Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KXpO5UUxK3LRLqYIC5_05G_3r7c.roa
File: KXpO5UUxK3LRLqYIC5_05G_3r7c.roa (raw, json)
Hash identifier: ZqKyGIgIU5M0zwtU6r/mv3Mv7NLnIYYwwGjxg4/haE8=
Subject key identifier: 29:7A:4E:E5:45:31:2B:72:D1:2E:A6:08:0B:9F:F4:E4:6F:F7:AF:B7
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8DAD76FE5578CB76F716BB284EB1AD7
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KXpO5UUxK3LRLqYIC5_05G_3r7c.roa
Signing time: Wed 25 Jan 2023 12:15:33 +0000
ROA not before: Wed 25 Jan 2023 12:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30933
IP address blocks: 80.253.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:da:d7:6f:e5:57:8c:b7:6f:71:6b:b2:84:eb:1a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 12:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=297a4ee545312b72d12ea6080b9ff4e46ff7afb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a0:f6:0e:bf:89:d3:b3:0b:8a:9b:d4:52:d4:
20:26:f1:0e:d6:18:54:d9:5b:9a:ab:a5:58:79:36:
7c:02:f3:a8:b3:14:24:b2:d1:b5:d1:35:69:5e:0a:
69:fd:81:ad:6e:f9:aa:89:35:6b:a8:01:f6:8c:d6:
25:52:0a:e4:1d:7d:e1:74:92:d0:68:45:48:ca:30:
5d:a2:f2:62:5b:4b:e8:44:a7:8a:ac:99:75:98:e7:
67:84:5e:5d:ed:f4:03:19:70:af:16:25:c4:81:01:
c4:9c:e6:78:f5:be:41:1d:28:6c:bc:39:26:be:5a:
cb:8c:35:e0:63:77:a0:f5:ef:66:15:3e:68:e5:0a:
6c:67:c5:51:2d:0b:ca:62:86:a3:d6:3f:56:b9:a5:
65:2e:34:2a:0d:3a:ec:56:eb:f3:48:88:44:4d:cc:
99:12:cb:22:e6:de:3f:bc:1f:0a:51:c5:30:9c:3d:
c3:2b:85:63:8a:81:fb:74:dd:61:97:d4:09:50:e2:
85:ac:e6:10:32:98:8e:13:db:55:f4:9b:58:a3:9e:
a6:1b:19:43:c2:04:1e:31:6e:27:31:1e:db:75:d2:
b9:b6:5b:1c:94:3e:2e:f3:d1:f0:96:97:b8:7c:bb:
88:52:60:13:53:bc:35:1b:d5:b2:62:ce:dc:0b:2f:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:4E:E5:45:31:2B:72:D1:2E:A6:08:0B:9F:F4:E4:6F:F7:AF:B7
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/KXpO5UUxK3LRLqYIC5_05G_3r7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.99.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a7:1e:c3:0b:2f:11:d2:0b:c2:da:05:66:ae:f7:30:5a:ed:
6d:4d:e8:e4:0f:c3:bb:37:e3:02:44:b1:8e:2e:99:e9:eb:d9:
5a:ea:66:5a:92:cb:54:f9:a6:d1:b8:af:95:a0:0d:db:ae:c9:
88:d1:e8:e5:ff:c4:9b:88:16:18:b5:78:6a:72:a2:9f:18:ec:
cd:3b:e0:e6:86:29:8c:8b:0f:6a:44:60:9e:15:78:33:18:9e:
e0:9c:93:c0:0b:63:1a:b2:60:c5:62:68:d6:ab:53:22:4a:7b:
56:0d:ee:be:c1:c3:1a:d7:d1:5c:5f:b0:db:74:33:18:03:4d:
18:59:1b:6b:db:40:95:b9:aa:91:e8:dd:4b:4b:e4:52:62:30:
eb:21:f6:ab:f5:9c:a2:8e:23:04:18:6a:05:21:9c:4f:a9:84:
26:b2:5a:0e:fc:77:1c:56:19:2f:9d:0a:2f:07:27:6b:ed:c3:
cb:9a:60:54:b9:10:1e:66:5f:fa:db:2c:27:66:8f:35:57:d5:
06:fa:28:2f:1f:e0:59:27:af:53:39:38:67:21:06:ad:34:1a:
cb:b4:2e:f0:5c:9c:ec:58:ff:25:9c:12:01:ed:6e:93:0f:ad:
79:0f:d8:7f:e5:5f:27:83:1f:c4:8b:4f:0f:52:6e:dd:77:83:
bf:21:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:00 2024 by rpki-client on console-ams.rpki-client.org