Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/X1o2_1s2HYnD2FxQMiupxy9P02s.roa
File: X1o2_1s2HYnD2FxQMiupxy9P02s.roa (raw, json)
Hash identifier: eKKaeDS9GtrLvz5omThdXRR0reY8Jkyoa4YK1gQicvA=
Subject key identifier: 5F:5A:36:FF:5B:36:1D:89:C3:D8:5C:50:32:2B:A9:C7:2F:4F:D3:6B
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 018DD0273A45096D5E73F9A077212833C94D
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/X1o2_1s2HYnD2FxQMiupxy9P02s.roa
Signing time: Thu 22 Feb 2024 09:30:48 +0000
ROA not before: Thu 22 Feb 2024 09:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6789
IP address blocks: 80.245.112.0/20 maxlen: 20
80.245.112.0/24 maxlen: 24
85.91.192.0/19 maxlen: 19
91.247.96.0/19 maxlen: 19
109.200.128.0/19 maxlen: 19
185.92.136.0/22 maxlen: 22
185.99.168.0/22 maxlen: 22
185.100.103.0/24 maxlen: 24
185.186.232.0/22 maxlen: 22
2a00:1d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 13 Apr 2024 17:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:27:3a:45:09:6d:5e:73:f9:a0:77:21:28:33:c9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Feb 22 09:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f5a36ff5b361d89c3d85c50322ba9c72f4fd36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c5:95:8f:aa:14:78:0e:26:ed:f3:ea:e5:a3:
39:00:2c:5b:9b:2b:02:13:08:2f:f8:d8:be:ad:56:
90:56:09:dc:c0:05:e0:29:ae:f6:0b:85:98:dc:fa:
04:76:6f:f0:79:07:98:ed:6e:d4:1a:2e:79:e0:3f:
65:1e:6f:0f:35:84:3e:de:6c:68:b6:fd:df:f2:b4:
84:a9:1c:0a:f2:35:61:77:9c:1a:2c:39:34:7e:7e:
38:0e:3b:0f:ac:13:f2:12:cc:e4:65:59:e0:3f:ed:
0a:9e:15:2d:ca:d3:95:72:7f:4e:e2:ac:94:87:66:
04:f0:27:21:76:3e:60:57:57:59:57:7f:fb:b4:d8:
56:cc:a2:ad:a2:49:e6:58:16:2f:af:d3:9f:b2:e2:
5a:09:2c:3c:76:04:85:7d:3f:3d:b7:92:de:31:db:
6b:e7:f1:02:8b:f7:d9:42:12:cb:99:a2:36:32:42:
ce:48:95:d1:1f:6d:23:cc:56:5e:50:c5:04:59:3d:
17:63:5e:43:38:ef:65:46:a5:f3:b3:b2:50:07:dd:
bf:b1:65:31:bc:63:ae:50:71:36:6f:62:41:b9:89:
95:75:63:3d:45:72:c2:8f:07:e8:d7:0b:6b:af:c9:
6d:2e:e2:d7:6b:84:91:b5:e3:10:fe:65:5f:f1:92:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:36:FF:5B:36:1D:89:C3:D8:5C:50:32:2B:A9:C7:2F:4F:D3:6B
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/X1o2_1s2HYnD2FxQMiupxy9P02s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.112.0/20
85.91.192.0/19
91.247.96.0/19
109.200.128.0/19
185.92.136.0/22
185.99.168.0/22
185.100.103.0/24
185.186.232.0/22
IPv6:
2a00:1d80::/32
Signature Algorithm: sha256WithRSAEncryption
b9:2d:40:e7:6e:a7:06:cd:37:2b:4a:e5:b6:e2:2a:a5:f2:35:
39:39:71:82:df:ed:f1:97:b7:f6:d5:68:fd:46:db:3f:2d:83:
bc:fb:ad:ce:04:19:5d:0b:1c:72:38:bc:63:2d:8c:46:b4:09:
82:d4:46:c1:4c:93:10:cc:2e:c5:0f:ab:68:39:76:a8:8d:a4:
ea:73:e4:b3:c4:f9:4e:2f:5d:09:66:b3:17:6e:3a:08:b7:0f:
3e:65:0a:2d:ad:b7:44:34:a2:07:37:a2:2d:6a:11:5b:ee:7b:
3e:7c:2f:a7:b1:93:23:da:ba:6a:b5:e7:73:53:b5:92:59:7f:
b1:64:01:b8:38:4d:87:44:35:8f:7c:20:53:75:73:e4:92:93:
8e:3e:69:66:99:65:18:c3:b5:dc:e0:01:b7:d9:f2:a2:e5:64:
c9:c4:8e:38:62:8e:40:c6:2a:44:04:a6:95:cf:f2:ec:65:1c:
28:f8:eb:55:d5:2f:6c:05:ed:7d:55:7a:35:99:ef:8c:97:15:
57:24:87:be:eb:36:57:d1:c0:31:6e:32:e6:a9:ad:c8:45:a3:
cb:07:76:d9:1e:77:76:4e:07:1a:ac:53:ea:e4:6d:f3:11:ce:
8a:32:88:1b:1a:cd:15:e7:aa:18:53:fc:05:15:15:98:2c:e1:
c6:8c:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:27 2024 by rpki-client on console-ams.rpki-client.org