Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/1jBuDn03zLJx2xVk_QBATDflo1Q.roa
File: 1jBuDn03zLJx2xVk_QBATDflo1Q.roa (raw, json)
Hash identifier: 53fgoAwRz4uy8IInfAnu05dLQGT+A2Ap1LmE2+SflWE=
Subject key identifier: D6:30:6E:0E:7D:37:CC:B2:71:DB:15:64:FD:00:40:4C:37:E5:A3:54
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 018571FA183592D5196296850E707617FE3A
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/1jBuDn03zLJx2xVk_QBATDflo1Q.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212734
IP address blocks: 80.92.203.0/24 maxlen: 24
80.92.200.0/24 maxlen: 24
80.92.202.0/24 maxlen: 24
2a07:3a40::/34 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:18:35:92:d5:19:62:96:85:0e:70:76:17:fe:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6306e0e7d37ccb271db1564fd00404c37e5a354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:e7:88:84:ff:42:3a:d9:6d:c1:cc:09:18:
2d:04:8f:f4:9e:10:c2:0f:4a:11:26:2e:f4:07:54:
1b:f3:d3:40:96:cc:0b:8f:78:f3:c0:30:7b:c5:2f:
a1:4c:fc:42:34:68:c3:7b:00:62:71:21:fe:f7:0c:
33:83:35:0f:9a:e8:3e:85:e0:d9:b3:35:c1:5c:90:
d1:11:f1:a5:dd:d4:99:4d:07:37:84:a5:e1:17:e4:
26:32:4a:bb:9a:d0:2c:84:13:f4:cf:c9:3e:d3:83:
f3:7c:3a:01:65:b2:1d:b2:86:9c:31:e9:ca:68:c5:
52:87:3e:cd:ec:91:74:95:24:12:9d:a4:70:c7:03:
36:2f:32:2d:c6:4c:44:a6:5e:b1:a8:e4:1d:4f:89:
92:2e:06:f1:dd:a1:af:68:26:71:a2:12:a4:23:5a:
b3:39:60:db:e3:73:19:32:c8:8b:b5:cd:5a:08:6a:
8b:0a:4c:f1:c1:7f:43:e3:bb:ee:a8:53:d5:e3:2a:
a1:2f:56:f9:8e:59:c9:82:fb:6a:99:ef:fe:68:e0:
70:78:11:ef:4a:c0:ea:be:de:60:27:58:df:36:fd:
af:af:68:b0:bc:5a:15:8c:b1:70:23:42:23:10:e9:
c9:0d:13:b0:a2:7a:dd:31:47:e0:20:a9:d8:63:18:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:6E:0E:7D:37:CC:B2:71:DB:15:64:FD:00:40:4C:37:E5:A3:54
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/1jBuDn03zLJx2xVk_QBATDflo1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.200.0/24
80.92.202.0/23
IPv6:
2a07:3a40::/34
Signature Algorithm: sha256WithRSAEncryption
73:5d:52:09:cd:72:ab:c9:d2:7b:1a:b6:92:61:40:cf:2d:00:
8f:65:6f:fa:14:c9:4e:cb:13:17:9f:8c:3e:60:34:21:64:d3:
41:27:24:f0:ed:b4:70:08:e7:e6:a2:58:7f:eb:e2:7e:96:fe:
a5:02:be:11:6b:48:a7:07:58:32:7f:2a:e0:53:7a:b9:49:25:
d6:1b:58:5d:2e:10:62:6d:d6:2b:27:b3:72:dd:83:fb:12:ef:
63:28:ca:7a:75:30:42:c9:0d:bf:10:e6:e4:57:b5:21:71:3c:
25:bb:2c:8e:b9:44:81:bf:b6:ca:c0:92:8a:11:dc:6f:54:72:
98:3c:8c:b2:8a:92:88:78:d7:c5:a8:e7:3c:1b:0d:6f:e8:1e:
23:6c:24:c4:70:54:c2:9e:83:d6:58:f1:ed:2e:9f:fb:33:aa:
a6:61:f3:d0:a9:27:34:fb:5c:9c:6b:ca:7e:cb:04:31:fd:98:
e5:dd:06:62:c8:af:34:99:bf:65:4f:4b:99:dc:0c:76:bc:dc:
25:6e:b7:e7:f6:47:9c:78:6e:5b:95:c0:73:4f:e8:9f:a4:b2:
00:49:a9:df:ed:17:6a:81:33:8a:7f:05:c7:2f:b0:25:71:25:
16:cb:ab:28:5d:b4:c7:de:fc:e0:9e:71:dd:d2:a8:4b:7d:b7:
fa:fb:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:54 2024 by rpki-client on console.sobornost.net