Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/DOEq0sgGwWEOAD3RpPKikYgufMM.roa
File: DOEq0sgGwWEOAD3RpPKikYgufMM.roa (raw, json)
Hash identifier: YqPB0jSz6C9sPK23FLg/9IclHHtWosJ0dzw42qUppq8=
Subject key identifier: 0C:E1:2A:D2:C8:06:C1:61:0E:00:3D:D1:A4:F2:A2:91:88:2E:7C:C3
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 01862AB7BB5B6B14BD4D34998D6F22EA7D70
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/DOEq0sgGwWEOAD3RpPKikYgufMM.roa
Signing time: Tue 07 Feb 2023 07:12:09 +0000
ROA not before: Tue 07 Feb 2023 07:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30873
IP address blocks: 185.80.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:b7:bb:5b:6b:14:bd:4d:34:99:8d:6f:22:ea:7d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Feb 7 07:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ce12ad2c806c1610e003dd1a4f2a291882e7cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:05:a2:57:71:42:86:39:d9:22:49:71:04:
83:97:02:2d:b7:0a:98:e3:e6:ad:91:59:47:13:fb:
63:fc:3f:b3:56:73:07:46:f5:e3:ee:b4:f0:c3:c7:
4e:25:b4:b7:f4:ee:41:84:2e:25:20:50:2e:7c:e1:
0c:fe:5e:08:04:e6:29:df:a0:0e:bb:5e:8b:76:ba:
52:85:6c:6a:33:5f:80:63:d2:3b:9c:09:f3:67:f2:
85:db:46:90:9b:da:a5:1a:63:ae:3b:2d:a6:29:5c:
15:d5:88:42:46:fa:67:8f:48:d6:df:52:07:0c:48:
7a:ab:f7:76:10:1a:85:97:59:8d:71:84:6b:36:6d:
f0:bd:2e:20:b7:24:41:61:a5:d7:36:93:a1:f4:21:
5a:19:57:4f:ae:4d:20:03:13:46:2f:57:35:2b:42:
15:fe:28:e8:00:b9:30:c5:e5:06:08:6a:ba:34:c8:
dc:e4:6e:91:0a:a9:94:fb:b6:21:0b:be:1d:86:67:
84:9b:eb:8f:81:89:84:53:57:b6:92:54:85:de:36:
68:dc:7d:4c:34:31:f0:3c:00:4f:0a:f9:f0:6b:70:
43:4c:84:02:3d:55:f3:b9:6e:a5:e8:ed:11:5c:81:
a2:88:72:c3:bf:11:20:91:f9:8f:d3:23:e0:e2:00:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E1:2A:D2:C8:06:C1:61:0E:00:3D:D1:A4:F2:A2:91:88:2E:7C:C3
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/DOEq0sgGwWEOAD3RpPKikYgufMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.44.0/22
Signature Algorithm: sha256WithRSAEncryption
13:d8:92:6b:41:c2:a1:0b:b9:84:7f:d8:54:dd:17:9c:5a:48:
3e:0a:1a:fb:48:b4:8a:7a:29:7a:d6:70:dd:6b:47:d9:a2:55:
e8:6e:02:0c:5e:41:13:9b:14:48:dd:7b:b3:91:bd:30:c3:9a:
02:dd:36:89:f5:18:2f:5e:29:ee:ad:be:ad:3b:40:11:03:b5:
e5:41:9f:73:80:80:f3:63:d4:91:f2:19:01:ed:d4:77:a7:7f:
64:52:3a:95:45:a8:ec:04:b3:1a:dc:07:3c:4a:bc:bb:40:27:
92:90:ed:41:be:3f:65:6a:d9:f2:e4:49:ac:c1:8d:4b:9f:35:
da:b5:80:26:3a:0f:e3:ed:39:12:b3:4c:b8:00:07:de:a8:c6:
7c:8f:7a:09:03:f0:33:7f:02:f0:71:58:28:99:05:10:6f:98:
09:47:dd:b0:ea:23:6f:0f:df:38:c1:4e:e0:3e:25:83:68:d6:
37:85:82:26:8b:16:08:c4:73:3e:c4:f2:f0:4a:5c:94:e7:e9:
2f:ff:8b:e5:5f:4e:32:29:a5:09:c9:db:d8:92:dd:f6:e8:a7:
c7:58:43:82:54:58:50:b5:9e:7c:02:f0:d6:08:f1:8a:5d:cb:
f1:2d:e2:e7:df:de:b3:4d:34:c5:59:1f:51:3e:ab:b4:b9:ac:
4b:10:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:02 2024 by rpki-client on console-fra.rpki-client.org