Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/gSUGPhRxQLbCrbjEX1uYf0-SHPU.roa
File: gSUGPhRxQLbCrbjEX1uYf0-SHPU.roa (raw, json)
Hash identifier: wvWE3KmVRkICZs5v2gGnoNj/uBeo0lc+cteCSEAeOK8=
Subject key identifier: 81:25:06:3E:14:71:40:B6:C2:AD:B8:C4:5F:5B:98:7F:4F:92:1C:F5
Certificate issuer: /CN=aef910de392d35fca1f563956c5e734049f2ff23
Certificate serial: 018570CC0EC4B076F1EC482F8325B606A634
Authority key identifier: AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/gSUGPhRxQLbCrbjEX1uYf0-SHPU.roa
Signing time: Mon 02 Jan 2023 04:44:59 +0000
ROA not before: Mon 02 Jan 2023 04:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30937
IP address blocks: 80.68.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:0e:c4:b0:76:f1:ec:48:2f:83:25:b6:06:a6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef910de392d35fca1f563956c5e734049f2ff23
Validity
Not Before: Jan 2 04:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8125063e147140b6c2adb8c45f5b987f4f921cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:05:eb:0e:4a:91:d5:62:73:46:a3:06:90:
48:1a:35:4b:3b:1c:7b:58:f7:ee:6a:90:05:00:cf:
66:d6:9c:3e:53:12:fe:c5:99:ec:76:72:f9:ac:5b:
a2:14:e3:49:1f:1c:9e:0a:9d:f5:1d:4c:55:3a:f7:
f4:21:93:69:4d:30:2e:9b:0d:f1:13:17:35:85:f6:
f8:9a:24:de:f4:ed:21:05:d5:be:12:fa:b9:3a:ed:
6c:09:d9:f1:79:75:b9:a8:60:3b:db:6e:ed:22:4c:
d4:73:58:de:d8:fe:12:e6:08:59:5d:9d:68:64:8a:
56:35:ac:99:e2:9e:aa:d3:a3:13:41:7f:4f:68:4d:
e3:1e:e0:f3:77:8f:8a:05:6e:22:c4:9a:54:60:d8:
a2:a0:97:e4:2f:b1:70:b5:c0:d4:be:5b:62:5d:ac:
76:59:94:b4:49:d7:88:d0:7b:bc:03:9d:ab:4e:27:
9f:84:fc:c4:76:c3:ab:5c:ae:ba:14:fc:3d:15:4a:
28:b7:d9:1f:db:85:95:18:01:87:02:64:33:85:13:
ce:c8:8c:21:d9:d4:b8:7d:31:13:1c:b4:64:37:20:
d7:a9:f4:17:5f:95:b4:bc:db:c4:dc:28:e8:13:18:
d1:21:cd:14:e8:51:c3:05:72:40:d2:92:1c:dd:af:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:06:3E:14:71:40:B6:C2:AD:B8:C4:5F:5B:98:7F:4F:92:1C:F5
X509v3 Authority Key Identifier:
keyid:AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/gSUGPhRxQLbCrbjEX1uYf0-SHPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/rvkQ3jktNfyh9WOVbF5zQEny_yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.155.0/24
Signature Algorithm: sha256WithRSAEncryption
48:60:78:d1:d8:48:0f:56:30:8e:94:cf:af:21:b7:8b:ff:6e:
e4:69:59:d3:bb:88:c6:1f:54:0f:fc:dd:c4:85:c0:44:35:34:
94:e4:f9:b7:75:f5:76:a9:1e:27:07:ff:dd:81:fc:0f:86:16:
14:33:94:da:40:43:32:48:45:a9:2b:2d:09:63:89:b7:20:fa:
bf:75:21:5d:76:42:4c:ad:69:60:8b:83:40:67:c8:fa:cf:b3:
07:5f:be:b5:7a:9b:23:71:ae:c6:45:a6:b9:d2:61:6e:98:89:
0b:91:1c:6e:15:56:d1:c4:fc:65:89:2a:a6:a0:bc:41:47:f2:
57:8b:80:35:3c:a1:20:78:09:5a:5d:37:21:fb:5e:b0:2d:ec:
47:ac:b2:a5:66:37:af:27:8e:6c:de:8b:cc:65:2c:04:20:3c:
78:2c:04:cd:46:9a:2f:8e:ec:fd:90:d6:a2:8c:79:c7:ea:45:
d6:d6:a6:72:15:63:61:e2:56:da:a6:cf:54:74:02:9c:2a:50:
35:63:92:a5:53:0d:8d:a9:f9:51:04:32:61:c9:b1:49:f1:71:
45:6a:95:70:f8:2c:0e:42:34:97:6c:03:66:62:b3:b0:ca:0a:
e5:a7:d8:d1:d0:c0:8d:2c:8a:ab:dd:1b:d9:ab:a6:0a:9f:ee:
69:90:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:34 2024 by rpki-client on console.sobornost.net