Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/sCb1NNGMhe3DGYIcEupY2i3uccU.roa
File: sCb1NNGMhe3DGYIcEupY2i3uccU.roa (raw, json)
Hash identifier: QoLlvQLZAf5tcjEY70N8/58r/Tpc4dfd3BsCZxALMdo=
Subject key identifier: B0:26:F5:34:D1:8C:85:ED:C3:19:82:1C:12:EA:58:DA:2D:EE:71:C5
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 0192DC5B80FCB179446FD0E3B1A764D5AB4F
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/sCb1NNGMhe3DGYIcEupY2i3uccU.roa
Signing time: Wed 30 Oct 2024 07:37:17 +0000
ROA not before: Wed 30 Oct 2024 07:37:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51324
IP address blocks: 185.80.144.0/22 maxlen: 24
2a05:7dc2:1000::/36 maxlen: 36
2a05:7dc2:2000::/36 maxlen: 36
2a05:7dc2:3000::/36 maxlen: 36
2a05:7dc2:4000::/36 maxlen: 36
2a05:7dc2:5000::/36 maxlen: 36
2a05:7dc2:6000::/36 maxlen: 36
2a05:7dc2:7000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:5b:80:fc:b1:79:44:6f:d0:e3:b1:a7:64:d5:ab:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Oct 30 07:37:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b026f534d18c85edc319821c12ea58da2dee71c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:aa:15:ff:46:7a:21:2b:23:39:0d:8a:37:
a9:74:c1:4e:f4:64:5a:a8:1a:40:d9:ef:f2:42:48:
8b:1a:9d:d5:82:7d:40:5e:eb:74:6b:96:1d:54:3c:
f4:1b:9f:81:8a:6f:29:14:74:7e:cf:0b:f2:30:b3:
99:b2:6f:e9:30:a8:0e:91:f0:63:8a:af:68:76:8c:
f7:af:47:aa:4e:9d:52:18:dd:46:e8:46:b6:94:7a:
9b:70:87:c2:0f:12:82:79:a2:b0:2b:f3:39:bd:74:
49:8c:f4:dc:e5:39:d7:5f:08:16:30:0d:e5:b5:25:
fd:01:84:37:55:a9:b2:a3:5f:33:35:ef:0d:b7:d5:
40:b3:90:1b:fa:0f:8e:45:8a:5c:a5:1b:5e:32:1e:
6c:62:70:3c:9b:88:c2:f0:b8:4a:12:90:43:25:76:
e3:f3:aa:cc:3d:74:4f:17:50:63:cc:9d:c5:db:69:
5d:b3:ac:c4:3b:a5:b3:2c:00:1b:fc:a3:56:33:32:
8f:36:a1:c6:3b:9d:86:94:50:ba:6d:43:57:ca:2a:
88:ba:9a:d6:ce:92:21:4e:5b:f1:7f:bf:66:bb:8f:
26:f5:60:0b:96:eb:ad:68:39:36:39:c9:1c:ce:e1:
c3:fe:0b:11:64:ce:3a:43:a2:bf:a3:97:3b:a0:c1:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:F5:34:D1:8C:85:ED:C3:19:82:1C:12:EA:58:DA:2D:EE:71:C5
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/sCb1NNGMhe3DGYIcEupY2i3uccU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.144.0/22
IPv6:
2a05:7dc2:1000::-2a05:7dc2:7fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:50:8e:af:1a:57:27:fc:2a:e8:c0:a1:7f:17:c3:82:51:cf:
8d:0d:3b:7a:92:ff:89:bb:c8:da:7b:0c:f6:7e:fa:75:cc:7f:
e9:b0:5a:0a:0d:c4:b6:e8:5c:ca:ac:23:73:0f:6c:70:bc:a5:
35:72:22:2e:f4:25:13:78:1d:02:fc:d4:4e:eb:45:61:1d:dc:
9d:dc:b4:3f:2e:77:a8:5a:90:91:cb:00:aa:92:b0:9b:cc:16:
59:b0:e4:cf:e6:58:d3:e7:b5:cd:f3:dc:05:31:62:67:27:f0:
a3:e3:84:e8:f0:f9:5d:57:d3:6d:a8:96:5f:37:b5:0c:41:ae:
6a:14:13:96:9a:14:bb:dc:e6:19:44:bf:c1:33:aa:32:76:25:
42:42:10:cd:48:c6:3e:de:3b:13:9d:d2:16:1c:f2:2e:9a:52:
2f:1b:1a:c7:5c:fb:e0:4e:d4:43:fa:e5:0f:27:2f:23:2c:4b:
2d:40:b8:ca:b5:70:76:0e:86:3d:15:c9:53:90:78:bf:1d:72:
59:73:5b:90:f5:62:7e:eb:e9:74:ca:13:c1:3c:28:9d:52:6d:
82:1a:35:e9:02:55:57:77:be:63:6d:87:c1:73:b0:cc:23:66:
a1:ac:82:7c:84:16:e7:b6:75:45:14:0c:2f:0d:c1:0a:f6:27:
e7:56:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:19 2025 by rpki-client