Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/CxbzzitT6LSLFD2Ycof7UxqyW20.roa
File: CxbzzitT6LSLFD2Ycof7UxqyW20.roa (raw, json)
Hash identifier: AiUr3AV2Ypc6wlr3IAPiunNeQLpZ1yb0O6KVNfbcv1U=
Subject key identifier: 0B:16:F3:CE:2B:53:E8:B4:8B:14:3D:98:72:87:FB:53:1A:B2:5B:6D
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 018573686C28E419312FA6500C5523B1D9D1
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/CxbzzitT6LSLFD2Ycof7UxqyW20.roa
Signing time: Mon 02 Jan 2023 16:55:01 +0000
ROA not before: Mon 02 Jan 2023 16:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31333
IP address blocks: 80.244.240.0/20 maxlen: 24
83.151.16.0/20 maxlen: 24
79.140.32.0/20 maxlen: 24
31.15.64.0/21 maxlen: 24
2001:4d88::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:6c:28:e4:19:31:2f:a6:50:0c:55:23:b1:d9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jan 2 16:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b16f3ce2b53e8b48b143d987287fb531ab25b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:0a:94:c6:96:32:8f:f3:24:18:1e:8d:5f:
e8:83:46:b2:d4:8c:cd:3e:5c:be:99:55:08:ab:4e:
d2:bb:79:b3:a8:53:a1:c3:62:7e:8b:bf:51:17:0a:
c3:2f:2a:bf:0b:31:d5:8c:4d:81:a1:aa:c3:c5:73:
47:15:9d:2e:c3:81:71:f4:3c:1e:00:b6:9b:7a:4c:
c1:2f:39:9a:4e:7e:a9:3e:12:9d:b1:96:88:d7:98:
fe:03:bf:9d:bd:e0:12:27:68:67:61:6e:98:5c:ed:
57:ed:dc:43:49:8f:f4:16:00:91:65:3e:0c:58:f0:
f3:f1:fb:cd:60:30:54:65:f4:45:93:e9:e6:a9:18:
35:cd:70:31:ca:05:7d:13:28:f7:1a:eb:75:70:de:
ee:3d:6d:09:7b:38:fb:4f:89:9d:86:d1:df:0e:16:
47:40:6b:47:4e:c6:47:77:23:8c:09:b5:83:19:cb:
24:ec:be:e4:c5:c6:73:3e:0c:f5:e2:29:cb:77:23:
ce:95:0a:1d:d4:96:31:b0:44:b9:a0:32:70:c3:5d:
10:1c:01:3e:35:1b:d4:30:3c:37:41:b3:31:30:17:
8b:39:98:41:27:e8:d1:cf:44:14:5b:5a:1d:fa:59:
43:3d:2b:ce:e2:ca:07:b2:ba:54:2a:ce:b2:a1:6e:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:16:F3:CE:2B:53:E8:B4:8B:14:3D:98:72:87:FB:53:1A:B2:5B:6D
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/CxbzzitT6LSLFD2Ycof7UxqyW20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.64.0/21
79.140.32.0/20
80.244.240.0/20
83.151.16.0/20
IPv6:
2001:4d88::/32
Signature Algorithm: sha256WithRSAEncryption
99:1d:2e:ea:1a:46:1d:59:53:29:f6:d1:8b:1a:4c:86:90:c3:
77:ad:44:2e:ac:30:a8:37:83:91:aa:7b:59:80:af:81:8d:3a:
95:76:9c:46:b9:79:26:dd:8e:db:6e:b8:66:1e:41:7b:45:59:
2c:b6:83:0d:65:37:bf:cb:e4:23:e8:2f:12:b8:fa:04:8a:1a:
68:2d:92:38:ff:6a:58:80:92:90:45:d9:7e:f9:b1:4d:5c:00:
24:ef:42:7d:26:68:ad:57:67:dd:99:62:38:8f:0c:66:55:f9:
ce:be:2e:71:b4:21:82:58:4c:1c:da:92:3c:cd:ec:18:06:a3:
a0:40:c7:eb:69:55:dd:b1:2e:20:41:9b:43:e0:9d:c4:27:d5:
ed:1f:1e:6c:75:5a:5d:5f:f0:60:d8:fb:2f:43:c5:a5:1d:e0:
43:e4:80:9f:59:72:0b:a3:2c:24:64:58:86:a6:c4:b7:c4:88:
a3:ca:4b:80:fe:03:21:44:d3:97:79:03:b5:13:4a:75:5a:44:
d8:ca:8d:c4:9e:a1:8d:f9:18:08:0b:15:ab:9b:83:b4:e5:da:
4f:c3:c2:70:e8:3e:5f:e5:9a:85:7b:32:14:66:70:6c:59:a9:
39:84:6e:e5:60:fd:b9:61:55:3c:95:a1:31:e2:95:2d:78:84:
e6:27:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:42 2024 by rpki-client on console-fra.rpki-client.org