Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1-P-lJQpEsB9pHnAhIK0be4sn7H4.roa
File: 1-P-lJQpEsB9pHnAhIK0be4sn7H4.roa (raw, json)
Hash identifier: s+sPM1YPcW/Ci52SEJoTuZtphliTaSRq0Rp/prQVLBo=
Subject key identifier: F8:FF:A5:25:0A:44:B0:1F:69:1E:70:21:20:AD:1B:7B:8B:27:EC:7E
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 018DE9E1895BD99265F58CA77B9DD4084E7C
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1-P-lJQpEsB9pHnAhIK0be4sn7H4.roa
Signing time: Tue 27 Feb 2024 09:24:48 +0000
ROA not before: Tue 27 Feb 2024 09:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48918
IP address blocks: 80.66.96.0/20 maxlen: 20
80.66.96.0/23 maxlen: 23
80.66.98.0/24 maxlen: 24
80.66.101.0/24 maxlen: 24
80.66.102.0/24 maxlen: 24
80.66.104.0/23 maxlen: 23
80.66.107.0/24 maxlen: 24
185.198.200.0/22 maxlen: 24
195.20.20.0/22 maxlen: 24
2a02:340::/32 maxlen: 32
2a0a:8ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 17 May 2024 09:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:e1:89:5b:d9:92:65:f5:8c:a7:7b:9d:d4:08:4e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Feb 27 09:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ffa5250a44b01f691e702120ad1b7b8b27ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:f0:fd:04:1f:ae:56:3a:ed:0d:89:9d:d5:
d9:6b:0b:c6:41:1a:52:0e:61:27:9e:aa:b5:c3:9d:
12:cf:10:08:76:5f:f8:22:44:22:e4:35:b6:1a:2b:
99:a0:ba:e8:fa:d7:be:56:98:7d:07:f8:df:66:7e:
51:72:39:56:4b:1e:94:c7:1f:82:f7:d1:57:ed:c4:
3b:9c:d5:aa:db:d6:27:16:12:22:f6:63:8f:c2:8e:
e9:90:6f:2a:e9:ca:27:c3:9d:ca:f0:ff:f1:bb:9c:
56:81:65:30:e2:1c:11:3d:3c:3b:e4:8a:f7:0b:58:
dc:a2:18:45:c7:54:5b:fc:ba:49:67:64:4e:b8:88:
48:b6:ea:73:0d:45:e0:81:6b:23:a2:9d:ec:c0:91:
49:af:0f:47:42:0b:2a:46:7a:fb:b3:62:fd:6c:3e:
0f:45:0b:6a:fe:56:26:eb:6b:4c:19:f4:e8:d5:ec:
99:86:8d:71:21:f5:a0:86:2e:bc:d6:a9:f7:bd:cb:
7e:61:4a:63:b8:75:7c:f2:a0:6b:f0:b4:ac:0c:b1:
16:91:ed:77:c6:af:3a:e2:49:cd:75:89:0a:91:c4:
d6:10:cb:e3:8d:23:90:a2:f1:26:d3:51:d0:f7:8f:
1e:cd:27:68:d8:0f:16:da:c8:9f:08:1a:35:ee:f3:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:A5:25:0A:44:B0:1F:69:1E:70:21:20:AD:1B:7B:8B:27:EC:7E
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1-P-lJQpEsB9pHnAhIK0be4sn7H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.96.0/20
185.198.200.0/22
195.20.20.0/22
IPv6:
2a02:340::/32
2a0a:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
18:f6:7b:9f:8d:a4:05:df:c1:cd:a9:71:70:31:4d:b3:e2:05:
c5:88:76:d0:66:a5:e8:3d:b0:34:8f:39:64:e1:1b:3f:a0:ad:
ee:5e:1c:cf:99:96:1f:5d:d4:68:3e:1e:17:62:b4:03:43:46:
60:94:e7:c0:0e:7c:59:c7:00:81:f9:f9:4c:e0:94:0f:38:88:
d4:20:8a:aa:38:a7:52:2a:b2:cb:12:ee:f3:48:ed:38:e7:f3:
b7:0c:13:c2:4d:ba:1b:c5:48:6e:8e:7d:46:45:b1:d3:d8:b8:
42:cb:f4:83:d2:4c:62:4e:ba:3c:bd:ab:6e:e1:66:71:2a:e1:
a0:9d:da:13:a6:98:ad:56:15:8b:c3:0c:08:f6:ab:fa:73:fd:
a5:1c:70:2d:1a:02:54:8a:f4:ac:92:d3:1c:49:5b:17:e7:fb:
61:03:56:27:85:66:b5:90:58:fd:6a:b2:c5:c9:1b:1e:9b:81:
19:50:ab:46:34:b8:da:7b:5e:1c:1c:b3:7c:35:10:d4:7e:94:
8b:f7:ca:0d:56:8e:d1:c6:9a:73:59:28:b6:a4:88:70:91:b4:
2f:2f:87:2a:ef:15:4f:7d:f8:aa:6f:f2:26:5b:ee:05:87:cd:
df:58:a1:4e:35:ef:56:06:5b:91:b3:9d:77:4f:6f:ad:50:0c:
ed:16:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:32:28 2024 by rpki-client on console-fra.rpki-client.org