Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/_4RKcK8eIZVWvA4pA45bntSj7Yg.roa
File: _4RKcK8eIZVWvA4pA45bntSj7Yg.roa (raw, json)
Hash identifier: phuUF3qBtbZVZ7rqfn1vQx67Lr7zt8bOm1gGAtRqT2I=
Subject key identifier: FF:84:4A:70:AF:1E:21:95:56:BC:0E:29:03:8E:5B:9E:D4:A3:ED:88
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 01856F94BC98D0E77524B5A7CE754FE78B5C
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/_4RKcK8eIZVWvA4pA45bntSj7Yg.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 80.128.0.0/11 maxlen: 11
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:bc:98:d0:e7:75:24:b5:a7:ce:75:4f:e7:8b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff844a70af1e219556bc0e29038e5b9ed4a3ed88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:66:a3:74:7b:fe:22:b8:14:ff:f0:39:69:
0f:80:cd:b7:48:62:27:85:7c:13:a1:96:20:8e:d7:
ab:ba:66:ef:a0:72:67:69:7c:8f:94:de:aa:8d:56:
7c:0e:22:99:29:67:16:d8:86:e6:be:c2:7d:9d:ff:
96:b4:b8:c9:e1:ca:61:00:5a:53:17:67:d0:ac:5e:
80:f9:05:8e:30:f2:d9:e3:bd:d6:03:c4:92:aa:88:
97:b3:46:d4:8b:e6:63:61:f2:04:51:7d:3d:0f:e3:
55:a8:9b:6e:61:8d:8c:27:fe:17:9b:22:12:28:e6:
58:0e:f5:7f:5a:2a:7e:78:d5:af:37:b3:f4:e3:54:
91:a5:56:91:ae:da:53:03:43:55:b8:f0:7a:91:9a:
27:f8:5f:e3:07:43:60:2c:b6:75:f9:43:10:2f:01:
cb:e6:23:72:3d:ad:1a:65:6b:59:56:85:94:1b:63:
fa:67:86:41:0c:40:8a:5e:c3:42:bc:40:af:fe:f2:
59:0b:20:59:e9:e2:df:cd:f5:5c:ff:19:43:b2:ed:
14:9a:52:5f:7a:56:0f:9e:bc:e4:7d:e1:37:30:d1:
1b:ec:25:8a:0a:5b:5a:7b:0f:84:61:2b:56:76:fe:
76:fa:c4:1f:a2:ea:e7:ed:fd:8a:f2:c3:94:b7:06:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:4A:70:AF:1E:21:95:56:BC:0E:29:03:8E:5B:9E:D4:A3:ED:88
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/_4RKcK8eIZVWvA4pA45bntSj7Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.128.0.0/11
Signature Algorithm: sha256WithRSAEncryption
27:b1:3f:2a:1a:b3:82:5e:30:56:4d:1d:8d:11:26:14:bb:97:
52:22:61:bb:29:9c:26:ba:f0:38:8a:67:6a:5d:7f:e3:e1:4c:
04:96:1f:ec:66:02:26:c6:cb:6e:8d:fc:59:99:7c:13:93:6c:
78:2f:83:57:e1:a2:9e:a7:ff:46:41:0b:11:79:fe:a9:80:cb:
c5:31:0c:d4:fd:4c:30:ee:4b:7c:2a:b5:68:30:c2:3c:6d:80:
05:d0:a3:39:50:03:e3:b8:d7:05:db:d2:5a:d2:94:cc:0d:da:
80:1f:be:22:33:7a:9e:8b:7a:34:4a:37:d0:d5:5a:13:24:4b:
df:ba:3a:fc:c9:05:40:8d:c2:30:ea:31:1e:60:af:5a:48:ad:
81:e1:ba:49:c4:da:b1:89:e0:c1:83:62:50:4f:96:54:1b:6f:
59:86:29:fd:9b:30:61:bf:10:74:a6:8f:4f:2d:e6:d1:cb:78:
ef:0b:1f:40:03:a7:54:3e:c3:c9:6d:32:62:92:6d:45:86:45:
5b:0d:e9:70:e8:74:39:e6:c7:e1:44:42:5d:6f:b9:d5:97:95:
3a:21:ca:9a:b0:82:73:f8:11:d0:ca:d5:db:a2:f1:7f:94:49:
90:3b:fb:8c:1e:2f:b9:b0:ff:ca:13:db:e7:f2:88:d6:90:e9:
1f:b9:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:12 2024 by rpki-client on console-fra.rpki-client.org