Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/IEN_hNa8YOAFSNa7ovMFEL5Bq_U.roa
File: IEN_hNa8YOAFSNa7ovMFEL5Bq_U.roa (raw, json)
Hash identifier: NPzGCaYiX5VcftUPWMd+W9Rp1SbOapJ55/bksnGZ4bA=
Subject key identifier: 20:43:7F:84:D6:BC:60:E0:05:48:D6:BB:A2:F3:05:10:BE:41:AB:F5
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 01856E5D6554F19EE28AE116F306BE5E66AB
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/IEN_hNa8YOAFSNa7ovMFEL5Bq_U.roa
Signing time: Sun 01 Jan 2023 17:24:52 +0000
ROA not before: Sun 01 Jan 2023 17:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 80.77.176.0/20 maxlen: 24
185.125.152.0/22 maxlen: 24
2a06:b880::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:65:54:f1:9e:e2:8a:e1:16:f3:06:be:5e:66:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jan 1 17:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20437f84d6bc60e00548d6bba2f30510be41abf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c6:3b:f1:5a:38:e9:99:6a:0a:bf:97:cf:2b:
c5:e5:ad:af:2d:a7:34:ea:a9:16:bf:8e:69:b6:68:
77:10:aa:89:b6:bb:8a:cb:20:08:c2:97:99:ef:03:
8a:f9:96:d3:48:50:fd:f8:5a:96:09:31:4b:66:4b:
b8:fb:46:62:b5:c2:92:a5:6e:aa:89:c8:08:71:2a:
49:ad:6e:df:22:bc:fb:85:7e:57:9d:54:84:f3:43:
da:53:7b:15:b8:69:1a:96:d6:60:38:53:fd:1b:ea:
c1:57:68:47:6d:8e:33:4e:56:25:c7:7b:91:db:21:
59:18:29:75:1f:3c:50:b7:6e:26:b9:55:cb:78:a8:
e7:aa:c4:51:85:0c:37:53:a0:54:e9:95:82:8b:8c:
b4:55:1f:5f:70:5b:55:6a:60:a0:90:42:df:08:14:
e2:95:e5:f3:a6:63:e4:01:e6:eb:bc:7a:c2:92:8f:
63:13:0d:bd:68:7a:8a:fb:72:45:fc:3f:ec:96:41:
71:10:d2:8c:16:de:f3:9d:59:d1:a1:25:15:3d:14:
3c:a3:bf:dc:4c:26:f5:ee:3c:b5:b6:ab:11:d3:c3:
13:57:61:84:92:84:d2:99:ab:3c:33:22:e3:f0:99:
26:d0:fb:d5:01:09:aa:ab:6b:c7:1e:f0:ef:ef:45:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:7F:84:D6:BC:60:E0:05:48:D6:BB:A2:F3:05:10:BE:41:AB:F5
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/IEN_hNa8YOAFSNa7ovMFEL5Bq_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.176.0/20
185.125.152.0/22
IPv6:
2a06:b880::/29
Signature Algorithm: sha256WithRSAEncryption
53:b3:68:f8:d9:74:dd:80:45:18:f2:73:75:e2:66:5d:f2:95:
3e:7a:f5:b0:dc:93:87:b1:ed:05:1b:05:d3:33:c9:2a:ed:c8:
af:7d:26:ef:39:4a:58:af:9c:dd:b0:15:31:99:f3:a6:d6:67:
d5:7f:b7:65:31:4f:d1:34:d7:dc:6b:18:c2:7f:75:bd:df:86:
07:bc:84:ed:cd:ec:48:8d:f0:27:e5:16:3e:33:12:83:86:17:
33:4c:09:c6:51:85:4b:d2:3d:0f:f0:93:87:34:7f:7f:80:8e:
28:28:4e:b9:dc:c4:40:9e:2f:9f:0d:74:6d:89:8a:4d:46:84:
c0:55:40:24:86:7b:65:ff:a8:24:86:c3:4a:ac:3e:e6:7e:bd:
66:a3:40:5f:e0:37:35:4e:d2:44:74:95:7a:57:e4:bc:f2:61:
0d:56:ec:4b:85:b5:ba:43:73:df:c4:14:c4:ce:65:d9:f7:ed:
12:4d:79:e5:11:58:99:1a:43:fe:1f:bf:9b:00:74:b7:7a:8d:
73:d6:0c:55:dc:ac:5f:33:39:eb:7d:c8:c1:b6:bf:64:b1:97:
ff:f0:1f:c3:f3:d0:37:24:c6:0e:11:e2:71:05:f9:e9:58:e4:
a7:24:5a:31:65:5d:de:b5:5b:e5:c7:cb:9d:b1:61:47:8c:73:
4f:f0:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org