Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KUX0YpEVuPfcBYEXEH56X2Xs2aI.roa
File: KUX0YpEVuPfcBYEXEH56X2Xs2aI.roa (raw, json)
Hash identifier: aPQOaTPkIxV7wSyti+k87zi0RLsp+jbGkBkMakedfXs=
Subject key identifier: 29:45:F4:62:91:15:B8:F7:DC:05:81:17:10:7E:7A:5F:65:EC:D9:A2
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0189CF7D3B439AAF7F46B11A47F4424804AA
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KUX0YpEVuPfcBYEXEH56X2Xs2aI.roa
Signing time: Mon 07 Aug 2023 10:13:58 +0000
ROA not before: Mon 07 Aug 2023 10:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.205.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:7d:3b:43:9a:af:7f:46:b1:1a:47:f4:42:48:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 7 10:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2945f4629115b8f7dc058117107e7a5f65ecd9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:24:c4:33:d6:af:38:fc:03:b2:76:75:28:
43:5b:8e:ea:94:0f:46:20:ff:d2:65:74:95:67:d7:
b0:c4:34:bf:e6:bb:00:fb:a8:3a:9e:a4:9d:04:ce:
c5:1c:6f:01:eb:c1:23:a1:08:e4:a7:62:99:f5:e9:
46:b1:a3:0e:f2:2d:74:21:bf:10:81:4c:6a:ed:2b:
ae:86:7c:8a:ca:71:22:64:43:85:8c:c9:44:d9:46:
84:43:32:e6:8c:ed:59:bf:e2:da:9a:77:16:bb:51:
2e:d7:ba:cc:f4:91:16:5d:a9:46:84:3b:ff:5f:8d:
10:13:6c:1d:9f:0f:f3:08:40:df:f3:b9:c0:32:9c:
6f:f7:0f:6c:4f:9f:a0:f6:8e:6b:6f:29:e8:9b:39:
f2:bd:80:bd:4b:f3:9e:82:e2:bd:79:0d:8b:7b:b4:
d6:37:91:99:b9:e5:eb:e4:09:b8:e9:d3:25:f0:e1:
72:5c:4a:4b:0f:b5:6a:2a:88:93:8c:f3:d2:34:4e:
b3:df:92:12:4a:29:58:c4:0c:89:85:8b:8d:bb:82:
c8:c6:5e:29:42:62:4e:97:a3:4b:f1:83:aa:0f:9d:
2b:35:18:44:dc:7b:93:7f:b7:1a:73:3a:f6:dd:fa:
4c:7e:eb:60:06:73:0e:8f:70:9d:a4:c8:c6:3b:31:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:45:F4:62:91:15:B8:F7:DC:05:81:17:10:7E:7A:5F:65:EC:D9:A2
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KUX0YpEVuPfcBYEXEH56X2Xs2aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/24
80.93.205.0-80.93.207.255
Signature Algorithm: sha256WithRSAEncryption
36:fa:35:b9:96:1f:ec:0c:03:0e:6d:2d:bb:21:fa:68:b7:78:
da:c8:6e:cd:7f:f7:b9:95:54:ca:a5:92:f7:9a:b0:f5:7b:b1:
be:71:35:0a:62:4b:bc:23:3c:d6:df:b4:6a:87:96:82:82:33:
dc:dd:3c:90:2a:db:c3:7c:97:e6:a2:b9:73:88:fa:27:e3:71:
7e:7d:a7:ef:e2:6d:41:df:e2:2e:76:38:9f:24:b8:eb:23:f1:
21:2c:89:5c:ce:62:86:dd:cf:3e:8f:b9:65:1b:a2:08:fa:9f:
f6:8f:59:7e:47:35:c6:f3:f6:e9:f6:8b:f9:fd:ab:a1:83:ef:
bb:9f:1f:df:f8:de:fe:30:74:64:5e:63:a3:4f:83:eb:b6:6d:
0e:52:ea:73:08:b1:4d:cf:56:36:2a:49:3d:ec:4e:45:78:f6:
15:52:64:82:e6:41:a4:84:27:27:e0:29:7e:49:70:14:09:7c:
b0:c8:59:9a:22:6c:94:df:67:e3:bb:82:94:ba:8d:09:06:f7:
6e:0e:4c:98:a4:fb:f3:95:20:50:65:42:e2:47:6c:2c:25:2e:
d5:30:f4:18:ea:b8:08:31:d0:69:bb:a3:4c:ce:77:54:bc:32:
c1:e1:39:cf:d5:59:e7:d4:84:59:66:52:5b:29:e2:f2:04:25:
21:69:81:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org