Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/1-vbdkHvEJepJU057-e61_TIpjjE.roa
File: 1-vbdkHvEJepJU057-e61_TIpjjE.roa (raw, json)
Hash identifier: RV72y1sROWShkfmkPggXjXqiTVqowVTK+dBR6azM4dc=
Subject key identifier: FA:F6:DD:90:7B:C4:25:EA:49:53:4E:7B:F9:EE:B5:FD:32:29:8E:31
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 018A7E763B57A43D811E09D71335700B4980
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/1-vbdkHvEJepJU057-e61_TIpjjE.roa
Signing time: Sun 10 Sep 2023 09:39:52 +0000
ROA not before: Sun 10 Sep 2023 09:39:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212165
IP address blocks: 185.80.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7e:76:3b:57:a4:3d:81:1e:09:d7:13:35:70:0b:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Sep 10 09:39:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faf6dd907bc425ea49534e7bf9eeb5fd32298e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:11:1a:93:e5:df:48:6f:aa:ea:ca:b1:30:
37:78:f0:68:9c:5c:5a:bc:01:54:e0:2f:b4:f4:c2:
02:29:32:9f:a3:a1:13:d6:6d:12:82:3b:59:e0:cd:
b5:87:cb:50:77:35:2b:71:73:19:dd:8f:7f:28:2b:
60:74:de:86:a1:d1:cc:1c:eb:07:94:14:5f:d9:f1:
65:4a:2d:67:43:6f:93:5f:9f:fa:fb:47:1e:48:37:
2d:17:8d:62:42:9d:9c:19:6e:58:76:26:4a:e2:7b:
fe:e1:de:3a:95:b7:49:51:d0:54:d8:67:8e:41:4a:
4e:16:aa:7b:f3:83:d3:a5:3b:41:1b:c7:33:57:3b:
dd:7e:86:88:f5:47:1a:e4:27:ed:bc:3d:7b:af:03:
d4:23:13:b2:24:89:f1:68:56:fe:6b:74:46:9a:e8:
0b:77:2a:ec:3a:4e:22:09:b1:26:49:13:a8:bb:5a:
61:5b:a9:36:0a:93:5f:d7:fb:7c:b1:f2:3a:9a:82:
e1:f5:be:3e:ab:f0:ca:67:5b:f4:e1:81:22:66:b9:
7a:15:0d:3d:f1:2d:20:be:f7:b8:eb:3a:6a:0f:2c:
0e:bf:b5:52:81:d1:db:db:df:70:cc:77:8a:3b:48:
09:11:22:e6:d0:15:c1:fd:03:60:76:52:7a:23:db:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:DD:90:7B:C4:25:EA:49:53:4E:7B:F9:EE:B5:FD:32:29:8E:31
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/1-vbdkHvEJepJU057-e61_TIpjjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:43:84:5a:e5:76:2f:0e:48:8d:cb:dd:15:a0:84:b9:8c:b9:
b9:db:8f:6e:36:8b:ff:15:f7:98:b4:1d:95:5e:e4:85:fc:11:
45:5d:b8:fd:cf:18:38:2a:dc:9e:02:ca:c4:bf:20:d8:05:10:
39:f7:23:6e:57:ce:61:f9:22:7e:ff:66:a1:25:20:61:86:10:
92:76:d1:e4:8d:80:fc:ae:3c:4f:f3:b3:0e:69:bb:b7:37:f7:
71:d5:e8:83:3e:4a:fc:2b:c1:c0:a1:7e:34:53:e2:71:87:6b:
27:3c:ad:31:91:33:f0:c4:97:32:9c:06:48:8d:47:ba:6f:30:
5d:b3:ac:1c:40:6b:44:f1:e5:2c:bd:7d:c4:a6:89:15:4b:f9:
34:6e:11:b5:2d:80:90:0d:3d:26:94:62:8c:7e:d0:75:f4:f7:
5f:a7:51:c8:4a:07:c6:f3:03:48:48:95:62:a0:7a:86:14:74:
4a:87:e6:52:16:d1:9e:0c:78:77:7b:b4:37:5c:e9:de:22:24:
60:20:7c:c4:b1:0b:80:16:70:87:07:77:84:37:26:50:7a:c2:
f5:71:28:fa:8d:9d:37:c7:70:0d:87:65:37:13:ad:f8:a3:70:
38:e3:33:3a:c3:94:a2:f1:78:36:1d:1c:7c:5b:de:b0:b4:99:
9c:43:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:41 2024 by rpki-client on console-fra.rpki-client.org