Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/kBrk4L8G2Vd9k54b_5G7UQD_33s.roa
File: kBrk4L8G2Vd9k54b_5G7UQD_33s.roa (raw, json)
Hash identifier: tDvQ1x/qv5IjwLMFnSIkZ6+unViPy86ieV5hQtg7b/w=
Subject key identifier: 90:1A:E4:E0:BF:06:D9:57:7D:93:9E:1B:FF:91:BB:51:00:FF:DF:7B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 018CC50019A7C070D2D8EBF5929A91EC019F
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/kBrk4L8G2Vd9k54b_5G7UQD_33s.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30830
IP address blocks: 80.73.130.0/23 maxlen: 24
80.73.132.0/23 maxlen: 24
80.73.128.0/23 maxlen: 24
2a01:5140::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 30 May 2024 09:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:19:a7:c0:70:d2:d8:eb:f5:92:9a:91:ec:01:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=901ae4e0bf06d9577d939e1bff91bb5100ffdf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:6b:bd:f6:3b:79:75:f4:ec:1b:9f:3f:52:
d1:cf:8a:5d:ac:ee:0a:00:69:23:84:f7:46:95:af:
2f:b1:a3:3a:08:33:15:70:42:eb:18:98:0f:d9:91:
d7:53:9f:92:fe:de:2a:38:56:07:52:83:fe:7d:dd:
00:e8:d1:e1:de:b3:22:43:3f:14:41:e9:33:7c:5b:
7a:44:23:39:2c:38:86:e3:92:f1:31:12:d9:28:6a:
5c:f7:39:12:cc:17:23:97:67:8e:f7:1d:f0:eb:14:
e1:53:fb:0c:1a:30:8a:3a:c8:85:d9:db:be:03:29:
5c:38:af:f3:49:3f:ba:e9:71:d9:fc:c5:19:15:5b:
ac:2e:df:a4:dd:4e:8f:85:93:88:e1:82:75:d3:2b:
79:a1:10:d5:18:85:c9:ae:45:94:9c:9a:bc:e6:68:
39:d2:39:46:f9:b3:7e:35:4e:e4:3c:9e:6b:6b:9f:
c6:ae:5e:f2:21:db:6e:cc:c4:02:37:63:c3:1c:b8:
cd:32:74:bc:9d:ca:54:c1:ab:df:94:a7:b0:eb:23:
1e:79:04:62:12:b8:42:14:a8:e6:7a:d6:ce:d7:fc:
1d:58:71:b3:6b:fb:47:74:ed:49:85:1a:8d:7e:48:
b6:51:5f:69:fe:e4:ce:24:94:4f:c2:33:e3:8d:b1:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:E4:E0:BF:06:D9:57:7D:93:9E:1B:FF:91:BB:51:00:FF:DF:7B
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/kBrk4L8G2Vd9k54b_5G7UQD_33s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.128.0-80.73.133.255
IPv6:
2a01:5140::/32
Signature Algorithm: sha256WithRSAEncryption
19:13:c0:b5:6d:35:71:48:e6:d8:98:39:48:65:05:05:06:92:
eb:a0:17:a7:95:4a:44:a7:d3:94:c3:bf:6e:1c:13:37:e2:4d:
f7:52:d2:84:2f:b7:e3:82:3e:9d:23:14:35:07:d1:44:b5:76:
85:f8:e8:d7:59:b1:b9:ea:d2:28:60:9a:77:1c:55:f9:a0:18:
b9:ba:d4:ef:8e:ed:71:e2:82:16:5d:06:00:d9:8a:8b:19:1e:
29:ec:d4:64:99:ce:37:6b:cc:b7:ac:33:42:d2:cd:0c:25:5a:
3b:bd:4f:53:61:f5:27:fc:9c:0e:28:a5:5e:10:c0:16:ff:96:
35:2e:a2:4a:85:6f:a1:36:41:67:d5:ed:48:dd:e9:74:59:82:
12:b9:2c:b8:32:6e:f9:90:44:4c:29:2e:42:e8:fd:26:ad:b4:
86:0d:e9:e3:d5:c1:fe:7b:64:df:f1:b3:ff:49:68:5f:1b:53:
74:57:19:78:2d:5d:45:72:30:4f:ed:7a:71:36:a3:33:55:9f:
2c:04:ac:2f:60:8e:9b:0a:5f:cb:3e:0b:f5:a3:35:a6:e5:1f:
61:a7:95:0d:ab:d8:97:61:dc:e2:75:aa:5f:80:9f:72:99:0e:
c9:8f:eb:da:c1:bd:91:e5:9a:8e:4b:e6:f9:c5:0c:ac:2a:41:
32:bc:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:59 2024 by rpki-client on console-fra.rpki-client.org