Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/ZUtyXBj4Ubf279HKBH-NN97MdwA.roa
File: ZUtyXBj4Ubf279HKBH-NN97MdwA.roa (raw, json)
Hash identifier: jj5V4G/n7TC0EfxEdu+sw0DQEgaRDI6cJcfZFAH+Iro=
Subject key identifier: 65:4B:72:5C:18:F8:51:B7:F6:EF:D1:CA:04:7F:8D:37:DE:CC:77:00
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 018750AFD98C2783246B5179FFBD2D89209F
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/ZUtyXBj4Ubf279HKBH-NN97MdwA.roa
Signing time: Wed 05 Apr 2023 09:11:54 +0000
ROA not before: Wed 05 Apr 2023 09:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200751
IP address blocks: 80.247.92.0/23 maxlen: 23
80.247.94.0/24 maxlen: 24
80.247.80.0/21 maxlen: 21
80.247.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:af:d9:8c:27:83:24:6b:51:79:ff:bd:2d:89:20:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Apr 5 09:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=654b725c18f851b7f6efd1ca047f8d37decc7700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:63:1c:01:0c:2e:dc:5e:f5:fc:6a:49:71:
5a:60:1c:01:5a:f8:3c:15:ac:b1:04:16:27:0d:5b:
33:88:91:ca:95:08:08:06:36:93:e7:b3:48:12:6a:
cf:60:d5:4e:2e:86:2e:7f:ae:cd:60:70:c0:2a:ae:
02:49:47:04:ef:5d:cc:30:1d:2d:f7:72:57:7f:47:
4c:b1:52:de:e2:d9:87:62:0d:18:3f:c5:20:61:ea:
7a:97:8a:a1:8b:2d:f2:fc:e3:54:e4:0f:11:c6:9f:
6d:0d:2a:94:de:6b:ed:2d:8b:e9:22:eb:9a:3a:3c:
3e:a3:42:3a:46:81:c4:5d:15:d5:1d:b1:01:11:08:
5d:6e:0a:9b:da:34:dc:60:2d:ae:4c:70:29:7d:d2:
ea:9d:78:59:a9:84:a6:08:b2:85:01:59:2b:cc:e8:
b1:c8:8c:7b:7a:97:23:b0:18:87:54:cc:81:8e:49:
8a:81:c7:6c:f3:d8:7f:90:25:46:4e:86:3a:42:69:
91:5c:a1:48:90:e4:d5:da:7a:10:6a:fc:10:73:7f:
74:f9:c1:b6:8a:1f:e4:46:84:a4:a8:b5:b1:ec:02:
ef:f8:d7:1d:c0:82:cd:36:fb:d8:76:56:64:79:96:
62:20:4e:6a:f4:7e:18:47:eb:65:00:b9:61:d4:ea:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4B:72:5C:18:F8:51:B7:F6:EF:D1:CA:04:7F:8D:37:DE:CC:77:00
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/ZUtyXBj4Ubf279HKBH-NN97MdwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.80.0-80.247.94.255
Signature Algorithm: sha256WithRSAEncryption
36:ba:40:e8:bd:93:76:8b:f4:4b:61:02:b0:b6:1a:d1:cb:2d:
6c:c9:05:16:5a:a0:92:1c:59:8b:07:c8:a8:53:65:0c:e5:91:
7c:f2:2c:82:d5:d6:06:0b:1e:5e:41:30:12:ab:90:f2:74:1d:
0b:af:65:7f:5c:8e:52:6a:52:7d:16:6e:b2:01:06:74:54:a1:
fd:c5:71:ef:59:8b:bf:1a:30:bd:43:21:a8:3e:1f:da:93:63:
80:0c:89:2f:e6:e8:60:13:e4:e6:4c:35:bd:8c:50:3e:1d:91:
fa:44:b5:51:55:61:39:6d:48:45:63:b1:c0:44:cc:ea:6b:da:
05:c7:fc:bb:1f:30:bf:70:4c:5b:68:6a:53:9d:c8:c1:37:7e:
b3:f4:4f:39:b5:12:2e:fc:24:64:aa:eb:0e:f6:7a:76:bd:b5:
61:fd:e9:43:26:63:47:b1:b6:12:c6:0c:29:4a:65:4b:69:82:
36:a1:42:df:32:6e:7a:c0:dc:4a:a0:04:7a:0b:35:e8:45:a9:
6f:d5:64:68:4b:d2:45:49:07:94:58:c8:20:18:a3:f3:10:4b:
a7:41:19:dc:72:b3:30:1c:2d:e2:b8:dc:75:7f:99:44:b2:6a:
7d:c5:92:bc:ca:d3:de:84:60:b9:95:19:0f:96:46:2d:9d:b8:
54:9a:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:36 2024 by rpki-client on console-fra.rpki-client.org