Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/7pgY3jaYXQAUO_ebd9q1kbTVSis.roa
File: 7pgY3jaYXQAUO_ebd9q1kbTVSis.roa (raw, json)
Hash identifier: SCDJlvrLpUL2tdLSE1GrWAbxFGdFkohy4Eojvuv0mhQ=
Subject key identifier: EE:98:18:DE:36:98:5D:00:14:3B:F7:9B:77:DA:B5:91:B4:D5:4A:2B
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01916F215B914F4DB6DF562108C51E35E4D2
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/7pgY3jaYXQAUO_ebd9q1kbTVSis.roa
Signing time: Tue 20 Aug 2024 09:32:22 +0000
ROA not before: Tue 20 Aug 2024 09:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 09:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:21:5b:91:4f:4d:b6:df:56:21:08:c5:1e:35:e4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 20 09:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee9818de36985d00143bf79b77dab591b4d54a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:35:d3:e8:ee:9e:e1:4e:bf:5a:eb:c1:ab:
92:bf:33:cd:3d:27:bc:c5:fc:ec:2c:e8:a2:4f:03:
94:aa:6f:f4:04:dc:93:ff:f5:23:11:3d:5b:e0:06:
1c:89:c7:c9:ff:84:6d:3d:e8:2c:30:18:b8:74:6d:
16:a3:c2:2e:c7:e6:c2:a7:71:db:c1:5a:56:3c:ef:
54:d3:eb:9a:dc:0c:c0:8c:d3:4a:74:fe:25:7a:9d:
a1:02:f2:0d:18:49:d1:db:8d:94:e8:2c:c9:0a:1b:
6d:f1:1f:19:b3:07:f9:01:46:ba:f3:fb:ec:6b:bb:
f2:ca:ba:0e:52:72:90:82:27:e3:25:76:03:f8:c0:
7d:86:b2:55:3c:50:b8:0d:34:3e:3e:ef:05:72:1d:
35:d8:cb:98:30:0d:a4:4d:f1:6e:77:17:12:6f:71:
cc:af:06:1c:d7:29:e2:2b:24:f6:c4:d9:d9:db:d9:
4c:90:f2:bf:cb:34:5a:64:e6:05:bf:90:28:13:11:
12:81:fd:25:05:46:c1:ff:e3:e9:32:06:c4:5e:e1:
36:aa:c5:f4:c9:b4:7d:cb:5f:18:89:81:21:5c:3f:
10:b0:68:a9:1d:71:21:35:9d:9a:fb:03:8d:83:63:
8d:11:44:0f:38:02:cc:5c:b9:28:16:c5:57:6b:f6:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:98:18:DE:36:98:5D:00:14:3B:F7:9B:77:DA:B5:91:B4:D5:4A:2B
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/7pgY3jaYXQAUO_ebd9q1kbTVSis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.202.0/24
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
30:1f:fe:0d:70:ef:d1:6b:22:ac:c1:8f:a1:c8:f6:05:81:a5:
1a:16:eb:32:81:72:ee:a6:97:48:68:ef:5c:ab:c9:e6:9f:32:
27:bf:9b:eb:b1:8e:ae:a6:47:34:c7:85:c1:0b:46:cd:66:fc:
d5:92:23:7d:fa:14:2c:80:09:94:07:3b:ab:fc:4d:2d:07:be:
0c:0f:92:8c:c6:78:7c:37:f5:35:a5:5b:81:8f:b5:1b:05:aa:
34:da:92:c9:80:14:98:f1:0a:81:db:3e:f5:67:94:cc:cc:fa:
bd:d8:41:b3:ab:5d:b6:6b:12:66:6c:a2:8e:4e:fe:20:5a:ee:
ae:9d:63:8e:31:82:2b:2b:78:fc:47:e3:50:26:9d:e2:ec:ab:
ce:25:75:1a:e6:5a:f2:1a:5a:9a:b8:40:7c:6e:f9:cf:15:3d:
d0:ec:b2:ba:a1:28:b9:8e:8d:5f:17:ca:2e:35:1f:4c:00:7a:
e9:d2:51:89:83:76:1c:90:3c:bf:6f:03:e6:6c:76:d7:a2:5b:
92:52:63:75:a1:a8:66:01:7b:75:14:4e:1b:94:40:6b:e1:fc:
67:f7:7a:9d:72:38:e7:03:6f:93:96:a9:7b:d8:86:c4:9b:7c:
93:5d:5c:be:af:bb:32:13:88:9d:6b:68:a1:35:a3:10:3e:f6:
1c:a6:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 13:10:08 2024 by rpki-client on console-ams.rpki-client.org