Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/PeNQUkFNOGAB1UFBVGX1GjvbaEI.roa
File: PeNQUkFNOGAB1UFBVGX1GjvbaEI.roa (raw, json)
Hash identifier: gKrpTNmuaSut2/l7REfFdF1Cdl7SBUc7g+AxrDrhoHs=
Subject key identifier: 3D:E3:50:52:41:4D:38:60:01:D5:41:41:54:65:F5:1A:3B:DB:68:42
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 01938C7D45FFA2932E6A43DE8DE011898787
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/PeNQUkFNOGAB1UFBVGX1GjvbaEI.roa
Signing time: Tue 03 Dec 2024 12:27:20 +0000
ROA not before: Tue 03 Dec 2024 12:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42695
IP address blocks: 80.254.229.0/24 maxlen: 24
80.254.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:7d:45:ff:a2:93:2e:6a:43:de:8d:e0:11:89:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Dec 3 12:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3de35052414d386001d541415465f51a3bdb6842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:77:01:bd:97:c7:bf:3b:10:99:e0:b4:0c:
be:bd:39:ca:b1:d1:a5:0f:c4:4d:6e:95:8d:4e:21:
a8:89:89:fd:49:c0:cf:37:1b:61:af:78:c4:6c:de:
6b:8c:ad:fc:37:f5:98:d9:bc:6a:24:5e:29:52:f2:
c9:d1:75:f4:6f:00:c0:72:4c:42:7a:1d:c7:d8:b7:
a0:3b:e4:1b:5e:0b:28:0f:6c:ae:23:6c:e0:4c:09:
80:16:4c:37:f0:d0:cf:89:57:8c:0a:2e:ba:b4:1f:
85:50:23:b4:c2:49:3f:a9:72:c3:16:1a:39:7c:1f:
3f:ed:61:90:40:cb:08:78:7a:8d:db:49:7b:5a:14:
1e:fa:ab:ae:8b:65:8f:48:2a:58:38:a2:6c:8e:73:
3c:25:a2:f6:72:13:c7:5f:c6:8e:62:13:6b:45:22:
88:5a:3c:12:e9:26:0c:95:af:ca:a4:6a:6b:ae:74:
b1:c0:d8:15:82:67:7e:f0:a2:4f:9f:70:13:19:9b:
c7:f3:90:1b:ee:7d:3d:4d:52:f1:ee:74:2e:a6:d2:
8f:90:44:ce:4e:b1:24:6e:f5:f9:44:31:ee:da:d8:
21:e2:cb:a8:45:63:bf:1a:4d:27:4e:e1:92:58:16:
ba:1e:43:04:f2:39:c6:87:03:f5:79:09:28:52:26:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E3:50:52:41:4D:38:60:01:D5:41:41:54:65:F5:1A:3B:DB:68:42
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/PeNQUkFNOGAB1UFBVGX1GjvbaEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.229.0-80.254.230.255
Signature Algorithm: sha256WithRSAEncryption
b3:3c:61:09:3e:42:12:38:c7:eb:94:17:a4:4d:7f:cf:a1:5c:
fb:a9:c0:6d:95:69:98:e2:ae:90:fe:80:31:ef:0d:41:82:3c:
0c:fb:70:b8:fe:e3:93:95:19:f7:31:3a:da:1a:b1:15:8e:a7:
b4:ce:e7:8c:ea:11:bd:bb:d7:a4:fa:e6:9f:c9:eb:5b:84:58:
ea:c4:db:88:6c:2d:b2:94:1a:d3:63:a4:a9:7c:69:ff:b5:41:
51:06:84:0b:bf:2a:0c:e6:c8:96:27:b1:fa:2d:69:16:b4:4d:
5b:43:44:34:f9:f5:d0:c7:be:30:cd:95:db:99:82:26:c5:46:
9b:95:2b:ba:6a:a1:6b:00:04:15:68:f8:f5:ad:b0:9f:fd:3a:
3e:c2:5c:0b:28:2b:90:2f:61:35:5f:35:92:45:24:8d:ac:c0:
39:74:c8:c9:70:2f:18:0c:72:6b:76:48:6f:1d:ad:fd:fc:19:
32:48:b4:b9:b3:c1:ea:5b:21:68:55:5f:8d:4e:6b:f9:ce:a9:
7a:38:e2:6f:5c:c2:48:6f:c5:0c:90:92:5f:d4:29:b4:58:34:
1d:d6:e5:25:79:e2:92:f0:38:8e:17:e0:6f:5b:bb:5f:2c:38:
7e:27:67:d5:7a:e7:6f:c9:80:4b:5c:63:69:86:99:73:fc:a8:
31:7e:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:11:02 2025 by rpki-client