Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/L2jdI_yFp5iLp_737nDVDtTyojI.roa
File: L2jdI_yFp5iLp_737nDVDtTyojI.roa (raw, json)
Hash identifier: gSv1acnKi7GSBfSVfIqQ4rkLzqCsuo+ff+bKk+E75dU=
Subject key identifier: 2F:68:DD:23:FC:85:A7:98:8B:A7:FE:F7:EE:70:D5:0E:D4:F2:A2:32
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0189306EB19F9D2E4E822FF6EAE7FA785E9B
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/L2jdI_yFp5iLp_737nDVDtTyojI.roa
Signing time: Fri 07 Jul 2023 12:58:28 +0000
ROA not before: Fri 07 Jul 2023 12:58:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.93.205.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 10:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:6e:b1:9f:9d:2e:4e:82:2f:f6:ea:e7:fa:78:5e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 7 12:58:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f68dd23fc85a7988ba7fef7ee70d50ed4f2a232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:94:ae:c6:43:dd:54:ae:aa:1f:0f:cf:0d:c7:
e9:ab:40:c5:13:5c:68:0b:f1:1e:87:a7:a8:a5:b2:
9e:f2:0d:d3:ac:82:f1:52:6c:32:28:a4:c5:c2:d7:
69:8d:2d:34:e6:28:ed:6e:e3:2e:36:e1:f3:73:f8:
ed:69:49:7b:7b:f4:a4:92:7f:ca:53:2c:e2:98:9f:
1d:90:68:38:b7:dc:47:74:c9:13:60:55:93:e5:1f:
32:7d:88:3c:65:fe:2e:5b:04:8c:f0:5c:db:36:34:
3f:3d:55:a7:47:07:ac:6c:0a:62:59:c1:cb:43:3e:
a4:9c:63:15:7b:21:37:7c:13:16:89:eb:93:b4:93:
a8:53:cf:75:63:60:a2:93:18:f1:28:42:ef:d8:6e:
d0:e1:8f:ef:29:f2:66:14:f7:25:c4:62:7f:4c:aa:
f8:3f:19:5e:c6:01:33:1f:81:f7:93:f8:45:47:32:
fb:0a:d2:df:58:95:7e:89:44:46:24:c5:8b:37:58:
78:37:a1:00:cf:2b:e0:7e:6b:91:e2:5e:d0:e7:80:
a6:1d:5f:94:60:57:c6:3d:a9:20:2d:f7:df:df:a5:
36:6a:7b:31:27:ab:12:bf:01:8d:be:a5:9f:c1:f0:
76:03:e5:6a:af:0c:1c:cf:20:ab:f5:94:0e:f1:d4:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:DD:23:FC:85:A7:98:8B:A7:FE:F7:EE:70:D5:0E:D4:F2:A2:32
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/L2jdI_yFp5iLp_737nDVDtTyojI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.205.0/24
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ce:a5:a9:b6:68:ff:32:70:38:1e:e0:ba:c8:bb:ab:f2:6f:
f8:2e:d7:fa:49:04:93:d4:dc:8f:2e:06:d0:3c:12:a6:bd:ae:
fa:f4:10:fc:55:d0:df:3d:2d:31:60:ba:df:24:ee:66:58:b1:
d6:49:c1:05:0a:d8:e4:6c:bc:3c:ab:fa:2a:b2:14:25:c6:2d:
2e:e9:f3:07:a5:6c:d0:93:b7:d0:10:2e:5a:6e:5b:78:07:31:
a4:8a:7c:f0:21:54:b1:a9:f6:77:c4:6d:3a:b2:ea:75:b6:6d:
d4:59:52:bd:e5:a4:a0:9e:53:57:cc:91:20:af:46:3a:b9:5c:
51:57:de:59:34:71:e8:1b:c9:ab:1f:21:05:ef:e5:29:9b:f9:
92:e0:8b:fc:13:f3:f5:29:fe:99:45:07:0e:f4:3e:0e:10:ba:
58:b5:4f:28:a1:af:e6:aa:40:d0:d4:94:4b:80:e6:0a:77:e5:
1d:a1:b3:ad:67:9f:bc:a6:bb:8f:f5:1e:af:ea:5c:ac:d7:5b:
d7:3c:f1:e7:da:78:f9:f1:d8:e1:4a:00:3d:83:fc:62:fe:be:
ce:bf:b1:80:16:07:c1:2f:a3:90:9a:30:c4:6c:84:fe:0d:fa:
f7:7e:97:5a:b5:f4:4f:bb:f5:82:7a:4e:d4:5a:0c:21:c8:ad:
94:bc:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org