Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/8lluyQY1M52RIKpx1S2KnGN9G0Y.roa
File: 8lluyQY1M52RIKpx1S2KnGN9G0Y.roa (raw, json)
Hash identifier: b8K3nIhPesxhRMfzEu8349RyCRllU3NrkBHyah477qc=
Subject key identifier: F2:59:6E:C9:06:35:33:9D:91:20:AA:71:D5:2D:8A:9C:63:7D:1B:46
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 0186BD0EFAC88C6124ACA8109943E65D8CDE
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/8lluyQY1M52RIKpx1S2KnGN9G0Y.roa
Signing time: Tue 07 Mar 2023 17:12:00 +0000
ROA not before: Tue 07 Mar 2023 17:12:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 185.80.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 08:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:0e:fa:c8:8c:61:24:ac:a8:10:99:43:e6:5d:8c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Mar 7 17:12:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2596ec90635339d9120aa71d52d8a9c637d1b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:8a:f5:af:55:61:0f:6b:c1:60:6d:f4:50:
12:70:e6:bd:56:b8:51:6d:96:3a:e7:c4:de:c2:a4:
99:58:88:33:08:f1:f2:0e:9b:23:0c:25:1c:9f:2e:
4c:5a:be:4b:aa:ff:11:39:1a:dc:8b:fd:bd:62:e4:
d8:b4:0d:7a:7f:f7:a3:2c:e4:6c:01:a3:78:2f:e0:
76:53:b2:1c:7d:41:1f:f2:6d:c9:79:6c:02:75:33:
cc:41:d5:4f:76:a7:6c:91:1b:bb:39:28:de:f9:d3:
19:ca:e4:9c:37:9f:9f:25:98:43:33:cc:7b:8b:ef:
bf:71:4c:57:5c:02:9d:15:74:9a:9b:0f:7c:1c:89:
89:42:07:24:40:25:a6:8e:72:96:ff:1c:74:01:18:
90:4c:b8:5d:7b:ca:b3:ff:7d:50:5b:78:3c:2f:71:
12:ac:d1:f6:e3:9c:57:9a:de:0a:b9:a6:d0:9a:fe:
68:ec:62:49:12:95:a5:96:47:0b:1a:81:53:98:dd:
d6:57:5d:80:48:99:0c:34:a2:13:ae:59:61:ef:ed:
f4:eb:9f:f8:1a:a1:1a:f3:f3:4a:92:29:9e:70:a2:
45:fb:49:06:85:a9:27:a2:62:f0:02:34:1c:17:b5:
3c:90:43:47:e9:31:84:86:be:c7:76:f5:da:8e:13:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:6E:C9:06:35:33:9D:91:20:AA:71:D5:2D:8A:9C:63:7D:1B:46
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/8lluyQY1M52RIKpx1S2KnGN9G0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.90.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f5:03:ce:8d:9f:7e:96:ac:fa:2b:03:76:e6:fd:a8:70:1f:
58:e1:80:ae:c8:d6:2a:23:be:1f:b0:92:22:b9:58:e2:a2:fd:
de:bc:9d:c8:6b:3a:c9:dd:7f:25:22:8d:85:c4:67:5e:4b:6c:
6e:23:83:ca:99:b5:9a:d4:b3:d7:b5:42:62:dd:45:bc:90:81:
ab:09:88:c0:76:6a:fe:04:91:a4:14:50:0b:d0:93:99:6d:00:
5f:31:df:a4:7e:f6:ab:cf:4d:9e:c6:d7:66:b8:0e:d1:3e:61:
d5:b3:a2:90:7f:ce:6a:f3:1f:cb:32:e4:e6:55:bd:27:f2:0f:
1a:30:a6:75:82:20:73:e9:93:f2:80:f5:37:d1:bd:c0:80:c3:
e2:6a:09:64:64:14:58:37:27:c5:f6:1e:96:3d:6a:a6:cf:33:
d4:b3:4c:cf:39:aa:e1:4a:ad:c2:f8:00:24:82:19:49:9c:f0:
00:b8:ea:f1:05:1a:a7:b5:a6:2d:ef:f8:a8:d1:68:4f:06:f8:
b7:93:a4:07:ca:65:24:3f:27:64:ca:cd:e0:d9:31:f9:b4:c2:
3c:29:a7:55:fa:1c:71:75:76:60:c2:45:13:b9:41:70:bb:dd:
9d:a6:cf:64:d2:a5:01:cf:ab:46:97:d0:e7:6a:75:19:10:82:
af:f3:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org