Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/eQydM8l6INOlMXIybC0mrTk2O5Q.roa
File: eQydM8l6INOlMXIybC0mrTk2O5Q.roa (raw, json)
Hash identifier: g70LVLfPbYe4OtUKfEU/9MZlQ6mxZZcx1N1mNFzw+Mw=
Subject key identifier: 79:0C:9D:33:C9:7A:20:D3:A5:31:72:32:6C:2D:26:AD:39:36:3B:94
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 01856DD41CA483EB6FC9FBCCF1ABFA91B73E
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/eQydM8l6INOlMXIybC0mrTk2O5Q.roa
Signing time: Sun 01 Jan 2023 14:54:55 +0000
ROA not before: Sun 01 Jan 2023 14:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202803
IP address blocks: 80.64.212.0/23 maxlen: 23
80.64.212.0/22 maxlen: 22
80.64.214.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:1c:a4:83:eb:6f:c9:fb:cc:f1:ab:fa:91:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Jan 1 14:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=790c9d33c97a20d3a53172326c2d26ad39363b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:59:73:b2:1d:06:ef:41:2c:c1:3b:fc:f5:
e8:14:fb:9f:69:0f:88:7a:07:bf:ea:70:a6:b2:8a:
f9:eb:a3:1b:0b:8c:59:70:74:8c:e6:d5:a4:b6:fe:
40:5e:c1:1d:c1:66:47:84:99:57:8c:33:33:df:5f:
f5:eb:45:e2:03:80:c1:08:67:45:73:1b:d1:ea:80:
5e:1d:66:e8:48:c0:66:33:2a:1a:d1:98:36:aa:ad:
6f:ee:a9:8d:bf:00:2e:31:b0:79:d3:7e:6a:8a:e0:
9a:d2:61:68:bd:9d:d8:73:0b:66:e6:66:07:08:5c:
d9:8b:1e:e5:c2:45:d0:12:37:f0:88:2b:0f:b5:63:
34:e2:65:81:1d:37:c7:81:e5:e1:44:b8:7d:9d:ef:
35:19:d0:18:e4:d5:8d:91:f0:bb:53:9d:fb:03:39:
45:57:93:78:fc:3e:00:85:12:37:46:ba:bd:54:1f:
f8:eb:73:c9:95:5f:03:d4:b2:fa:56:8d:fe:72:a9:
81:19:59:b8:08:91:c3:8c:3c:c3:f7:8f:e9:30:d4:
08:b0:35:3b:0d:f7:ae:0e:49:e5:ed:f2:43:7b:94:
9b:e5:c0:15:51:f4:7e:71:1d:e8:7e:95:38:78:22:
e4:c9:21:5e:ee:bc:ba:c3:26:34:47:9f:a9:49:88:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:9D:33:C9:7A:20:D3:A5:31:72:32:6C:2D:26:AD:39:36:3B:94
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/eQydM8l6INOlMXIybC0mrTk2O5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:b5:95:ec:b3:75:4b:a7:53:9b:94:c5:f9:25:dc:fb:76:aa:
27:11:88:8f:b2:8a:33:84:71:08:f5:c8:dd:6c:c5:96:a2:d2:
7f:b1:8f:22:b5:17:99:75:3d:db:eb:aa:52:bd:c8:78:ca:ae:
bc:84:22:b1:43:0f:98:90:d2:8a:f6:cb:cb:45:b4:57:c3:32:
72:80:95:fa:d7:ba:ca:18:1d:a4:e3:40:be:bd:76:29:ca:5e:
97:66:a6:94:87:49:73:c1:47:49:05:dc:e4:50:a8:6a:c3:40:
43:37:8b:2d:1d:d9:82:dd:f3:f7:d5:c4:e1:ea:93:fa:11:c6:
1a:6d:59:76:34:24:a7:e3:4e:46:21:09:c5:15:4f:a9:cf:26:
29:46:ef:3e:ed:1b:ff:95:b4:59:0d:cd:ec:23:7a:08:4f:e2:
9c:e5:9f:7a:46:3c:44:e3:99:2b:1f:0e:b6:c6:f7:81:5a:65:
e5:53:d8:c6:63:21:54:a6:ff:50:08:1b:39:82:ec:86:cc:fb:
e8:3f:3a:30:5c:ad:a0:9d:a8:50:3e:4f:e8:3b:2d:8c:bc:e8:
09:1f:00:a0:e7:2d:2d:00:61:f9:b0:05:b4:99:80:63:14:ad:
fc:3c:5f:95:9f:a7:fa:42:6b:3b:59:76:95:a3:7b:e2:40:53:
f8:07:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:19 2024 by rpki-client on console-ams.rpki-client.org