Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/8052P9p_oqrecsUx7ncU6q7bll8.roa
File: 8052P9p_oqrecsUx7ncU6q7bll8.roa (raw, json)
Hash identifier: NktUsYamBi/NT/hPpaja9wRQ7B5t0/IEpY7o7ajwAGI=
Subject key identifier: F3:4E:76:3F:DA:7F:A2:AA:DE:72:C5:31:EE:77:14:EA:AE:DB:96:5F
Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial: 01856C1CB2425595FA7A1AB42ADD6F2DF29F
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/8052P9p_oqrecsUx7ncU6q7bll8.roa
Signing time: Sun 01 Jan 2023 06:54:58 +0000
ROA not before: Sun 01 Jan 2023 06:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200295
IP address blocks: 80.64.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:b2:42:55:95:fa:7a:1a:b4:2a:dd:6f:2d:f2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Validity
Not Before: Jan 1 06:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f34e763fda7fa2aade72c531ee7714eaaedb965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:20:f2:9c:96:e4:c4:97:bd:09:c0:11:f6:
67:3b:e5:42:53:43:b9:e7:45:86:fb:13:c4:46:08:
a6:31:64:84:53:c2:8d:3b:29:0d:85:c4:70:69:f4:
51:91:c1:a2:4a:f2:d3:b2:a4:3e:a2:d1:b7:e9:a6:
7c:27:0e:7b:44:fb:b2:ff:dc:78:8f:ba:4e:5e:0a:
60:c0:7f:46:27:ff:7d:b0:4b:ac:1a:6e:19:14:23:
8b:5f:1c:2c:e4:ae:91:f3:ab:ae:ba:85:b8:f5:d5:
69:5d:11:8f:33:82:12:b4:d9:c1:83:3b:d9:4b:a1:
80:67:10:9e:27:7a:ec:d3:99:be:95:50:4f:f6:af:
a4:1a:69:92:1e:fd:8a:66:b3:a5:ae:20:7f:b1:a3:
81:b5:fc:a4:7a:13:54:5e:68:8d:28:9d:00:0c:c8:
98:8a:cb:1a:38:e2:24:2a:d3:34:90:88:e9:31:dd:
72:06:a8:2a:dd:fe:ca:1c:f0:e4:c9:e5:b2:a4:1a:
a0:41:74:91:b2:78:f3:3e:e2:f3:12:e9:a0:ae:51:
03:a1:35:8b:ea:a6:2f:df:e4:67:bf:2e:8f:4b:8d:
65:ad:f2:f9:86:0e:f9:48:a4:64:aa:97:c5:cb:d5:
c1:d9:fc:ab:82:18:79:0f:3c:59:aa:87:fd:9e:27:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:76:3F:DA:7F:A2:AA:DE:72:C5:31:EE:77:14:EA:AE:DB:96:5F
X509v3 Authority Key Identifier:
keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/8052P9p_oqrecsUx7ncU6q7bll8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.208.0/22
Signature Algorithm: sha256WithRSAEncryption
52:cf:0e:01:74:8e:ad:10:6f:31:c7:c0:45:b7:35:3f:a1:45:
d8:7e:0e:2b:e7:b9:28:f3:06:7b:d6:6a:bf:ac:87:3d:9c:c4:
23:3f:2c:dd:d2:36:cd:d2:39:c4:71:67:71:e2:7f:6c:49:4a:
02:62:45:dc:69:3b:66:90:26:b9:88:e1:72:06:5d:36:4c:85:
89:3c:c8:1e:e5:f2:78:ac:e5:49:93:0c:6c:59:0b:1e:16:b0:
3f:fc:e8:9e:e7:68:ce:88:96:3c:33:49:78:95:55:00:8b:49:
f1:d3:0d:e4:0c:74:84:0d:8f:51:cc:18:3f:b9:65:86:d1:2a:
c8:a1:a5:c0:36:49:a6:15:c3:0c:b4:00:e6:0a:8b:9f:1e:c5:
15:d7:83:e3:05:7f:ee:c8:94:18:0e:a9:2c:0d:e2:ec:b7:d9:
b1:b6:93:23:62:92:98:b9:a2:ab:bb:c6:bf:c3:11:11:55:d2:
bd:a6:c5:f5:6f:70:f6:e9:2a:cf:a0:eb:fa:20:f7:b2:b5:6f:
d1:e0:93:30:3a:1e:1b:d1:f0:2e:50:f9:bb:ac:e5:b3:12:de:
45:75:bd:a3:3a:65:b4:0e:70:a2:e1:ed:1c:50:87:6f:18:2d:
ec:5d:bb:d0:d5:46:ea:e6:f7:62:aa:3f:1d:79:27:86:26:b6:
85:e2:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:02 2024 by rpki-client on console-fra.rpki-client.org