Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/qCuUqhDZAIO19DtcCppFqcF21U8.roa
File: qCuUqhDZAIO19DtcCppFqcF21U8.roa (raw, json)
Hash identifier: DlqjA1PGckkkO7bA64YUREWavoMDhQuhz2lsrSsMis0=
Subject key identifier: A8:2B:94:AA:10:D9:00:83:B5:F4:3B:5C:0A:9A:45:A9:C1:76:D5:4F
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 018ED0E70E28F1593DD1F65A2BDD93D8C747
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/qCuUqhDZAIO19DtcCppFqcF21U8.roa
Signing time: Fri 12 Apr 2024 06:03:07 +0000
ROA not before: Fri 12 Apr 2024 06:03:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 80.244.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 17:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d0:e7:0e:28:f1:59:3d:d1:f6:5a:2b:dd:93:d8:c7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Apr 12 06:03:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a82b94aa10d90083b5f43b5c0a9a45a9c176d54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:58:2c:23:fa:16:88:ec:83:f0:00:c8:2a:
70:6c:43:98:d2:29:53:e9:b2:ce:01:41:6c:af:19:
3b:16:df:2c:e1:a8:7b:83:c6:1d:eb:a1:78:5f:a5:
ff:1f:fd:54:a2:f3:88:0d:35:0a:d7:ed:6c:d7:72:
fd:20:14:09:41:89:88:f9:3c:27:44:7a:f2:6e:69:
f4:93:8c:74:69:36:ff:72:dd:b7:76:ab:19:ef:65:
53:a3:86:87:09:ef:e8:30:89:a7:75:92:0d:1e:bd:
8f:39:5f:f4:55:00:37:34:53:f1:85:81:9d:cf:dd:
01:65:55:0c:ec:d1:25:8e:24:9f:d1:87:a7:f9:31:
27:23:33:25:e6:89:22:13:b0:dc:d8:05:e3:93:54:
5f:9e:b8:a9:8f:21:7b:ac:3e:5e:77:e9:13:14:82:
1f:a5:85:af:82:3e:27:0d:c9:51:88:eb:3a:fe:f0:
db:34:93:d7:84:ff:a4:e1:38:e0:cf:e6:7f:ef:c2:
52:da:64:24:e3:46:69:16:cb:5a:94:64:1f:09:45:
44:1c:e9:3a:43:3c:c7:02:fd:6b:e1:b9:09:ad:78:
cb:d8:96:e3:65:63:f2:a7:ba:3e:bd:36:90:09:24:
34:8c:22:51:00:87:94:fe:8b:06:42:15:a1:4e:bb:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2B:94:AA:10:D9:00:83:B5:F4:3B:5C:0A:9A:45:A9:C1:76:D5:4F
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/qCuUqhDZAIO19DtcCppFqcF21U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f0:7d:eb:e9:b4:55:69:3d:26:71:d8:38:25:bb:a9:d7:27:
cf:fc:e7:fc:dd:ce:b1:94:27:71:ce:19:fb:db:1f:8a:65:a1:
23:15:f6:da:f2:df:84:2f:41:38:74:05:55:14:cd:8f:32:91:
1d:c0:19:aa:4e:d1:e7:ed:9e:bb:92:75:c8:6a:96:8c:cf:79:
f8:86:69:17:7d:b9:72:53:e9:eb:5d:06:40:48:a8:3b:9d:96:
0d:27:45:6d:b2:f8:53:fb:07:a2:1a:19:b2:d0:61:b7:42:1c:
fb:53:c1:b8:55:09:af:ef:04:45:47:c0:e3:84:fb:90:08:a1:
1a:ef:4d:51:ac:14:db:f1:73:1c:75:86:95:44:90:5d:1c:55:
f8:74:dc:77:c8:83:66:0f:7a:dc:b3:1b:ab:14:99:4c:8a:26:
41:f5:c0:48:23:43:87:06:97:81:88:8b:04:ff:74:24:f0:c0:
81:ca:5b:69:5d:f6:1c:31:f6:46:69:5f:46:7a:b0:d7:54:ab:
d7:ed:ba:c3:ff:ef:ff:93:10:00:eb:28:9f:31:d9:00:49:ce:
62:c0:5b:83:2f:90:43:32:5c:80:a6:ab:58:34:29:4d:bb:10:
ec:d3:b0:21:9f:3d:1b:f9:9c:9e:0f:95:e3:26:af:98:a1:a3:
ff:cc:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:05:25 2025 by rpki-client