Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/n6-n7E0YV9f8R6OnaoOKt1AC6hw.roa
File: n6-n7E0YV9f8R6OnaoOKt1AC6hw.roa (raw, json)
Hash identifier: TVQrlvQ2oWLemuNo3FqhQCU50pEtG8ZG8zyyKq/6pv8=
Subject key identifier: 9F:AF:A7:EC:4D:18:57:D7:FC:47:A3:A7:6A:83:8A:B7:50:02:EA:1C
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 0192BB843661D1B6C5E4447A75850744A24A
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/n6-n7E0YV9f8R6OnaoOKt1AC6hw.roa
Signing time: Wed 23 Oct 2024 22:34:16 +0000
ROA not before: Wed 23 Oct 2024 22:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42580
IP address blocks: 80.243.88.0/21 maxlen: 21
185.224.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bb:84:36:61:d1:b6:c5:e4:44:7a:75:85:07:44:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Oct 23 22:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fafa7ec4d1857d7fc47a3a76a838ab75002ea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6a:6b:ea:c3:45:96:17:d1:e7:c7:63:2e:24:
64:ab:d4:5c:80:32:e3:52:50:74:26:83:fa:d9:4b:
1c:ef:62:a3:54:7d:ce:a0:24:e2:4e:d7:99:61:0c:
03:26:96:dc:79:10:d7:c1:b1:88:65:45:d5:14:4d:
56:8f:a8:11:65:53:dd:5b:44:2a:90:81:f4:0c:fc:
c1:1c:b6:08:06:65:17:95:21:01:43:d6:e1:42:6c:
7d:d0:e2:bc:23:34:43:7a:99:94:80:65:63:7c:0a:
ef:45:68:62:0d:7e:00:8b:e7:44:be:1b:d6:6f:68:
9a:66:c2:98:44:44:ea:fd:14:83:7a:49:39:5f:50:
79:d1:c2:3b:ba:52:e5:f6:0d:cb:bd:a2:6d:ff:c7:
44:be:33:6c:a8:13:29:f6:ba:dc:38:dd:a1:1f:c9:
be:5e:34:75:2e:58:fc:39:29:0f:ca:9b:1a:ae:72:
b0:f2:cf:a2:b0:db:ce:2e:f2:d1:fa:f6:72:8c:83:
e4:06:35:85:ba:34:8b:86:27:f5:5d:fb:eb:27:6c:
3d:8b:50:f8:17:e1:1d:a4:04:01:86:c2:af:21:cc:
74:dd:e5:ba:6c:89:ea:47:b1:60:f7:35:70:04:07:
72:5c:c6:2d:3c:48:ee:b2:37:3f:60:f4:91:e3:eb:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:A7:EC:4D:18:57:D7:FC:47:A3:A7:6A:83:8A:B7:50:02:EA:1C
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/n6-n7E0YV9f8R6OnaoOKt1AC6hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.88.0/21
185.224.164.0/22
Signature Algorithm: sha256WithRSAEncryption
04:08:c4:1e:5d:d1:c9:d8:d8:c0:1e:7f:1e:0b:11:b6:45:84:
39:99:e6:a1:18:a5:13:32:65:4e:4b:ac:0f:6a:1c:7d:8b:d3:
42:16:49:df:f4:ee:dd:8c:c2:86:d7:cf:69:ce:c1:65:2c:c2:
69:ff:62:41:76:d6:90:31:52:b5:3d:1a:73:65:ef:e0:cd:dc:
b7:a2:35:ed:9b:5d:cd:be:32:29:a7:61:e7:14:7f:cc:d5:f8:
e1:93:35:f9:a1:ff:6e:fe:f1:24:b9:a3:18:40:ef:f3:c6:bc:
c2:e7:07:4a:cc:73:27:03:af:59:2b:8b:5d:f7:b9:30:c4:21:
83:ed:12:95:99:7e:2f:6a:4e:4f:d0:90:19:c7:21:c5:77:20:
03:a4:31:3c:45:81:de:99:f3:ca:fa:a4:4c:af:dc:35:ff:6b:
6a:5a:84:c5:89:54:4f:92:cf:d8:94:0a:c1:cd:14:45:24:43:
62:fe:41:a4:d8:ea:bb:8e:1b:24:2f:c6:92:7b:4e:b3:28:47:
71:66:f7:78:d9:87:bc:7e:9e:c9:75:ab:7b:21:d2:83:bd:85:
cd:02:d8:c2:1b:82:45:8f:de:0d:69:62:8a:7c:d4:55:76:b2:
98:f7:87:74:bb:cb:5a:db:e3:86:36:4a:fb:6e:62:65:5d:6d:
0e:65:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:18:26 2025 by rpki-client