Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AlU8qCNgCVR_hrJPbq5mxTmodDk.roa
File: AlU8qCNgCVR_hrJPbq5mxTmodDk.roa (raw, json)
Hash identifier: oDTY14KFcZAroADXr78sqM3RZIrG+NCFm8S0VDlyYq0=
Subject key identifier: 02:55:3C:A8:23:60:09:54:7F:86:B2:4F:6E:AE:66:C5:39:A8:74:39
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0189F94D1EEEE03A3AFE3C281578372AD86D
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AlU8qCNgCVR_hrJPbq5mxTmodDk.roa
Signing time: Tue 15 Aug 2023 13:05:28 +0000
ROA not before: Tue 15 Aug 2023 13:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 80.76.60.0/24 maxlen: 24
185.192.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:4d:1e:ee:e0:3a:3a:fe:3c:28:15:78:37:2a:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 15 13:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02553ca8236009547f86b24f6eae66c539a87439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:53:80:f5:30:2f:b1:4a:3c:dd:0e:ac:f2:
7c:ae:97:de:12:69:06:01:7f:25:1c:d9:ea:57:c2:
a3:7e:40:45:ef:95:94:bb:0e:ed:8d:97:4e:7b:5f:
0b:ca:25:f7:d7:2a:cb:26:68:c9:81:f1:ee:99:ac:
ee:22:28:67:c3:a9:20:51:71:b5:80:7d:cd:c0:05:
fa:2b:0d:2b:68:3b:35:11:ac:ac:f4:03:be:a2:0c:
46:97:f8:3a:82:75:fd:fc:b9:49:20:a1:67:c5:6b:
5f:0c:2e:c1:73:25:4d:0a:3b:ae:77:6b:f6:29:68:
c9:b2:de:58:3a:9e:22:a1:d8:0e:08:63:3b:60:7b:
b5:25:75:d7:f1:0b:af:39:b2:a5:0f:89:33:b9:b1:
12:2f:6e:77:bc:8f:b2:1f:7b:e9:ba:46:6a:2d:53:
68:ec:ba:c1:12:4b:7f:b8:99:12:91:eb:95:6a:77:
f2:33:b5:51:5b:d6:3c:2a:45:d5:4e:fb:35:ba:52:
3c:15:d6:83:9d:3d:a3:55:bb:90:78:e9:26:fb:ad:
17:dd:61:3b:8a:79:5c:59:e4:6e:39:48:15:35:35:
b1:a4:0f:e9:3a:d0:7b:90:e8:a3:49:0c:5a:77:a9:
eb:7f:f5:a1:b8:f1:80:06:4c:f2:07:20:20:24:61:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:3C:A8:23:60:09:54:7F:86:B2:4F:6E:AE:66:C5:39:A8:74:39
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/AlU8qCNgCVR_hrJPbq5mxTmodDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.60.0/24
185.192.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2f:07:02:54:91:cb:da:e3:7d:d8:0f:9d:3f:d8:f1:3a:3a:
1c:9e:8a:9a:1a:a4:80:ff:f6:44:c5:59:0e:de:f3:8a:ef:c5:
3a:60:61:e5:b0:25:6a:d9:dd:eb:9e:67:0c:e8:c6:c3:f2:00:
58:82:68:91:10:d7:1a:de:1c:b4:18:c9:d6:8b:15:61:aa:9d:
40:b0:bf:5d:94:82:3f:10:62:a4:08:7b:2b:b1:71:3b:cd:5e:
0b:07:39:b7:ce:17:db:b9:74:73:56:18:e2:94:0c:a2:aa:4b:
3b:3f:70:b6:3f:23:a2:12:78:af:57:71:38:db:f7:10:20:7a:
77:c8:61:52:c1:2a:02:6c:e4:d2:af:92:88:b4:c5:34:5b:bf:
b5:0f:60:e8:b7:0b:19:5e:c3:c9:3d:42:61:dc:23:03:c8:ff:
6d:75:9a:1a:fa:16:87:28:6a:ee:59:4e:00:98:cd:11:8a:11:
df:39:bb:fc:0d:b0:09:87:e9:3e:94:c5:8e:f2:41:d3:3a:69:
2e:ce:e4:0b:c3:64:ed:cb:41:4d:47:2a:43:f8:ac:79:08:33:
21:39:4b:29:b3:9c:51:5c:95:9b:54:e2:2f:12:37:4a:f9:d5:
b2:f1:18:2f:72:4b:48:75:bf:f2:8e:a1:fe:ad:07:99:bf:58:
16:b6:14:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYn5TR7u4Do6/jwoFXg3KthtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMwODE1MTMwNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjU1M2NhODIzNjAwOTU0N2Y4NmIyNGY2ZWFlNjZjNTM5YTg3NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO1TgPUwL7FKPN0OrPJ8rpfeEmkG
AX8lHNnqV8KjfkBF75WUuw7tjZdOe18LyiX31yrLJmjJgfHumazuIihnw6kgUXG1
gH3NwAX6Kw0raDs1Eays9AO+ogxGl/g6gnX9/LlJIKFnxWtfDC7BcyVNCjuud2v2
KWjJst5YOp4iodgOCGM7YHu1JXXX8QuvObKlD4kzubESL253vI+yH3vpukZqLVNo
7LrBEkt/uJkSkeuVanfyM7VRW9Y8KkXVTvs1ulI8FdaDnT2jVbuQeOkm+60X3WE7
inlcWeRuOUgVNTWxpA/pOtB7kOijSQxad6nrf/WhuPGABkzyByAgJGG34wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAJVPKgjYAlUf4ayT26uZsU5qHQ5MB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvQWxVOHFDTmdDVlJfaHJKUGJxNW14VG1vZERrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEw8AwQA
ucD3MA0GCSqGSIb3DQEBCwUAA4IBAQBPLwcCVJHL2uN92A+dP9jxOjocnoqaGqSA
//ZExVkO3vOK78U6YGHlsCVq2d3rnmcM6MbD8gBYgmiRENca3hy0GMnWixVhqp1A
sL9dlII/EGKkCHsrsXE7zV4LBzm3zhfbuXRzVhjilAyiqks7P3C2PyOiEnivV3E4
2/cQIHp3yGFSwSoCbOTSr5KItMU0W7+1D2DotwsZXsPJPUJh3CMDyP9tdZoa+haH
KGruWU4AmM0RihHfObv8DbAJh+k+lMWO8kHTOmkuzuQLw2Tty0FNRypD+Kx5CDMh
OUsps5xRXJWbVOIvEjdK+dWy8RgvcktIdb/yjqH+rQeZv1gWthSv
-----END CERTIFICATE-----
Generated at Tue Nov 21 07:11:45 2023 by rpki-client on console-ams.rpki-client.org