Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/eAvSU8h7YB9-yGB3koUcNnkqrTU.roa
File: eAvSU8h7YB9-yGB3koUcNnkqrTU.roa (raw, json)
Hash identifier: O7Owk7IN0a5AdsEdu0BQXGWH0rTxv7tzgxWVk4vRGZw=
Subject key identifier: 78:0B:D2:53:C8:7B:60:1F:7E:C8:60:77:92:85:1C:36:79:2A:AD:35
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 018C9156DF898B89DCDB698CE482CFA64539
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/eAvSU8h7YB9-yGB3koUcNnkqrTU.roa
Signing time: Fri 22 Dec 2023 11:43:58 +0000
ROA not before: Fri 22 Dec 2023 11:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 109.196.160.0/22 maxlen: 32
80.65.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:56:df:89:8b:89:dc:db:69:8c:e4:82:cf:a6:45:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Dec 22 11:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=780bd253c87b601f7ec8607792851c36792aad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:4c:2f:20:21:53:18:74:b4:50:b2:9c:09:
b2:f1:9b:41:c1:11:53:95:e0:7c:31:fa:5b:b2:d0:
6e:ac:3e:a2:b5:07:5a:e3:7c:ea:f0:fb:91:a2:45:
8c:b4:50:3d:9b:86:a1:9c:e4:5f:83:1b:3b:01:4d:
78:ae:8c:4c:86:4a:2a:2e:72:b5:e5:ad:2f:9b:72:
69:1c:99:aa:9b:45:77:32:9f:e7:fa:ca:f5:8c:6d:
77:36:1d:b6:75:79:77:db:91:31:ec:66:d7:89:ab:
c0:46:fa:3e:62:2b:75:45:e9:00:fa:9c:21:68:88:
ae:fa:d5:51:ad:08:90:77:58:57:8f:30:00:b0:c1:
36:6d:53:69:94:4c:64:b3:14:ac:73:7e:37:32:ee:
7b:2c:98:4f:cb:d4:f2:6f:b7:d3:32:a6:4f:bc:44:
5f:ad:3d:11:2b:48:dd:7c:8a:da:6d:40:c5:e6:fc:
86:bc:5c:e4:6a:4c:e8:d2:ee:f2:23:82:8d:1d:d5:
65:68:f8:7b:e7:03:8c:00:03:2c:da:b7:e7:87:97:
37:21:9e:47:59:77:50:b4:99:69:7a:23:ee:16:e7:
50:9a:be:5e:1e:a1:31:40:02:33:85:11:aa:11:b8:
65:2c:bb:7e:e8:32:10:ad:38:a0:9a:c6:37:a7:15:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:D2:53:C8:7B:60:1F:7E:C8:60:77:92:85:1C:36:79:2A:AD:35
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/eAvSU8h7YB9-yGB3koUcNnkqrTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.216.0/22
109.196.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:c0:c0:32:93:6f:8d:65:6e:d2:17:6e:2e:a2:5b:9c:9a:8c:
7a:3d:fc:c2:48:4f:55:ac:f8:7b:c3:50:6b:14:c2:29:cc:2a:
0b:e0:d5:4a:be:da:4c:5c:0b:50:17:1c:8b:53:d1:3a:c7:aa:
c0:64:1e:0e:be:f6:c5:0f:2b:d1:ce:47:97:17:33:d2:dd:21:
2d:a6:fd:9d:e6:09:06:66:6f:ce:a0:0f:ac:36:5b:f3:68:32:
cc:6f:43:fa:2d:e4:06:d7:20:b9:6f:bb:9e:e1:1b:1a:52:ba:
ae:3a:e1:e5:09:a6:28:c3:83:82:71:7a:75:9d:7e:4b:32:32:
90:e3:ea:7f:22:a8:45:01:ae:e0:7a:e3:30:0f:a8:ea:6e:b8:
67:be:95:6d:53:2d:f4:d6:92:8c:10:c7:1f:6f:95:df:23:f1:
6f:f7:91:30:ac:17:85:3f:64:db:d2:cd:c3:91:29:61:cc:36:
38:8f:bc:16:72:29:84:ec:73:ea:18:ed:7a:1c:b3:3b:74:40:
39:19:fb:f4:d5:ef:58:2e:40:54:39:0e:2a:30:90:53:0f:8f:
59:45:0f:de:90:20:5b:fe:4e:68:9e:8b:09:5f:e0:48:45:30:
2e:51:c2:97:15:44:82:30:ab:53:15:99:f9:da:5b:16:70:29:
4e:17:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:30 2024 by rpki-client on console-fra.rpki-client.org