Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/q6hNCXFeaGaSqILUmjZy_JjFIhY.roa
File: q6hNCXFeaGaSqILUmjZy_JjFIhY.roa (raw, json)
Hash identifier: +E25bnYjxfqBhoCRCjD9C/GCyhxr3HZ2gsWALKH0itk=
Subject key identifier: AB:A8:4D:09:71:5E:68:66:92:A8:82:D4:9A:36:72:FC:98:C5:22:16
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA067BEB50C9A3F064F2CF1474A0EF
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/q6hNCXFeaGaSqILUmjZy_JjFIhY.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29509
IP address blocks: 80.250.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:06:7b:eb:50:c9:a3:f0:64:f2:cf:14:74:a0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aba84d09715e686692a882d49a3672fc98c52216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:d4:db:5f:98:8b:c1:81:20:97:b0:1d:f0:
92:16:49:8f:f8:39:ec:4d:cd:8d:56:99:58:61:d2:
df:2f:13:f7:b0:74:f3:cb:6c:75:ab:17:7d:64:c2:
37:bf:4f:bd:b0:90:f4:ba:a4:e6:7f:05:c9:ae:81:
bc:62:37:26:a8:fd:47:96:e9:d1:9f:c8:73:67:e5:
8f:22:b5:36:79:f7:b8:86:d3:b9:41:0d:fc:67:29:
3f:c0:1b:a9:e5:e7:6b:73:9e:08:8a:ef:67:3b:97:
11:82:47:a9:09:9e:e7:f8:28:61:f4:31:8a:62:40:
3c:19:1e:37:65:d0:43:1c:fd:8d:ae:28:c1:82:7a:
13:45:d1:a9:af:60:31:89:48:bf:82:e3:bb:55:57:
75:5b:28:60:a6:cb:16:ec:db:d8:3f:43:7f:07:63:
8c:af:8c:cf:4c:2e:b8:39:e7:0b:df:7a:3b:1c:3b:
9c:d3:c7:1d:74:35:d7:e5:13:cd:71:97:9f:55:8a:
29:4f:7b:56:6c:85:2e:d9:d9:35:41:a4:68:2b:16:
5b:55:fe:bd:4e:fc:5b:4a:b2:8c:6d:be:96:86:a3:
79:a0:f8:2e:9a:1d:75:e7:4f:c3:9c:23:48:ec:65:
79:93:2a:1e:8f:fe:d0:b5:01:7f:8d:d9:51:20:42:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A8:4D:09:71:5E:68:66:92:A8:82:D4:9A:36:72:FC:98:C5:22:16
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/q6hNCXFeaGaSqILUmjZy_JjFIhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d6:a1:01:d0:dd:d4:e7:d0:75:0f:84:e7:a5:2a:33:fa:27:
e3:fa:cc:fb:25:01:02:7c:88:f8:19:f6:40:f3:9e:7e:fa:d1:
ae:c3:1b:8b:87:72:c8:52:51:24:d3:dc:1c:ac:87:d6:e5:c5:
fa:c4:5b:b3:9b:f5:e5:1c:e7:18:54:d2:d5:f6:7f:3f:6d:b0:
2c:38:77:87:15:12:0b:fc:0c:43:f2:39:f4:46:19:03:46:2e:
d6:b6:4c:3e:88:b9:43:de:0c:aa:6f:f4:b6:8d:96:e1:d3:d8:
c4:4d:24:7f:d3:c9:ee:3a:85:e9:65:c1:31:9c:e4:6d:a3:9d:
12:50:35:23:56:36:f0:c7:01:3d:5e:ac:1f:4f:78:df:5e:5b:
8c:19:42:40:0e:68:17:f7:5e:55:60:bd:8f:3d:58:fe:e8:ea:
e3:05:c5:40:20:51:47:d7:c3:01:52:86:cf:9c:30:e2:af:bd:
56:65:d8:83:d5:ea:a6:d1:3e:28:6a:d2:db:ff:5a:8f:a1:7f:
c5:93:a4:e7:9a:67:ea:b7:30:48:c5:02:0a:86:32:cb:d3:1b:
bf:fe:d4:64:f9:0f:4f:76:20:e4:cf:da:8a:ae:3b:3e:48:3c:
80:3a:cf:6d:6b:25:16:b7:05:be:79:80:29:d4:5f:2b:ae:f4:
00:bc:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:21 2024 by rpki-client on console-fra.rpki-client.org