:72:b3:f0:
02:47:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org