Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/6wBnloSpk50_azhzAJa8MPX33go.roa
File: 6wBnloSpk50_azhzAJa8MPX33go.roa (raw, json)
Hash identifier: WPE2FjCeUHmXbEvK75JBXKhm30r8nbZ/mjO4Imomqxs=
Subject key identifier: EB:00:67:96:84:A9:93:9D:3F:6B:38:73:00:96:BC:30:F5:F7:DE:0A
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 018573CCECA0E2FE167E33DAFAFD3C8F6E5A
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/6wBnloSpk50_azhzAJa8MPX33go.roa
Signing time: Mon 02 Jan 2023 18:44:47 +0000
ROA not before: Mon 02 Jan 2023 18:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24713
IP address blocks: 80.248.160.0/20 maxlen: 20
81.22.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cc:ec:a0:e2:fe:16:7e:33:da:fa:fd:3c:8f:6e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Jan 2 18:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb00679684a9939d3f6b38730096bc30f5f7de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:47:6c:21:a3:98:02:3b:d9:0b:b4:f0:96:
e3:00:8b:90:a5:22:63:5e:95:4f:5e:37:08:ef:9b:
8a:0a:a0:a0:77:ac:27:d2:91:1c:1e:0e:60:c1:32:
95:c5:b0:91:67:4e:f4:1b:9a:79:31:8b:4f:fa:56:
93:a3:66:88:3b:4d:96:b8:36:fd:19:15:8c:48:6a:
33:02:48:89:d3:15:da:7d:dd:01:63:68:71:7d:40:
b3:0c:fc:1b:01:7f:93:81:70:f9:33:6b:75:47:f2:
4a:b2:68:3e:32:a7:8f:9b:8b:00:9a:fb:21:34:cd:
f9:9a:c6:fd:6f:45:32:3e:94:cc:75:99:e5:ab:c6:
60:ff:68:9a:24:08:e7:07:8f:67:8f:d4:08:6d:a0:
a6:45:14:0f:0d:7b:84:23:8f:5a:ca:16:1a:82:bf:
47:09:36:af:10:f3:e5:7e:6e:99:be:44:55:b6:10:
12:7c:09:2b:56:39:e2:eb:d7:ff:61:6c:fb:4f:03:
44:08:4e:32:3a:25:28:35:83:1a:d4:a9:17:48:74:
9c:49:ba:f1:0b:84:d5:79:b3:5c:0c:17:7f:ec:a5:
3a:70:39:29:f5:52:a8:8b:e4:13:3d:90:3e:f2:39:
93:6a:fe:dc:9e:8a:12:41:05:62:56:5a:59:48:8b:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:67:96:84:A9:93:9D:3F:6B:38:73:00:96:BC:30:F5:F7:DE:0A
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/6wBnloSpk50_azhzAJa8MPX33go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.160.0/20
81.22.160.0/20
Signature Algorithm: sha256WithRSAEncryption
14:0c:0b:25:a0:85:fe:bc:7c:1b:8d:0d:30:bf:c3:92:72:7e:
b5:5c:85:69:ab:f5:25:a5:3d:58:76:a1:0e:b8:c9:90:62:30:
d7:0c:bb:2b:24:a6:49:f7:f5:f0:e9:d9:14:8c:30:e2:bb:19:
96:3c:53:da:39:ee:ef:8c:0a:6b:ee:a8:68:f6:55:c5:33:dd:
32:67:3a:a5:3c:37:80:f1:75:00:27:d8:75:cd:5f:12:fe:5b:
27:ea:ad:ee:12:fb:e6:68:9d:76:c8:98:ca:30:09:6f:de:29:
54:24:51:4f:1c:86:0d:31:56:b4:e0:39:97:c8:37:12:17:36:
0c:b9:8d:c9:92:50:ab:f8:37:f0:a1:5c:93:ec:31:0c:a9:92:
92:f1:c1:ec:aa:6f:c1:c1:b9:f8:42:1e:b5:27:18:a5:ff:19:
5c:f1:ec:a6:75:c7:e2:55:4e:6c:fd:5a:d6:4d:16:a8:4a:cb:
f8:5f:a1:21:ac:d7:84:d3:9e:91:90:49:1e:de:2b:4b:74:05:
2a:b3:ba:fc:5c:a4:56:dc:48:81:61:0a:e3:31:c3:b2:f2:be:
fc:ea:67:f9:4c:fa:a3:34:ad:c0:ba:3c:c4:d2:5a:8a:2e:27:
0c:e4:aa:44:60:9e:0e:90:0c:a2:41:8b:c6:3f:4d:5c:e1:f4:
11:e2:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org