Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/DA8IJYqLm82FLYBW9NFUEvsqaD8.roa
File: DA8IJYqLm82FLYBW9NFUEvsqaD8.roa (raw, json)
Hash identifier: vz9a7CT827eNR1RCLcKFQjN8yYPCMt3BM5CS8Dboizw=
Subject key identifier: 0C:0F:08:25:8A:8B:9B:CD:85:2D:80:56:F4:D1:54:12:FB:2A:68:3F
Certificate issuer: /CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
Certificate serial: 018964C062CB21890BB33A7E143A3757D5F8
Authority key identifier: D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/DA8IJYqLm82FLYBW9NFUEvsqaD8.roa
Signing time: Mon 17 Jul 2023 16:47:57 +0000
ROA not before: Mon 17 Jul 2023 16:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 80.68.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:62:cb:21:89:0b:b3:3a:7e:14:3a:37:57:d5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
Validity
Not Before: Jul 17 16:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0f08258a8b9bcd852d8056f4d15412fb2a683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:0b:2c:3d:15:49:4d:36:57:48:64:52:fc:
f9:7a:87:f3:80:84:d8:75:c5:5f:d8:0f:4e:e8:cc:
61:b0:fb:81:ee:14:d6:2b:0f:ec:83:0e:e1:41:ff:
23:4f:43:65:cc:3c:39:1d:c8:9a:62:04:8a:c6:db:
55:b9:35:62:3a:c1:c0:43:29:e7:7c:20:81:c0:eb:
c0:52:76:63:be:7e:c9:4a:29:91:18:6e:58:8d:00:
f9:15:1c:ab:9a:7c:08:ad:fd:87:86:f9:0a:9a:b1:
64:7a:96:d7:46:32:92:12:30:f1:0e:9d:7a:47:13:
a9:c6:94:87:ac:d8:49:0e:b8:0c:9d:e0:68:21:92:
fa:cd:b3:e3:f3:f3:a2:63:b9:b6:60:27:29:59:75:
84:9f:93:d7:23:36:06:ef:48:19:4f:8f:cb:e0:74:
ba:d8:64:af:8a:85:96:a9:81:15:7c:50:26:db:09:
ae:aa:0e:e4:a4:c3:0f:cd:c5:ca:aa:49:f9:48:a3:
4f:dc:f9:12:23:da:2a:c8:15:41:cd:f4:59:b5:18:
b9:ee:b7:0b:16:42:fe:b7:4a:4b:af:29:75:b2:80:
6d:16:75:7e:ef:35:a4:26:d5:dc:f2:25:96:73:f2:
b5:d8:49:3b:1d:05:81:34:c7:47:db:4b:9c:a1:c5:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:08:25:8A:8B:9B:CD:85:2D:80:56:F4:D1:54:12:FB:2A:68:3F
X509v3 Authority Key Identifier:
keyid:D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/DA8IJYqLm82FLYBW9NFUEvsqaD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.148.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3a:a1:1c:02:2d:61:97:a5:54:eb:4f:a5:c3:78:fb:59:ad:
fa:1f:72:49:30:4f:b3:6e:85:19:d2:d0:a2:36:a4:ec:e2:42:
34:d7:5d:06:1d:8c:1d:a7:62:54:06:e9:ec:71:f1:79:2d:6c:
3f:d1:5e:64:a6:68:04:b9:5b:21:21:6c:a6:0b:c6:cd:35:43:
4c:9e:b9:6b:15:57:c8:07:5e:c8:1a:c7:82:9b:e8:40:47:1e:
46:42:e3:f8:b1:1f:89:d2:ca:58:0a:7f:a8:26:49:34:d1:82:
e3:df:fe:17:bd:c4:07:96:10:99:6f:fe:7b:08:39:61:5e:78:
c4:84:28:54:e4:51:42:ae:6e:b7:fb:86:4b:a7:d2:bf:ab:99:
43:95:83:8d:1d:8b:e6:72:80:d3:68:38:41:02:82:38:ea:a6:
08:f6:0b:06:72:b1:0a:f7:32:b6:4e:b0:96:07:80:cb:90:49:
7c:97:4e:7d:4b:ee:d3:f3:53:de:4c:48:e1:08:58:26:16:72:
d6:78:f3:0d:aa:f8:f5:23:44:e1:33:53:ee:b1:58:ac:24:11:
0c:ad:ca:82:b8:fc:0b:ef:bc:14:e7:3c:b3:22:d9:c4:ab:30:
63:8e:ae:2c:5f:21:a2:3b:86:74:a6:ed:91:61:d4:64:94:77:
cc:aa:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org