Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Bj2tya03kxSCmHhsUsZGsdOTjK4.roa
File: Bj2tya03kxSCmHhsUsZGsdOTjK4.roa (raw, json)
Hash identifier: PMtVh2FS9s3it9yIZLgzYkqjLZJpyVIOqu0hyKZxYb4=
Subject key identifier: 06:3D:AD:C9:AD:37:93:14:82:98:78:6C:52:C6:46:B1:D3:93:8C:AE
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018793A7D29EE714AB36D8EA0549AD12ED8B
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Bj2tya03kxSCmHhsUsZGsdOTjK4.roa
Signing time: Tue 18 Apr 2023 09:17:41 +0000
ROA not before: Tue 18 Apr 2023 09:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 80.249.112.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
80.249.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:a7:d2:9e:e7:14:ab:36:d8:ea:05:49:ad:12:ed:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Apr 18 09:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063dadc9ad3793148298786c52c646b1d3938cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:44:26:af:2f:56:b3:f4:b2:8d:4f:7e:17:
39:a9:53:97:33:d2:7a:f2:95:8a:9c:0a:5e:92:78:
cc:7e:2a:48:8c:bb:ab:61:61:67:4f:2c:56:7b:0f:
10:11:98:38:34:e1:30:6e:db:7f:a6:4e:bb:df:43:
6e:f8:62:0e:6c:81:7f:da:ea:44:04:38:b4:78:86:
74:ed:ae:ac:54:b5:3f:bf:5d:29:ea:cc:6f:ad:b5:
6d:d6:15:41:fb:30:6a:2e:2a:b2:18:7f:29:5d:32:
78:f8:3e:48:f2:eb:68:fb:f7:55:16:db:89:15:1f:
90:7c:8e:9f:8c:e6:7b:74:ab:ec:16:a2:66:73:22:
a0:95:c5:9a:07:49:f6:88:41:f5:56:39:83:61:2b:
fc:f2:49:6e:e7:b8:b6:ad:4d:92:a9:d4:15:de:9c:
f4:ab:e6:e0:e3:d8:2d:a1:a6:16:c4:29:3d:15:7f:
10:f8:1c:7c:25:01:ac:ee:75:99:80:d2:1c:54:a1:
95:7c:71:fc:76:c7:11:cc:fc:a5:2a:7c:46:d1:4b:
1d:2d:95:c0:7e:5e:57:41:c5:4f:82:0a:8c:9b:4c:
b7:56:1e:99:f0:d8:05:ca:99:72:01:e0:57:19:9e:
3b:d8:1d:81:22:02:cd:d6:f0:20:61:ca:24:d7:34:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:AD:C9:AD:37:93:14:82:98:78:6C:52:C6:46:B1:D3:93:8C:AE
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Bj2tya03kxSCmHhsUsZGsdOTjK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.112.0-80.249.114.255
Signature Algorithm: sha256WithRSAEncryption
a9:59:18:52:21:bf:ce:66:33:52:79:80:d6:92:fb:2f:aa:ce:
95:f1:7e:f7:3e:8d:f2:c1:d7:3d:28:b3:57:1f:3b:48:4a:df:
e5:f5:ec:86:98:5e:8c:6f:a7:95:02:d1:2f:d9:42:1c:da:20:
c2:12:07:e5:03:a1:2e:21:90:52:48:37:32:4a:52:10:58:99:
42:9a:e2:07:74:21:65:7a:96:be:a3:51:a2:72:b9:ec:a0:5d:
0b:52:53:fa:04:46:b7:c3:6b:c1:6a:2f:2c:f9:5a:9b:37:32:
08:e7:55:fa:d5:3d:c7:0a:57:9a:34:c2:f0:1f:87:07:e6:f1:
d0:74:01:90:9a:4e:70:e7:11:d6:a6:a1:01:fb:69:2d:df:af:
30:5f:52:ed:b5:3c:57:74:d1:83:87:36:21:86:f3:82:99:2d:
5d:82:17:bf:77:62:d6:d2:63:92:99:78:59:ee:6c:bc:44:3a:
94:0a:fc:6c:f8:59:c2:1b:73:0a:72:1a:1c:93:6b:7e:87:46:
41:da:67:10:25:0b:a7:40:26:83:a8:25:7b:77:cc:51:88:b6:
69:09:3b:ef:0b:f6:dd:d9:74:f0:b9:be:63:2a:2e:79:c1:d8:
6a:97:29:06:7e:4e:42:1c:6b:7a:6a:cf:c3:bb:d8:8d:55:a7:
d3:a1:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 07:25:08 2023 by rpki-client on console-fra.rpki-client.org