Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/JxEZrM1-oqqUwKKtZKd42BvU74c.roa
File: JxEZrM1-oqqUwKKtZKd42BvU74c.roa (raw, json)
Hash identifier: 1K4kklgTSFAox0g3HGF83rkg9p3KDHzjSIzNODdBXoc=
Subject key identifier: 27:11:19:AC:CD:7E:A2:AA:94:C0:A2:AD:64:A7:78:D8:1B:D4:EF:87
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 01856ED4AC32111318AB80FC9469A68D139F
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/JxEZrM1-oqqUwKKtZKd42BvU74c.roa
Signing time: Sun 01 Jan 2023 19:35:09 +0000
ROA not before: Sun 01 Jan 2023 19:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51007
IP address blocks: 80.84.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ac:32:11:13:18:ab:80:fc:94:69:a6:8d:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Jan 1 19:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=271119accd7ea2aa94c0a2ad64a778d81bd4ef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:b0:8f:b4:92:17:b4:05:aa:86:02:97:d3:
59:42:92:a6:43:05:64:ca:03:19:b3:7c:b3:f9:27:
1c:e5:eb:2d:45:98:12:e5:19:ee:fd:a7:09:34:f3:
b7:37:0d:d4:5d:b9:84:88:75:a8:6e:39:1f:2c:e2:
43:97:da:34:f6:25:69:4c:5d:52:9b:66:1f:47:7f:
e2:a2:9b:da:88:31:7e:5e:7a:8c:2a:23:58:54:87:
4e:bc:98:35:28:1f:98:84:69:04:bf:ca:d5:8c:4f:
5b:a1:39:5f:4d:61:c6:c6:ea:b8:da:99:2a:32:42:
52:bb:2b:b1:5a:27:45:25:68:74:82:c3:8b:27:30:
22:2d:26:1a:19:78:f0:8b:57:ff:32:45:6e:b0:6d:
0e:0a:90:fc:c4:d3:d1:2b:13:03:8f:1c:55:6d:ac:
a4:2c:ac:3f:18:a0:4b:54:8c:e2:d0:16:cb:04:83:
e0:88:6b:1b:ae:d3:41:0f:f4:2a:05:db:21:bc:a4:
c0:9e:e0:8b:75:c4:31:70:61:86:d8:0b:3a:22:ec:
e0:cf:19:c8:af:63:94:7a:bb:f0:86:c4:6a:53:86:
d4:5c:db:e6:bd:26:61:30:04:ef:57:e4:4a:ae:93:
2d:88:c5:2e:f6:b1:66:f6:f3:85:37:ec:c2:11:11:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:19:AC:CD:7E:A2:AA:94:C0:A2:AD:64:A7:78:D8:1B:D4:EF:87
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/JxEZrM1-oqqUwKKtZKd42BvU74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.148.0/24
Signature Algorithm: sha256WithRSAEncryption
78:87:fb:49:2e:46:41:56:24:04:c5:cd:53:bf:18:4f:79:40:
d4:1c:3b:da:42:bb:58:4b:f6:5f:38:4c:07:5a:37:50:fb:65:
f6:68:0f:26:fd:37:fd:d0:2a:5a:3a:27:16:eb:b7:b6:5f:dd:
0f:26:d4:9c:e4:15:95:31:7b:f4:a0:76:64:f3:6e:fb:a2:0e:
dd:4c:2a:d7:9c:5a:03:d3:a4:7a:d6:3e:35:cd:39:98:42:52:
a2:40:d1:13:57:48:e8:c5:0e:ee:26:26:93:b2:a1:36:28:65:
3d:08:4d:20:55:90:0b:66:cc:01:64:7c:7d:78:d7:09:42:2a:
7b:85:a0:51:bf:3f:88:69:f8:04:7d:8a:7e:a7:99:be:ec:46:
ec:bb:c6:af:e9:b5:fb:cc:ab:13:e7:64:89:75:32:f9:cd:48:
07:11:3e:a8:3c:03:46:3e:5b:97:07:15:4e:a6:79:b2:1d:be:
9c:ce:f5:7a:a9:ad:44:f7:0b:87:63:4e:c2:ea:d8:45:37:bf:
24:e2:1a:ca:a2:68:77:49:6c:88:cf:c0:8b:80:ff:79:2f:c1:
c7:6c:d3:dc:32:c1:11:ec:12:0e:93:b8:b4:f0:34:c8:0c:8f:
19:06:9d:b7:f2:00:65:1f:e0:43:7c:e3:e9:1c:e5:e0:1b:11:
6a:37:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:37 2024 by rpki-client on console-fra.rpki-client.org