Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Ou_0p2etQfFmgNzk7eZHXsfGAj4.roa
File: Ou_0p2etQfFmgNzk7eZHXsfGAj4.roa (raw, json)
Hash identifier: myYAgBQ1SgHggl1ODFDKmH92EVQlGTKq5SdoixbGeCM=
Subject key identifier: 3A:EF:F4:A7:67:AD:41:F1:66:80:DC:E4:ED:E6:47:5E:C7:C6:02:3E
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7C429347E6682D4D32F1A489C761E
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Ou_0p2etQfFmgNzk7eZHXsfGAj4.roa
Signing time: Mon 02 Jan 2023 09:37:23 +0000
ROA not before: Mon 02 Jan 2023 09:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 80.249.112.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
80.249.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 09:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c4:29:34:7e:66:82:d4:d3:2f:1a:48:9c:76:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aeff4a767ad41f16680dce4ede6475ec7c6023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:1d:47:2b:5b:d3:78:de:b7:7f:b5:97:29:
c4:39:ac:24:b2:66:94:6f:d3:a4:6a:af:cc:25:66:
cb:0d:b0:6f:8d:77:39:87:6e:5d:dd:eb:5a:1e:5c:
b9:ac:0d:5d:14:77:6f:c3:c4:40:1c:1b:7a:9e:95:
ea:e6:10:2e:c7:70:1e:d3:45:e2:8c:ac:5e:77:a0:
36:f8:ab:bb:e6:31:d6:c7:cc:e7:06:76:cb:b8:8c:
6d:d0:e2:39:5b:0c:3b:d0:70:f6:68:ae:08:8c:c5:
bb:6f:4a:66:a0:88:24:3d:35:88:dc:06:fa:9c:9f:
f7:69:9d:ca:11:de:ac:b9:91:89:9e:cb:92:fc:ac:
51:a0:94:81:be:90:6d:c1:73:5b:e4:3c:0d:6a:75:
5a:c6:23:4b:09:89:e2:37:85:ed:f7:22:50:e5:0b:
15:ba:dd:e1:1a:1d:39:12:bb:7f:3d:b0:03:7a:8a:
61:2e:07:92:b8:2e:21:7a:93:13:55:76:82:77:11:
fe:c6:b2:a2:2b:cd:14:fa:ef:5c:a8:53:ec:01:31:
9d:43:89:5b:ca:61:be:ba:20:9e:81:ff:31:30:4b:
64:f7:2b:0b:9f:a8:47:55:19:3d:44:22:93:72:eb:
03:76:81:17:0a:05:0c:da:dc:d2:2a:37:ee:73:c6:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:F4:A7:67:AD:41:F1:66:80:DC:E4:ED:E6:47:5E:C7:C6:02:3E
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/Ou_0p2etQfFmgNzk7eZHXsfGAj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.112.0-80.249.114.255
Signature Algorithm: sha256WithRSAEncryption
86:50:98:bd:1c:77:fb:7d:13:94:9c:df:b2:96:41:9c:ef:ea:
26:ea:9b:40:28:d5:0a:7c:20:9d:fa:6f:42:ba:a6:93:68:a6:
e1:bc:3b:50:ab:8f:91:6f:23:bf:0b:34:90:aa:97:71:40:62:
f3:e8:90:ec:84:0a:73:1c:13:c7:64:8b:15:cb:41:78:2b:b2:
bb:ae:a2:b9:ac:bf:65:bb:f2:1b:0e:80:be:37:3b:55:5e:d7:
dd:91:82:b7:3e:6c:b5:6e:04:a8:c7:89:a2:41:08:93:20:28:
ed:2d:29:85:cc:3e:c0:40:9b:27:28:45:75:81:75:10:8e:2c:
26:cc:54:2c:59:1b:ca:77:75:b5:c6:08:44:5d:44:e2:a7:2a:
e5:6d:ae:9f:ab:7e:a4:89:9f:2d:7e:bd:f7:48:92:8c:63:91:
75:02:91:a5:27:43:5f:5a:6a:bc:d2:91:33:e5:81:05:37:e7:
99:84:b9:44:ca:25:d8:35:67:ad:f1:0f:70:4d:26:69:9f:e9:
73:5c:c6:93:b3:72:48:4d:05:a3:15:8b:de:5d:a6:df:ec:60:
6d:15:fe:0d:1f:e0:21:95:35:ae:d1:d0:45:05:a3:63:32:5b:
7b:8f:f7:8c:7a:c9:03:99:19:1d:58:ec:7b:18:4f:6a:79:90:
16:72:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org