Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/66dMA10lz0Dq69W9LcHoJ3KM7KI.roa
File: 66dMA10lz0Dq69W9LcHoJ3KM7KI.roa (raw, json)
Hash identifier: Ih7z6e0uvMuWwdIQYOSVp2Kvvost8FGPOIe9sMqqFoE=
Subject key identifier: EB:A7:4C:03:5D:25:CF:40:EA:EB:D5:BD:2D:C1:E8:27:72:8C:EC:A2
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 0185708CC613E46C3D8456FACEB1E7FFC305
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/66dMA10lz0Dq69W9LcHoJ3KM7KI.roa
Signing time: Mon 02 Jan 2023 03:35:51 +0000
ROA not before: Mon 02 Jan 2023 03:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 194.8.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 05:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:c6:13:e4:6c:3d:84:56:fa:ce:b1:e7:ff:c3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 2 03:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eba74c035d25cf40eaebd5bd2dc1e827728ceca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:44:4e:a9:59:cf:a8:c2:b0:f3:3c:91:0d:
11:44:5a:08:c3:8c:39:ef:38:b4:e8:d3:3e:72:ac:
e6:d6:fe:4c:81:10:7c:68:67:bf:d1:12:c5:d7:83:
cb:88:06:f1:7d:5b:60:61:fc:89:c8:4e:4f:3c:74:
76:e0:7e:58:11:18:98:e2:c7:a8:06:af:09:9c:d8:
e0:7d:59:c2:3d:54:55:60:a7:cc:67:1b:65:af:76:
34:91:79:92:7d:9c:11:ee:d8:27:71:ec:bc:62:91:
b2:cf:03:96:14:9e:ba:50:77:98:c5:d5:3b:a4:fe:
06:e1:36:6e:9d:a6:09:32:c5:ba:56:c0:e0:3e:48:
6b:e0:ab:43:5a:95:40:2a:f8:ab:15:f2:d2:b5:60:
e4:33:1f:20:b0:09:be:07:6f:b5:ec:57:b3:c5:cd:
9c:1e:59:6a:fe:03:49:80:9a:c6:e3:4e:29:88:fe:
bd:db:d4:aa:2c:43:2e:2c:cf:47:10:f6:90:6f:10:
12:fb:b8:f9:31:fe:a4:cb:55:78:82:1c:f6:77:d9:
b0:41:d8:60:42:12:22:49:0e:ad:02:40:9e:12:32:
ad:19:3f:22:8f:03:c2:b6:c7:e1:78:80:a1:f7:8b:
63:dd:6e:7d:8d:34:be:0c:c3:cb:8e:93:53:f7:08:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:4C:03:5D:25:CF:40:EA:EB:D5:BD:2D:C1:E8:27:72:8C:EC:A2
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/66dMA10lz0Dq69W9LcHoJ3KM7KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.80.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8f:b3:14:f8:64:44:0c:52:3e:30:e1:da:f6:1a:85:16:83:
f7:b6:6a:a4:ac:d5:35:1b:69:e0:be:91:86:ee:41:61:fc:00:
f7:93:d1:f6:ed:04:20:3b:31:fe:c3:26:2d:27:b0:77:75:35:
36:88:e2:de:9f:3c:fb:1f:9e:72:d0:86:ea:e6:36:09:1e:a8:
7c:bb:e3:c7:b7:2f:e1:b6:ab:d7:fa:b5:05:ae:e0:89:af:a9:
26:d7:cd:51:8b:cf:5f:f8:0b:ae:88:ef:c5:8c:e1:4b:a5:09:
f6:cd:c2:1c:3e:59:83:51:ce:a3:c9:2f:3b:af:39:c1:e1:c2:
e4:3b:b9:9e:03:0b:3d:0d:b0:c2:59:b3:58:08:d1:64:55:cf:
5b:a1:c4:8d:3b:08:1d:11:7c:2b:31:ea:a4:dc:19:68:02:e9:
24:46:6d:2d:07:98:90:be:b0:77:00:65:4b:6d:97:92:0c:38:
f8:11:0e:5c:fe:9f:37:65:ef:d1:e8:2b:56:10:da:3f:85:9a:
ad:f9:3a:b9:53:45:ff:77:47:cf:74:f9:8b:0f:7d:a4:26:56:
c9:f5:f9:55:df:e4:7d:42:1a:38:c1:fd:97:da:90:10:bc:44:
76:6a:11:bf:a1:4a:a7:f6:b9:74:0f:16:fe:36:fb:b6:b8:ef:
06:d1:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org