Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/4W1pfs5V2MYK67tFe0HdCH0qDEY.roa
File: 4W1pfs5V2MYK67tFe0HdCH0qDEY.roa (raw, json)
Hash identifier: ExJIP2r7OdZ+qxecQ2LP0mh+UdIs2OZPcVFjUTYQ78s=
Subject key identifier: E1:6D:69:7E:CE:55:D8:C6:0A:EB:BB:45:7B:41:DD:08:7D:2A:0C:46
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 0192B42F629324F5423E3D97749EBE28A400
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/4W1pfs5V2MYK67tFe0HdCH0qDEY.roa
Signing time: Tue 22 Oct 2024 12:24:17 +0000
ROA not before: Tue 22 Oct 2024 12:24:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 80.64.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:2f:62:93:24:f5:42:3e:3d:97:74:9e:be:28:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Oct 22 12:24:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e16d697ece55d8c60aebbb457b41dd087d2a0c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:2b:7c:de:df:10:34:43:39:08:94:b1:99:
0e:e5:8e:83:2e:06:28:9a:1c:0f:6e:04:6c:ef:34:
81:d8:54:56:d3:ec:e0:f8:6d:bf:4d:03:88:75:a7:
89:2d:c4:09:2d:9b:a9:95:fe:50:61:ba:fa:f7:7f:
dd:5c:fe:7a:0f:b6:ff:85:87:25:a9:4e:ad:15:16:
5a:22:eb:33:58:13:38:26:ef:b7:97:fd:99:58:b3:
3b:1e:29:b3:18:c6:20:f0:84:09:49:65:ae:82:84:
65:c7:21:e5:a8:91:bc:01:f5:a5:df:e4:c4:ba:b4:
35:4d:ac:f3:a5:c9:2d:f8:5c:69:50:67:93:b7:5d:
a4:07:09:d6:84:8c:80:ad:fd:e7:bc:97:2b:ad:88:
dc:19:f6:b9:6a:f0:a0:06:57:10:a0:72:cb:fb:01:
11:fa:bd:fc:2f:06:7c:12:a3:f5:76:90:cb:34:43:
f7:3c:d6:e3:5f:ce:e2:18:41:7a:cc:c2:62:2e:86:
69:2d:b0:7f:1e:73:6e:e5:7f:d9:02:49:2c:11:08:
0c:6e:93:e6:d7:08:95:c5:6e:22:74:57:04:30:c3:
05:3e:80:8d:e1:c2:61:36:e9:c8:dd:25:73:77:ea:
12:bd:dc:b1:2b:86:b6:25:54:2d:83:28:fb:5a:25:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6D:69:7E:CE:55:D8:C6:0A:EB:BB:45:7B:41:DD:08:7D:2A:0C:46
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/4W1pfs5V2MYK67tFe0HdCH0qDEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:34:08:88:b3:7a:6d:5f:81:fe:8e:2c:24:31:cf:3c:59:39:
8b:26:4c:f9:47:8d:7b:a4:e4:63:f6:97:fc:0f:03:7d:4e:38:
3a:a0:09:7d:51:ef:4d:c7:0f:ca:6c:a7:2c:4c:37:42:44:91:
bd:18:87:39:a6:26:e1:40:0f:e5:10:fc:48:69:8b:da:23:77:
40:c6:0e:63:cf:a2:39:aa:e4:ed:8f:e0:53:4d:a4:ec:ff:da:
4b:1f:bd:f6:59:cd:15:41:f4:51:42:4d:02:d1:da:ff:e7:20:
3a:71:c6:fa:50:a6:de:6e:ef:5d:92:5a:b5:2a:4e:ad:e7:d1:
8b:fd:16:65:55:eb:c1:22:8c:6b:b6:1c:fc:ed:2f:8a:d6:df:
b1:20:10:35:00:32:49:fe:56:10:a8:aa:bd:9d:13:a1:54:f8:
ec:c2:ea:16:5d:2b:54:5f:a1:21:df:f2:6e:e4:55:5c:95:f4:
b6:2b:e1:45:94:e2:8f:d6:62:7a:00:2b:68:18:fb:a6:42:93:
a8:f0:cd:42:fc:c2:a9:cb:f0:98:bb:5d:d0:20:06:64:01:4e:
25:bf:91:a3:25:a8:d9:23:4f:22:ea:63:bf:49:1c:62:57:75:
d7:d8:ed:67:ed:df:6a:c2:ef:3c:d8:95:4d:33:a1:6e:48:11:
fa:b3:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:47 2025 by rpki-client