Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/dQn59zQKwXuxZkypJcTlP35CdAY.roa
File: dQn59zQKwXuxZkypJcTlP35CdAY.roa (raw, json)
Hash identifier: yEnSf7tlmFq2XXLIPR1q89t0Qx2f7PIe812kpfPqESA=
Subject key identifier: 75:09:F9:F7:34:0A:C1:7B:B1:66:4C:A9:25:C4:E5:3F:7E:42:74:06
Certificate issuer: /CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Certificate serial: 018572CCCDC52DD06616514FB06588EA771F
Authority key identifier: D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/dQn59zQKwXuxZkypJcTlP35CdAY.roa
Signing time: Mon 02 Jan 2023 14:05:02 +0000
ROA not before: Mon 02 Jan 2023 14:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 80.91.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:cd:c5:2d:d0:66:16:51:4f:b0:65:88:ea:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Validity
Not Before: Jan 2 14:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7509f9f7340ac17bb1664ca925c4e53f7e427406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:20:65:c3:e0:7d:7b:33:65:31:57:63:52:
f6:7b:b8:79:c0:a5:b4:f4:8a:6b:87:3c:71:c4:2c:
87:0c:05:f8:d4:ed:38:4d:27:58:71:23:d9:f4:2a:
84:b5:ea:d3:73:bb:e8:ae:52:33:b0:86:cc:0d:86:
4c:6a:32:86:45:cb:86:fd:18:e5:33:7e:b7:af:0e:
0f:11:08:6e:92:fa:db:9f:dd:76:66:78:2f:3e:10:
b9:59:3c:d5:f3:90:60:e3:3c:ee:ee:2c:f0:3d:63:
b1:99:95:c0:2c:c9:f6:b7:25:86:cf:0d:dc:83:2e:
4c:4a:ad:60:59:ef:92:66:92:27:eb:33:a1:1d:f6:
7b:b4:7b:68:ee:1d:d4:56:c2:c0:2e:ec:92:c2:f6:
66:62:4f:7c:dc:2f:05:6b:dd:49:5d:f1:65:62:e8:
a3:02:2a:b2:9b:cb:a2:ec:f4:07:ef:85:d9:bf:12:
a5:6d:30:13:9e:5b:92:97:fa:c6:c1:8c:d9:ed:ea:
b9:43:e4:ab:74:84:f8:e4:9b:7d:7c:eb:52:62:64:
15:e0:08:7c:c6:92:0d:e6:3d:f3:34:a9:09:1b:07:
85:2d:e6:68:87:bf:da:8e:88:db:e8:8a:24:ec:d0:
a6:ce:91:fc:2b:33:ac:24:04:4d:fd:80:6c:9e:f8:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:F9:F7:34:0A:C1:7B:B1:66:4C:A9:25:C4:E5:3F:7E:42:74:06
X509v3 Authority Key Identifier:
keyid:D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/dQn59zQKwXuxZkypJcTlP35CdAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.210.0/24
Signature Algorithm: sha256WithRSAEncryption
03:65:df:9b:f8:65:98:93:b4:f0:b6:fe:b7:f8:ad:35:92:d8:
01:82:21:84:90:27:06:d4:b8:a3:4e:9b:48:2d:b5:cf:62:88:
b7:4e:07:8b:f9:fe:1d:bd:57:b2:d2:8f:7f:b3:ea:fe:82:d2:
54:e4:08:45:e7:aa:20:b7:a2:d0:74:c2:a0:dc:e6:b9:8c:7c:
51:5f:b2:cd:b8:fb:30:9f:00:c3:a5:f3:45:79:f5:8d:79:b4:
e8:08:8e:75:9f:d4:e3:0c:b3:26:ca:10:5b:e1:e2:35:41:f9:
8f:74:b6:2c:4e:c9:36:d9:33:9a:28:f6:db:5d:d4:36:b9:26:
7a:31:84:6c:e8:31:ad:e5:06:d2:8c:c1:f5:a3:10:13:a9:b8:
00:61:d0:17:8e:71:a8:f0:dc:56:52:92:4b:30:b9:8a:84:a0:
45:eb:4a:ed:4c:7c:33:39:1d:99:fc:8b:6c:ac:bb:d1:01:2c:
8b:0e:6d:c9:3c:80:36:55:52:02:18:98:0b:3d:43:ee:2d:42:
5b:b9:5e:53:1d:b6:cf:cd:0c:9f:57:b1:5e:a4:ff:5c:a1:ce:
1a:96:4b:23:f9:23:dd:1f:3d:09:1e:09:99:3f:6b:e8:dc:eb:
8f:65:fa:83:22:a9:26:0a:0e:a6:ca:9a:41:d9:5b:cf:35:17:
27:88:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:37 2024 by rpki-client on console-fra.rpki-client.org