Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/aMehY5DdmZb4vdrd0lJKRQ4lmh0.roa
File: aMehY5DdmZb4vdrd0lJKRQ4lmh0.roa (raw, json)
Hash identifier: VYjxzpW3P5V3LCHZQDaxJ23QYIilw3R2u9PzQOijn80=
Subject key identifier: 68:C7:A1:63:90:DD:99:96:F8:BD:DA:DD:D2:52:4A:45:0E:25:9A:1D
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 0186EEE36C102B41C9E2F55F7D1265BEE80D
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/aMehY5DdmZb4vdrd0lJKRQ4lmh0.roa
Signing time: Fri 17 Mar 2023 09:25:27 +0000
ROA not before: Fri 17 Mar 2023 09:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
164.152.216.0/24 maxlen: 24
2a11:1680:14::/48 maxlen: 48
2a11:1680::/48 maxlen: 48
2a11:1680:13::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:e3:6c:10:2b:41:c9:e2:f5:5f:7d:12:65:be:e8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Mar 17 09:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68c7a16390dd9996f8bddaddd2524a450e259a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:2d:bf:8e:cd:28:5d:ee:f3:ca:5e:25:b4:
9e:77:7a:d4:9b:5c:b9:b5:b4:9d:26:5b:8e:10:32:
e9:6d:98:78:9a:6b:0a:21:51:a2:96:a4:ea:c4:c0:
76:f9:6d:14:f3:03:83:17:8b:ee:e2:1b:f1:a1:43:
53:19:70:7c:83:6f:d7:8e:72:ed:4b:67:71:ec:10:
20:fc:22:dc:f6:52:2c:7d:4d:db:f8:b3:8f:1a:64:
59:e5:7a:e0:15:2a:98:53:f8:a6:ef:55:28:df:84:
fe:be:01:7c:82:f8:e0:09:c6:1e:61:cd:73:50:e1:
17:a3:04:e9:ea:e0:20:e4:e2:98:57:c9:8e:8c:97:
9e:72:66:89:11:42:29:0a:c6:62:97:78:17:22:4d:
77:2f:cb:42:19:2f:aa:3a:c9:70:93:5f:dd:96:ef:
c1:5e:09:b2:d6:54:27:76:01:44:fc:33:e4:c0:88:
7d:4e:ff:da:d8:fc:2b:a7:bc:27:62:7d:b2:bb:e2:
28:c4:86:45:fd:37:5d:85:b0:ad:72:1d:94:ed:53:
21:73:01:c3:00:84:95:da:07:b1:de:06:ef:69:98:
4a:f3:f4:33:6a:23:c9:7f:b3:6e:89:7b:2f:89:41:
43:8e:c1:f3:05:5c:5f:25:7d:2f:a5:7c:01:b6:c5:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C7:A1:63:90:DD:99:96:F8:BD:DA:DD:D2:52:4A:45:0E:25:9A:1D
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/aMehY5DdmZb4vdrd0lJKRQ4lmh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
164.152.216.0/24
IPv6:
2a11:1680::/48
2a11:1680:13::-2a11:1680:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
30:cc:ba:60:b1:26:af:0b:5f:df:35:9b:27:23:be:1f:f5:8d:
b0:f6:34:54:b8:01:a7:22:a9:f5:07:c9:e1:2a:02:cf:c0:40:
d8:d5:e0:41:4c:1d:6e:6c:ac:c3:1e:0d:95:82:c7:55:7c:1b:
1f:0d:61:d5:2b:74:a0:49:e8:54:ac:bb:69:22:93:a3:76:bb:
f0:75:89:5c:c1:be:9d:37:72:66:12:0a:e0:67:43:01:fb:68:
80:69:1b:de:f9:49:37:e2:58:4a:3f:e0:69:eb:e7:98:e5:84:
94:f5:cb:48:17:30:6f:59:34:3e:7a:15:1a:ef:09:57:f7:42:
a8:8a:b0:c7:a3:7c:ee:ce:27:6e:40:b5:60:eb:41:85:68:27:
09:59:8b:8d:67:73:58:86:32:ca:35:e8:41:a4:6f:47:94:a6:
ea:16:f2:27:a1:dd:95:cc:b6:11:f2:9d:44:80:19:8d:41:9e:
19:94:ac:4b:b0:61:4e:8f:7d:54:23:7c:db:62:d3:61:81:0a:
e7:21:b1:79:1a:60:3e:f9:81:67:7c:1e:9c:df:c9:38:a3:5b:
57:b8:e8:90:6c:9e:df:9f:cb:22:4d:a8:bc:d2:33:36:9a:4f:
66:f9:be:b0:1f:28:0a:30:80:6b:b6:6f:80:a1:51:3e:32:9a:
44:77:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 12:05:31 2023 by rpki-client on console-fra.rpki-client.org