Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/H90DgIhH5LFZPzZd_Cf6kYS82qA.roa
File: H90DgIhH5LFZPzZd_Cf6kYS82qA.roa (raw, json)
Hash identifier: nXEC1FrTQE45wo9AB+KV6yPZLQwJTajhEo4Tapgj3I8=
Subject key identifier: 1F:DD:03:80:88:47:E4:B1:59:3F:36:5D:FC:27:FA:91:84:BC:DA:A0
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 018FC8EFC4806BAB18F987A237368A3BA489
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/H90DgIhH5LFZPzZd_Cf6kYS82qA.roa
Signing time: Thu 30 May 2024 09:58:27 +0000
ROA not before: Thu 30 May 2024 09:58:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30830
IP address blocks: 80.73.128.0/23 maxlen: 24
80.73.130.0/23 maxlen: 24
80.73.132.0/23 maxlen: 24
2a01:5140::/32 maxlen: 32
2a01:5140:a::/48 maxlen: 48
2a01:5140:128::/48 maxlen: 48
2a01:5140:129::/48 maxlen: 48
2a01:5140:130::/48 maxlen: 48
2a01:5140:131::/48 maxlen: 48
2a01:5140:132::/48 maxlen: 48
2a01:5140:133::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 May 2024 11:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:ef:c4:80:6b:ab:18:f9:87:a2:37:36:8a:3b:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: May 30 09:58:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fdd03808847e4b1593f365dfc27fa9184bcdaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:f9:21:b7:0b:85:e0:cc:a0:dd:d3:02:17:
01:9d:56:a2:c9:84:4b:94:00:3d:bd:4d:84:7b:42:
4c:3d:67:2d:e2:47:d6:84:a9:34:2a:5b:36:4d:db:
58:26:d4:1d:f7:fa:67:86:47:0c:59:26:f4:a1:7b:
55:55:1c:6a:35:9c:b6:4a:80:23:99:15:9c:19:51:
7d:65:50:54:ba:a9:60:ba:5d:cf:32:dd:06:18:88:
60:f4:f4:c0:2c:d0:7f:9b:f6:11:02:82:b9:99:da:
95:92:ef:4e:57:48:38:4a:2d:ca:f9:18:28:69:c2:
1a:e7:ce:95:c4:9f:00:4d:bd:7e:37:b4:df:68:61:
2c:0b:91:50:5b:6b:07:36:62:92:08:d2:02:a8:54:
29:ea:c9:ba:be:b1:34:2d:88:7d:ec:e1:8b:86:a2:
f9:10:08:57:87:e8:30:e4:c9:f3:d2:8f:f9:2a:36:
02:34:d2:33:3c:f5:62:d6:52:11:bc:e0:3d:74:4c:
3b:63:54:da:fe:03:91:c6:9c:dc:db:b7:d0:09:9e:
68:2a:f0:ec:5c:a4:c8:3a:cb:73:18:4c:9f:ce:68:
16:53:e2:7f:ad:8f:94:a1:e3:20:2c:c1:14:26:d6:
39:83:9f:c3:46:ab:5f:0a:8c:3d:39:02:8a:d4:1d:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:03:80:88:47:E4:B1:59:3F:36:5D:FC:27:FA:91:84:BC:DA:A0
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/H90DgIhH5LFZPzZd_Cf6kYS82qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.128.0-80.73.133.255
IPv6:
2a01:5140::/32
Signature Algorithm: sha256WithRSAEncryption
32:aa:83:f0:08:6b:9d:31:48:e0:8f:38:30:a1:d9:75:24:95:
49:c4:87:63:d8:f5:92:72:73:a2:50:e6:93:a3:00:88:d0:9e:
e5:a2:8e:48:ef:8f:cc:ba:b9:55:ab:42:29:29:22:30:57:61:
51:57:1c:b4:20:63:aa:38:fb:bc:87:a0:fa:0f:1a:36:86:1a:
71:86:fd:8a:74:a7:2a:fe:02:02:bd:45:28:90:46:f1:db:8a:
68:e6:2b:27:72:8e:7d:4e:63:8a:5e:b8:66:39:89:51:2b:cc:
20:6f:ba:54:6d:73:46:fa:74:c4:ac:e4:3d:de:b4:e1:88:f8:
62:95:89:51:57:f0:57:c2:70:c5:bc:eb:72:3f:cb:37:4f:89:
9f:8b:21:13:a7:f2:a2:5a:5b:88:c5:9d:03:ea:65:0b:f8:14:
bb:e9:50:52:7a:3a:5b:73:20:37:ec:4b:18:36:05:f8:d3:14:
12:73:07:41:b0:83:26:eb:ab:ab:1a:6b:a4:74:cb:7c:de:1c:
25:04:43:41:87:7c:1e:a8:29:99:97:4a:79:c8:a9:d1:d3:7b:
c7:d1:f6:be:19:09:0f:5e:37:ce:db:6c:47:a0:13:1a:68:e8:
e6:98:2f:6d:f7:fc:90:02:91:e3:ba:de:c9:2b:93:a9:31:f0:
e0:4e:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:20 2024 by rpki-client on console-ams.rpki-client.org