Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/n9R500YLyQ7I4JHJVDIbw8oDHUg.roa
File: n9R500YLyQ7I4JHJVDIbw8oDHUg.roa (raw, json)
Hash identifier: jiMJpVDAngOt4Sqc05RVHe2lgFkbpYK43GtbltOFP+8=
Subject key identifier: 9F:D4:79:D3:46:0B:C9:0E:C8:E0:91:C9:54:32:1B:C3:CA:03:1D:48
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 018572F12CD32F2F22E6BBE5DC9C59600BF3
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/n9R500YLyQ7I4JHJVDIbw8oDHUg.roa
Signing time: Mon 02 Jan 2023 14:44:46 +0000
ROA not before: Mon 02 Jan 2023 14:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24582
IP address blocks: 5.61.80.0/21 maxlen: 24
80.87.160.0/20 maxlen: 24
185.32.32.0/22 maxlen: 24
212.237.160.0/21 maxlen: 24
2a00:5f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:2c:d3:2f:2f:22:e6:bb:e5:dc:9c:59:60:0b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 2 14:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fd479d3460bc90ec8e091c954321bc3ca031d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:fd:b7:24:3d:c5:03:3d:3e:cf:b2:e1:e2:
f0:64:09:84:14:4b:7b:c7:c4:18:4c:e6:47:bc:17:
1d:60:a8:9e:84:8b:6d:ba:27:8a:eb:9d:e6:43:81:
1e:34:b3:d8:04:cb:a7:c0:ba:7d:e8:9c:fa:72:53:
a6:63:32:8e:a6:e5:ea:d2:35:df:0f:03:30:0d:fb:
82:36:cc:bc:67:e1:0c:62:35:66:88:b4:56:c4:98:
53:c8:52:01:c3:8e:2a:ed:aa:75:33:f0:d8:be:35:
0a:b1:49:63:1c:b4:01:76:e7:da:41:d5:0d:2d:ca:
e1:9a:4d:97:8b:f5:06:32:44:34:28:02:00:06:5a:
7f:3f:8c:78:fc:68:de:11:09:d7:f4:e5:dd:69:56:
7c:30:7f:f5:0c:5e:46:0c:a9:a8:bc:06:63:52:3a:
7c:c0:91:8e:0f:fd:c5:f4:3d:29:a7:74:c9:d1:f3:
f5:e5:35:ad:3f:53:15:c9:e3:0d:76:97:04:46:59:
68:3e:d5:b1:00:67:86:77:68:1c:a0:16:ef:ea:d4:
92:68:19:1f:40:34:54:f0:a3:98:41:5f:bb:71:f6:
29:cb:91:0f:d5:59:93:ec:d5:c3:ab:fc:2c:18:07:
c8:42:21:14:ae:47:a7:5b:56:be:00:26:16:c6:51:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:79:D3:46:0B:C9:0E:C8:E0:91:C9:54:32:1B:C3:CA:03:1D:48
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/n9R500YLyQ7I4JHJVDIbw8oDHUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.80.0/21
80.87.160.0/20
185.32.32.0/22
212.237.160.0/21
IPv6:
2a00:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
71:cd:ba:d6:36:6e:8a:7a:9f:fb:58:66:b7:8e:10:5b:55:a0:
01:af:53:b3:2b:4f:6a:cb:12:40:bd:13:ae:85:2d:32:31:92:
81:ac:f1:49:ed:ce:44:42:ee:b1:8b:c7:cd:ff:0b:f7:b2:9c:
e9:16:59:fa:ef:27:45:cb:93:4e:e2:05:11:17:0c:92:16:4c:
43:7f:28:59:ff:65:12:25:c7:25:f9:96:be:16:34:8e:39:88:
f8:9f:09:b6:46:36:ae:dc:dc:6e:d4:bc:c8:a4:df:e9:fc:5a:
79:90:ba:f3:c9:4d:4b:e0:8c:d3:92:06:99:68:f3:3c:01:fe:
26:c9:ba:34:44:4f:ba:7a:85:90:52:c1:5e:2a:11:a2:62:95:
a7:cf:78:a4:6e:08:1b:a0:77:8b:6c:db:86:c0:eb:96:d1:f9:
11:4d:99:79:ea:0c:cf:26:13:17:4f:4e:a4:2d:d5:c2:92:7c:
55:2f:fd:a1:b3:b7:3e:4e:5d:09:e0:7e:71:d1:c3:37:ec:6e:
23:6a:59:ca:6a:ac:4e:f8:e0:3e:f1:85:c8:53:1c:52:6e:3f:
a4:8b:22:4e:36:0f:c2:24:7e:a4:01:f2:6a:e8:a5:2e:c0:4f:
fb:18:b0:8e:24:1a:49:c1:4a:66:25:40:55:9f:13:c5:f5:22:
b3:d7:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:11 2024 by rpki-client on console-ams.rpki-client.org