Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/y5JNeKe8vgs08J9Wz3s6luUwdwM.roa
File: y5JNeKe8vgs08J9Wz3s6luUwdwM.roa (raw, json)
Hash identifier: Sl9l1+PZau13PRfnN9WfhXS6+i6xrggPiFtL7kS+KZE=
Subject key identifier: CB:92:4D:78:A7:BC:BE:0B:34:F0:9F:56:CF:7B:3A:96:E5:30:77:03
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01924D630874B6A25EEEECD2326F82831EA3
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/y5JNeKe8vgs08J9Wz3s6luUwdwM.roa
Signing time: Wed 02 Oct 2024 13:19:48 +0000
ROA not before: Wed 02 Oct 2024 13:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 12:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:63:08:74:b6:a2:5e:ee:ec:d2:32:6f:82:83:1e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 2 13:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb924d78a7bcbe0b34f09f56cf7b3a96e5307703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:fc:dc:d1:38:50:18:58:09:59:ef:d8:6f:
9b:c7:7e:cf:ae:5b:4d:f2:78:e0:84:0b:1c:75:e9:
fd:69:2e:5b:27:8d:51:99:35:25:14:48:ad:dd:a5:
1f:ce:50:b9:07:01:9b:0a:dd:8b:f7:2a:3e:be:ec:
e7:4b:3b:41:24:3c:da:fb:7c:98:e8:93:76:3f:33:
f9:0c:ae:43:2f:89:3c:32:ce:9e:a8:28:25:34:e2:
b4:9b:8f:8c:8f:6d:92:c6:0d:eb:64:8b:65:39:39:
ce:d3:59:49:ac:d5:f1:80:53:e3:ca:d6:f3:d3:82:
55:42:6f:9e:a5:09:50:aa:98:27:15:e7:da:93:84:
f6:51:49:be:ae:cf:5a:d1:0a:7e:54:f5:ea:03:cb:
7a:72:6d:de:a6:af:32:ce:3b:bb:9a:13:70:cd:a9:
e7:de:15:1f:c4:2a:71:a3:29:ae:59:ce:20:16:5a:
31:1c:93:1f:86:d3:63:25:84:3c:0d:51:59:f6:21:
7a:3e:d5:d5:a3:78:6e:43:d1:d3:68:41:3f:d3:6e:
6c:2b:68:de:60:40:a7:06:9b:c8:4a:ee:e9:e1:d8:
33:96:64:b5:ca:0e:99:47:5e:57:b7:97:2d:e7:42:
ec:7d:d8:19:17:44:47:41:53:64:f5:8c:00:2b:86:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:4D:78:A7:BC:BE:0B:34:F0:9F:56:CF:7B:3A:96:E5:30:77:03
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/y5JNeKe8vgs08J9Wz3s6luUwdwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fe:7e:96:00:df:ee:10:1c:a8:66:86:94:1d:f0:14:36:a4:
a1:c2:c4:2f:3b:fd:ff:7e:33:1f:52:0c:d1:2e:6a:21:c3:6a:
5e:f9:d7:4b:65:1e:9c:c8:32:9d:8f:e3:7d:10:ba:d7:cb:a4:
3d:6a:a0:ec:98:89:a2:9d:18:d9:22:04:ed:84:aa:c8:34:df:
2a:0a:54:64:ad:19:77:ef:a3:53:5a:b0:0f:83:7f:93:9b:a9:
32:8d:60:b0:f9:6b:47:49:b5:23:0c:0c:01:dd:2a:c9:40:08:
8a:90:41:d6:f7:9e:07:f1:3e:08:f6:76:f4:6b:e5:61:f5:35:
bd:d4:9d:b7:b4:1f:ab:b9:8c:b8:59:67:89:97:91:d5:f8:94:
d4:98:5f:ff:88:f1:9a:37:ff:9a:a6:77:85:c0:45:98:81:d5:
22:24:6d:a3:c3:06:4d:1b:15:71:94:6f:98:0b:f4:b2:4b:e7:
88:61:db:5c:e0:9e:9e:bc:b0:e6:22:5a:b8:16:fb:a4:f9:b1:
1b:75:89:8d:47:69:37:cd:1e:c6:bd:65:1a:ff:8c:54:50:34:
7b:99:af:c0:c8:a5:86:0c:d6:8d:e2:f7:87:5a:d3:93:f8:73:
5d:f7:91:3b:69:05:4c:73:a6:fa:b2:9e:19:13:10:a7:cc:8e:
ad:4a:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:03:35 2024 by rpki-client on console-fra.rpki-client.org