Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9TsSxTUPQWSiH0OVP0CGtt3fq_8.roa
File: 9TsSxTUPQWSiH0OVP0CGtt3fq_8.roa (raw, json)
Hash identifier: Nw82D9rucZCVm1jfZ0bDfHz4gAtMw2QYVGDgEHRLASA=
Subject key identifier: F5:3B:12:C5:35:0F:41:64:A2:1F:43:95:3F:40:86:B6:DD:DF:AB:FF
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018A400A1E4E60B0B0327328F21A6DC8B348
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9TsSxTUPQWSiH0OVP0CGtt3fq_8.roa
Signing time: Tue 29 Aug 2023 06:45:19 +0000
ROA not before: Tue 29 Aug 2023 06:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 80.249.112.0/24 maxlen: 24
194.56.148.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
80.249.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 08:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:0a:1e:4e:60:b0:b0:32:73:28:f2:1a:6d:c8:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Aug 29 06:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53b12c5350f4164a21f43953f4086b6dddfabff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:f8:26:8d:1d:60:bb:b6:fe:52:f3:33:54:
a1:4d:a4:80:91:6c:d8:a6:e5:9e:f5:c6:e9:9c:d8:
23:9a:ee:26:01:e4:32:f0:f0:fe:72:e8:22:53:80:
f1:95:64:1a:0c:83:a9:89:a9:b1:8b:19:80:93:46:
20:04:db:94:ae:9a:91:03:c6:fc:96:69:79:32:43:
6c:08:26:28:7a:7d:87:2a:0f:23:5a:8c:c7:28:f0:
dc:76:4f:05:6f:2d:5f:b5:18:ad:28:0e:97:84:b8:
44:b5:28:07:5b:26:dd:c6:3c:b4:1f:2e:c6:ac:cd:
b6:6e:a0:fd:dc:6a:78:80:50:b7:87:ba:73:fc:86:
70:39:6f:2a:3d:e3:24:35:5e:f1:c0:54:e9:d2:95:
fd:b8:33:5f:18:e6:61:55:ed:cf:fe:8f:83:ec:5f:
db:81:e9:a8:5f:b5:8d:f9:f5:eb:52:10:de:da:c4:
c9:e6:a9:41:b0:0c:75:61:5b:0f:f8:80:72:70:9c:
1c:4a:ed:02:e4:26:9c:71:7b:db:2c:f1:e9:92:44:
94:bb:23:7b:70:47:cd:16:f4:95:91:e2:5c:de:87:
bc:2a:94:0f:6c:9a:6e:d4:71:fc:0c:3e:54:7c:4f:
7c:73:b2:f4:b3:c8:a8:c8:40:e0:b0:0b:8d:ea:6c:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3B:12:C5:35:0F:41:64:A2:1F:43:95:3F:40:86:B6:DD:DF:AB:FF
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/9TsSxTUPQWSiH0OVP0CGtt3fq_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.112.0-80.249.114.255
194.56.148.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c8:85:73:6b:aa:e9:9d:e9:2b:b1:9d:2f:af:67:90:76:ea:
78:1f:55:96:14:82:9d:2e:bd:06:bc:b9:e5:3b:2c:56:ae:57:
1e:1b:b5:6d:30:56:7c:b6:34:e8:96:b5:48:b2:87:a4:aa:16:
07:eb:54:1e:7a:fa:fb:9e:01:9e:be:a4:04:92:9a:69:84:8a:
c1:02:f2:c9:8a:be:2a:b9:cf:f0:00:e5:a7:e1:9a:b0:d9:b2:
9e:52:ab:67:cf:5d:80:44:d8:5c:30:6a:54:05:2f:1b:d0:3a:
6d:60:bb:83:ec:c1:c4:2d:f8:42:dd:fa:ec:4f:5f:7f:28:1d:
85:f6:a7:76:71:a0:1f:4a:94:43:04:71:20:6d:e3:d6:50:0a:
68:db:05:b5:65:01:f1:ae:ec:60:2c:b8:6a:82:46:db:6c:94:
95:32:d1:60:1c:3b:2a:79:be:df:63:6e:61:13:1d:b6:36:cd:
08:c5:cc:6c:d6:e1:0f:9f:f1:1d:4c:d7:92:bb:81:53:84:c0:
25:72:a3:02:11:7a:75:18:ac:e7:0c:f5:82:94:9f:3a:0a:32:
2f:d4:e2:5b:9e:ea:b2:4e:9d:da:3e:db:d6:db:64:d6:7e:89:
c3:7b:98:b8:10:76:fa:35:a4:03:76:d6:e3:ee:28:ad:14:90:
92:fc:5f:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org