Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/oQloxs5ltNFRpVTRJ6ApdHUCDWM.roa
File: oQloxs5ltNFRpVTRJ6ApdHUCDWM.roa (raw, json)
Hash identifier: LLxRv5vvpD65xyEwDCOFMbJBrvdyjPRS7AAuNIrKW+c=
Subject key identifier: A1:09:68:C6:CE:65:B4:D1:51:A5:54:D1:27:A0:29:74:75:02:0D:63
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019386B3CA74F4D8162DCF344CB1FA8F9E65
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/oQloxs5ltNFRpVTRJ6ApdHUCDWM.roa
Signing time: Mon 02 Dec 2024 09:29:09 +0000
ROA not before: Mon 02 Dec 2024 09:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58243
IP address blocks: 80.246.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 11 Dec 2024 09:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:b3:ca:74:f4:d8:16:2d:cf:34:4c:b1:fa:8f:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Dec 2 09:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a10968c6ce65b4d151a554d127a0297475020d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:99:cd:45:6a:11:ba:a7:5a:f0:45:36:11:
1c:a1:1e:7f:ab:2f:18:26:73:25:85:00:33:55:97:
78:51:bc:36:0e:1e:ce:9a:30:87:4a:5f:d8:2d:64:
78:fa:79:94:cc:a3:ca:9f:f6:39:f4:b2:63:72:06:
4f:ce:20:e2:bd:f2:34:f4:d3:a5:6f:d9:00:5b:80:
70:98:92:a1:89:b5:bc:89:2d:5b:00:48:f2:73:6e:
c0:6f:fb:18:9b:78:53:91:79:6a:76:c3:6e:46:73:
1b:5e:04:51:00:1f:57:a0:a7:83:ac:a6:88:93:62:
f4:e6:c2:0b:cf:8d:97:4c:47:26:38:bd:1a:7b:f8:
d3:48:e1:29:a1:ce:b9:13:6a:63:39:94:a7:86:04:
7b:d7:79:4e:b1:55:f6:60:21:66:f0:9c:d5:ce:83:
7d:1d:6b:1c:e5:26:e1:71:f7:1e:18:9d:c8:77:d2:
15:c4:80:dc:76:dd:80:b1:35:11:67:ca:08:a3:71:
08:8d:ec:e0:7e:3d:ef:26:83:c3:e9:89:07:42:3f:
bf:e2:10:74:22:c8:f3:0b:b8:2b:d5:7f:fa:b6:0b:
98:b8:93:db:f4:62:cb:27:6b:70:0f:e6:95:98:b8:
9b:68:38:f8:84:a1:52:ca:ca:2d:d1:be:50:92:9d:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:09:68:C6:CE:65:B4:D1:51:A5:54:D1:27:A0:29:74:75:02:0D:63
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/oQloxs5ltNFRpVTRJ6ApdHUCDWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.112.0/22
Signature Algorithm: sha256WithRSAEncryption
05:28:70:62:31:b8:33:e3:3b:b9:56:04:4b:91:f1:5e:97:ac:
1a:5b:54:8b:23:61:ce:af:d1:cc:e8:4e:70:98:3c:e1:e0:41:
37:2d:08:53:15:da:c8:1a:28:1e:86:cd:ea:3d:b1:46:41:3f:
0a:d7:af:18:5b:e3:8c:a4:0d:b5:42:b1:8c:3c:3d:53:b7:d7:
7b:7a:d9:08:06:a7:76:04:ed:ce:41:ff:48:22:4f:9d:4d:2a:
78:fd:65:19:e4:73:99:23:23:4f:ce:e0:fc:21:c3:37:b3:cc:
1d:39:d0:02:00:82:71:bd:d6:df:da:f6:80:2f:f5:31:91:91:
19:1d:76:cb:6a:a8:93:0e:d0:71:06:8b:fd:31:5c:06:ef:f8:
7e:4f:20:7d:af:c1:00:44:8b:be:b7:46:12:42:a9:8e:be:15:
cb:96:23:0f:f1:b9:f8:d9:c4:63:b2:4e:49:4d:80:ef:56:be:
fb:3f:4d:ad:2a:cf:98:cf:08:51:d5:04:d7:7a:fa:a6:14:7d:
4a:fe:1f:2b:4a:21:48:d3:7f:8a:13:81:92:c5:cd:ad:c1:3d:
ac:5c:db:2f:fb:43:b6:d5:4b:9f:16:53:23:6e:14:3f:40:36:
60:f6:15:95:4a:c0:c0:29:68:9f:ec:0c:da:b4:ed:75:ff:c3:
3b:0a:a1:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOGs8p09NgWLc80TLH6j55lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1
ZTU3YTEwHhcNMjQxMjAyMDkyOTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTA5NjhjNmNlNjViNGQxNTFhNTU0ZDEyN2EwMjk3NDc1MDIwZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNmZzUVqEbqnWvBFNhEcoR5/qy8Y
JnMlhQAzVZd4Ubw2Dh7OmjCHSl/YLWR4+nmUzKPKn/Y59LJjcgZPziDivfI09NOl
b9kAW4BwmJKhibW8iS1bAEjyc27Ab/sYm3hTkXlqdsNuRnMbXgRRAB9XoKeDrKaI
k2L05sILz42XTEcmOL0ae/jTSOEpoc65E2pjOZSnhgR713lOsVX2YCFm8JzVzoN9
HWsc5SbhcfceGJ3Id9IVxIDcdt2AsTURZ8oIo3EIjezgfj3vJoPD6YkHQj+/4hB0
IsjzC7gr1X/6tguYuJPb9GLLJ2twD+aVmLibaDj4hKFSysot0b5Qkp059QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEJaMbOZbTRUaVU0SegKXR1Ag1jMB8GA1UdIwQY
MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt
OTA5MWNkNzNkMzhjLzEvb1Fsb3hzNWx0TkZScFZUUko2QXBkSFVDRFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj
LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUPZwMA0G
CSqGSIb3DQEBCwUAA4IBAQAFKHBiMbgz4zu5VgRLkfFel6waW1SLI2HOr9HM6E5w
mDzh4EE3LQhTFdrIGigehs3qPbFGQT8K168YW+OMpA21QrGMPD1Tt9d7etkIBqd2
BO3OQf9IIk+dTSp4/WUZ5HOZIyNPzuD8IcM3s8wdOdACAIJxvdbf2vaAL/UxkZEZ
HXbLaqiTDtBxBov9MVwG7/h+TyB9r8EARIu+t0YSQqmOvhXLliMP8bn42cRjsk5J
TYDvVr77P02tKs+YzwhR1QTXevqmFH1K/h8rSiFI03+KE4GSxc2twT2sXNsv+0O2
1UufFlMjbhQ/QDZg9hWVSsDAKWif7AzatO11/8M7CqFX
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:27:34 2025 by rpki-client