Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/o2DGRCZWhSEe7I-VcB96v1ZRJIc.roa
File: o2DGRCZWhSEe7I-VcB96v1ZRJIc.roa (raw, json)
Hash identifier: th5hCbaeNJmC1zsByK52eZSsWZLJqx0MTli0Vfp5SOM=
Subject key identifier: A3:60:C6:44:26:56:85:21:1E:EC:8F:95:70:1F:7A:BF:56:51:24:87
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018B70375606D878D0F1DC0D35E551372E07
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/o2DGRCZWhSEe7I-VcB96v1ZRJIc.roa
Signing time: Fri 27 Oct 2023 08:19:16 +0000
ROA not before: Fri 27 Oct 2023 08:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 80.249.112.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
80.249.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:37:56:06:d8:78:d0:f1:dc:0d:35:e5:51:37:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Oct 27 08:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a360c644265685211eec8f95701f7abf56512487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:b0:b3:96:46:66:2a:df:3f:68:46:6a:55:
93:f9:3d:3e:f9:b4:56:0b:3f:0c:5a:db:33:0c:2b:
be:bc:2e:7b:9e:c8:94:98:6f:e7:2c:16:d7:73:93:
f5:de:4b:84:67:f3:91:76:c2:ef:c1:d4:c6:26:63:
d8:e3:26:8d:1b:3b:3a:f9:19:ed:58:a8:15:72:45:
c9:4b:f9:d5:3f:86:a7:36:c6:34:06:c8:e8:09:38:
a6:a9:87:08:81:10:24:83:04:68:95:4a:fc:3e:69:
2e:22:ac:1a:72:9b:20:3f:85:ef:fd:43:3f:8f:42:
36:5a:68:b8:9e:47:9c:0f:3e:db:42:ef:2a:58:98:
40:bb:66:ea:9a:67:d2:3b:5b:ef:20:c1:1d:36:aa:
c4:d4:71:83:2d:1b:52:72:78:83:8d:d1:40:26:42:
7d:66:a6:50:e5:d4:5b:74:7c:77:6a:57:a7:e0:ed:
4c:10:f4:39:9f:b7:3c:6f:4a:8c:ae:9f:3c:85:5c:
a4:d6:5c:4e:f6:1a:5a:4f:a9:e9:02:d1:c6:66:f7:
ba:b4:99:20:2a:45:0a:37:b2:88:aa:03:03:75:f4:
74:a3:4e:65:21:79:63:13:80:d5:99:fd:4e:f9:c6:
76:23:2a:5b:6e:95:dd:1a:38:e6:4c:c6:36:7d:34:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:60:C6:44:26:56:85:21:1E:EC:8F:95:70:1F:7A:BF:56:51:24:87
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/o2DGRCZWhSEe7I-VcB96v1ZRJIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.112.0-80.249.114.255
Signature Algorithm: sha256WithRSAEncryption
7d:9a:97:bc:02:ca:b5:0c:4a:10:3e:4e:d2:15:be:b2:a5:84:
6f:5c:7b:bb:db:ea:62:fb:9b:d3:4e:e0:ec:83:6c:a0:06:23:
46:40:d4:dc:23:32:22:51:56:21:18:66:d0:c6:dd:28:d8:81:
e8:76:a4:16:91:31:c9:cd:a1:cd:5e:f3:cc:76:91:9a:f7:4a:
2f:86:99:34:39:d4:3c:3e:b7:fc:7d:c4:2c:fe:20:ed:a9:e5:
e6:de:8e:e7:d8:90:36:5d:d8:d8:fa:8a:b9:51:92:d9:2f:03:
a8:5b:cc:0d:dc:97:71:d6:f9:ee:52:99:0d:bb:e5:5d:d2:a1:
9e:39:f7:3a:e1:b3:54:00:3e:64:81:73:4b:b0:1f:59:50:0b:
46:e3:d6:87:ea:72:bc:bc:ed:b4:14:a9:80:b7:ad:3d:76:49:
bb:92:15:cb:45:d9:9d:48:0f:e1:9d:f1:e6:ea:0b:a1:2a:11:
2f:7c:19:a2:f9:b3:f5:61:3c:f1:d0:1b:39:03:e3:4b:21:c2:
90:db:d6:26:e8:39:22:eb:61:d2:9d:3e:44:16:5b:0c:45:b2:
91:77:52:44:6b:02:77:80:aa:1a:3e:1c:44:80:47:60:c4:6d:
b5:69:ff:83:87:9a:a3:69:e7:ac:18:b2:16:1f:e9:76:9d:c1:
c8:52:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org