Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/axQveolTgvV1Fx-zl7fM55Q_eXo.roa
File: axQveolTgvV1Fx-zl7fM55Q_eXo.roa (raw, json)
Hash identifier: i43xpNSozSNv/ozbWheBfMibWaLhTuGXi7wG351wZhY=
Subject key identifier: 6B:14:2F:7A:89:53:82:F5:75:17:1F:B3:97:B7:CC:E7:94:3F:79:7A
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 01856F94BE577F3F77C63C161AA4CCDC509C
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/axQveolTgvV1Fx-zl7fM55Q_eXo.roa
Signing time: Sun 01 Jan 2023 23:04:57 +0000
ROA not before: Sun 01 Jan 2023 23:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2792
IP address blocks: 80.159.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:be:57:7f:3f:77:c6:3c:16:1a:a4:cc:dc:50:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 23:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b142f7a895382f575171fb397b7cce7943f797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:a3:6d:6d:33:1e:de:c5:be:76:90:8d:3c:
12:94:72:6e:98:ce:93:ec:21:5e:fe:2c:7d:8a:9d:
7f:88:e5:7e:47:47:13:b8:6e:c3:c3:a3:4d:2d:6b:
e5:c0:dd:4b:79:e2:25:8c:5a:6e:cf:ac:97:f7:0e:
bd:97:00:d7:10:19:bf:05:41:03:27:8b:55:5b:22:
3e:4b:87:5f:bf:b0:23:7d:da:0b:4c:42:ce:97:b2:
d3:ec:fe:fc:92:9e:86:a9:bc:7a:42:5f:a7:ad:58:
42:fe:2a:8f:15:f4:ed:b0:9f:6d:2d:11:3c:a1:ea:
e3:02:1c:2f:66:07:ab:3e:c1:15:c6:fe:cf:15:e9:
42:78:f8:d9:fd:02:ba:37:9b:f9:fa:03:a2:d7:0a:
94:43:70:14:14:75:d8:18:b8:90:61:6a:bf:00:53:
8b:97:af:94:e1:65:3d:e4:4d:c6:ae:1d:11:d0:9b:
b1:41:7d:b6:da:ea:e5:b7:99:01:98:ef:18:a4:a2:
7e:86:f5:49:4f:1a:c6:96:1d:5c:32:07:89:ea:cf:
24:81:fe:90:5f:9b:14:d8:b4:ed:87:28:a5:41:43:
1b:04:48:69:d1:54:30:d4:9c:67:a6:8f:c9:11:e3:
bf:d7:3c:da:2a:52:01:a9:35:e7:5a:47:64:d1:96:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:2F:7A:89:53:82:F5:75:17:1F:B3:97:B7:CC:E7:94:3F:79:7A
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/axQveolTgvV1Fx-zl7fM55Q_eXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:cf:63:99:73:69:67:d5:93:b6:4f:94:96:f3:bd:80:90:ff:
ed:e8:46:4e:87:71:45:24:a9:18:af:ee:41:6d:3d:3f:55:2e:
37:fa:e8:48:1c:b1:af:9d:d7:98:c0:6c:93:1d:34:74:1a:aa:
13:93:28:b6:66:88:16:fa:27:d8:52:00:74:09:07:0d:3d:d6:
60:dc:9b:63:06:8a:2a:8f:e4:72:e3:30:56:47:1a:52:b8:bf:
33:32:cd:82:f7:fa:4f:9a:8e:4e:c4:83:76:a0:0e:36:65:78:
5e:70:75:d1:eb:a5:d1:f7:6a:93:7f:37:fe:68:32:c2:23:46:
96:2a:88:e1:ff:fa:49:94:e0:92:7a:9e:d1:02:11:9a:b9:04:
f8:81:0b:6f:6b:c2:50:f9:b9:3d:ea:fc:c2:49:6e:0d:f3:ec:
0e:c2:27:79:0e:4d:40:27:1e:92:79:88:c2:70:b1:ee:d9:eb:
14:1d:15:27:80:dd:39:53:6e:14:3b:71:66:30:87:0f:24:bd:
25:81:9c:54:3a:c9:58:ba:f7:09:ac:79:f0:03:be:2b:23:54:
65:6f:c1:a4:cb:dc:ae:52:3e:5b:dc:07:d6:da:f2:39:1c:d1:
d9:3a:38:0e:5c:b2:fe:bb:51:7c:10:54:04:69:a7:e2:25:ac:
d1:d6:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:27 2024 by rpki-client on console-fra.rpki-client.org