Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/JocQUgLtMgkYw4Azof7ot7O-j0g.roa
File: JocQUgLtMgkYw4Azof7ot7O-j0g.roa (raw, json)
Hash identifier: sHacoEfBLjtJCYZy4mRrDFFnxq1zLiDKSciC8a7kx3g=
Subject key identifier: 26:87:10:52:02:ED:32:09:18:C3:80:33:A1:FE:E8:B7:B3:BE:8F:48
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 018E478B24F4A3D3641C75A2D1C3BD47E87C
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/JocQUgLtMgkYw4Azof7ot7O-j0g.roa
Signing time: Sat 16 Mar 2024 13:54:45 +0000
ROA not before: Sat 16 Mar 2024 13:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57027
IP address blocks: 80.75.213.0/24 maxlen: 24
2a09:2b80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Mar 2024 17:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:47:8b:24:f4:a3:d3:64:1c:75:a2:d1:c3:bd:47:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 16 13:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2687105202ed320918c38033a1fee8b7b3be8f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:a7:1d:5d:9a:ac:da:c3:fe:12:6d:b4:79:
a7:f9:74:31:f4:39:29:81:0c:27:3a:cf:8d:85:07:
99:39:35:68:80:9b:98:fe:88:ad:5c:66:f3:8f:da:
d8:36:86:f0:27:29:81:b6:dd:aa:b1:1c:c9:3e:f0:
d8:d6:74:c1:c3:f9:64:82:9b:02:17:62:af:ed:0b:
f7:80:f1:29:67:f4:f6:6f:70:2c:38:2d:76:c1:f4:
15:92:c0:82:3e:6e:25:7a:5f:3a:fa:bd:c1:5b:3c:
40:c2:b1:fd:31:9e:c7:79:56:7e:2d:74:7e:e2:c9:
d2:b5:35:d3:c4:37:f9:6d:f1:71:b0:04:c5:2b:9b:
d8:2c:87:32:12:77:3a:89:e3:47:27:65:f3:a0:04:
5a:10:1f:aa:7b:53:e3:b7:26:0b:0d:86:8f:b8:c7:
41:39:c6:d5:3b:3b:1f:0e:62:c0:17:e1:e7:8b:07:
6e:d7:13:9f:df:16:e8:a0:d7:90:f4:c3:74:dc:c3:
f7:7e:27:ad:4c:8e:29:6a:ba:21:1e:91:a0:88:ac:
9d:74:75:70:db:ae:99:a5:35:99:3d:e7:f0:85:71:
14:61:aa:3d:04:9a:b5:ca:15:db:5c:dc:5c:01:ab:
21:5f:dd:21:8c:30:08:2f:ec:8e:3c:a2:ea:a5:3b:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:10:52:02:ED:32:09:18:C3:80:33:A1:FE:E8:B7:B3:BE:8F:48
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/JocQUgLtMgkYw4Azof7ot7O-j0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
IPv6:
2a09:2b80:2::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b6:90:64:2c:9b:2f:8f:c4:3e:0f:7e:5c:d8:d9:d2:da:99:
94:92:e5:fe:7c:70:d2:d0:57:df:5b:67:3f:18:d9:18:58:2a:
22:3e:23:b6:45:ea:45:21:13:71:fb:c1:45:bb:b4:fe:36:5b:
31:1b:31:59:f2:85:e5:7d:91:07:0d:08:35:d1:43:bc:10:1d:
be:4b:e1:85:39:12:7a:7c:3d:0c:be:f8:43:a7:dc:c3:49:df:
a7:fe:69:d0:1c:22:81:70:2b:86:44:81:f6:75:73:0b:ad:47:
a0:59:e7:71:3f:0d:83:43:3d:f5:cd:89:55:36:5c:8f:54:a0:
45:b8:7c:ee:06:b5:28:e2:df:eb:cc:e8:25:98:33:2f:8e:2b:
01:4a:04:a0:3c:16:a8:4e:ec:c9:10:44:2a:e4:a6:e5:76:1a:
8e:4b:83:93:ff:9e:17:23:5a:c6:1b:11:23:c1:75:03:e5:24:
37:49:f6:17:9c:fd:0c:90:00:ad:24:03:11:81:45:b5:0e:b9:
98:c4:49:d9:43:14:db:f7:12:e2:06:a2:ee:57:c3:84:ba:bf:
60:ca:2a:ff:db:7d:90:e0:af:f1:a0:7b:7f:8e:19:e2:40:08:
48:d2:8f:ba:9c:71:6a:e1:02:fc:69:78:0f:51:d5:81:7b:ee:
ed:54:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:04:59 2025 by rpki-client