Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/kodQGKqFS6FJ5awAYj3vdlRhHg8.roa
File: kodQGKqFS6FJ5awAYj3vdlRhHg8.roa (raw, json)
Hash identifier: wm+Nixjmwmuk7LJwn5S8EMf6U1x3iOzSJvJnxmuCHyU=
Subject key identifier: 92:87:50:18:AA:85:4B:A1:49:E5:AC:00:62:3D:EF:76:54:61:1E:0F
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 018CC3495B1442EE09BA4E71826A50F934AE
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/kodQGKqFS6FJ5awAYj3vdlRhHg8.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42695
IP address blocks: 80.254.229.0/24 maxlen: 24
80.254.230.0/23 maxlen: 23
2a13:5243::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 Feb 2024 10:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5b:14:42:ee:09:ba:4e:71:82:6a:50:f9:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92875018aa854ba149e5ac00623def7654611e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:f9:c9:b8:87:0a:77:a4:89:56:f4:6d:34:
bc:20:47:f3:85:99:8a:15:c5:ed:4c:21:e6:71:27:
0d:b9:c2:e9:4a:6c:e1:cd:b5:45:c4:5b:6c:b7:31:
5c:27:ab:b7:da:2c:e9:ba:22:1b:8c:ed:7e:a4:86:
df:4a:21:4e:8e:74:d6:44:22:29:5a:12:0e:c6:48:
8e:8e:db:fd:93:af:59:59:9c:56:0d:16:7e:7a:08:
0d:7a:43:71:c8:df:73:d7:22:da:eb:6f:3f:fc:76:
f1:a5:5a:8f:01:1a:98:fe:35:05:aa:83:23:9c:87:
92:54:75:ee:76:bb:33:fb:34:27:2b:dd:0b:de:a8:
29:1a:54:bb:cb:af:84:d2:17:e8:89:c3:96:6e:3f:
c4:3f:4f:8b:4e:fc:b3:c0:32:96:7c:99:ab:d1:20:
0f:6b:e3:34:61:90:6d:28:a9:d0:5b:d5:3d:69:48:
83:75:68:56:3e:67:d2:79:10:d3:76:a5:ad:30:58:
ca:71:2a:ee:70:5c:a7:a4:3e:72:73:96:5f:02:1a:
9a:5d:0b:31:da:9f:50:38:ed:2b:e2:9c:b1:e0:7d:
8c:48:f0:71:b7:f6:0e:76:e6:db:55:12:ae:53:d7:
f5:61:7e:62:eb:15:a3:ea:a3:3f:fd:94:49:12:15:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:87:50:18:AA:85:4B:A1:49:E5:AC:00:62:3D:EF:76:54:61:1E:0F
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/kodQGKqFS6FJ5awAYj3vdlRhHg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.229.0-80.254.231.255
IPv6:
2a13:5243::/32
Signature Algorithm: sha256WithRSAEncryption
00:cd:c9:ca:e2:64:af:d4:04:02:11:f9:63:28:20:9c:1a:be:
9a:47:fb:c0:9f:32:de:0c:47:e9:54:3d:43:42:95:b7:20:e1:
6f:1d:08:0a:46:8f:8d:9a:e0:a4:09:c6:bf:d2:d2:cb:df:de:
9c:f5:97:fc:7d:31:45:7e:48:1c:0e:25:ca:6d:6b:19:c8:00:
23:54:34:61:87:8a:10:21:b0:77:c0:a5:30:44:43:5f:90:8d:
47:bb:b0:5c:a0:8a:3e:1b:dc:d4:ea:f3:f4:69:63:23:a6:cd:
17:33:6a:4b:9b:8f:42:3a:27:13:af:f5:80:c8:82:42:21:4f:
7d:40:94:21:23:b8:15:3e:9a:fa:49:e5:57:b2:6d:54:1f:a5:
7d:e2:b2:a4:28:88:11:7e:01:65:95:c6:ce:a0:e2:45:dc:80:
6a:bb:df:f3:2b:c9:4b:52:b4:3c:e9:fd:dd:7c:bf:67:99:35:
f6:bb:c8:f5:5b:17:34:e7:08:04:89:6f:a6:93:9d:f5:13:5a:
19:b3:d6:22:8e:86:fe:96:c1:63:d2:5b:06:23:7c:3b:49:4a:
e7:aa:5e:ad:ac:45:74:45:40:52:0b:2e:6a:a4:46:d1:86:9b:
51:54:a0:84:ec:d1:c1:a7:48:4c:60:20:cc:5c:90:7a:ef:17:
a5:07:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:10 2024 by rpki-client on console-fra.rpki-client.org