Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/d6W4VLdv2ulR6TRxSDERAsWvbV4.roa
File: d6W4VLdv2ulR6TRxSDERAsWvbV4.roa (raw, json)
Hash identifier: 5ycWHWiP7/w2iHVxPognGMAF0A9bzC8S1edHZzidocw=
Subject key identifier: 77:A5:B8:54:B7:6F:DA:E9:51:E9:34:71:48:31:11:02:C5:AF:6D:5E
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 018E485839A3CA7CBEED04E11DF2155DF488
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/d6W4VLdv2ulR6TRxSDERAsWvbV4.roa
Signing time: Sat 16 Mar 2024 17:38:45 +0000
ROA not before: Sat 16 Mar 2024 17:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215633
IP address blocks: 80.75.213.0/24 maxlen: 24
2a09:2b80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Mar 2024 09:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:58:39:a3:ca:7c:be:ed:04:e1:1d:f2:15:5d:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 16 17:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77a5b854b76fdae951e9347148311102c5af6d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:60:6e:d9:90:63:d1:58:50:72:cf:53:d9:
fc:ac:00:a5:bf:45:0e:2a:89:02:4b:a0:d6:25:69:
01:54:51:c7:e6:bd:4b:6e:b5:56:e3:82:87:31:24:
66:87:71:99:b9:2d:cf:7b:b3:d0:bb:d8:78:7e:b4:
13:c4:a7:f8:04:61:f5:db:f7:04:7c:f4:7f:92:f8:
09:da:9c:ad:25:83:6b:eb:d5:68:55:22:e5:c5:42:
0e:3e:bb:fc:82:8b:f0:79:f7:ce:17:b0:3b:eb:63:
49:70:be:70:bb:be:ee:60:d2:5b:60:f1:1a:f5:1f:
ae:d6:09:7f:57:70:a0:db:32:7f:50:13:3c:ca:a7:
a2:10:9d:23:9f:7c:07:18:b5:7e:7c:90:1d:68:44:
81:c1:50:b9:23:42:46:3c:2f:dd:9e:c8:7e:56:de:
67:25:2f:2a:c8:cc:24:1e:77:d3:e0:99:d1:3b:65:
b9:f1:d9:57:01:bd:e1:14:1b:43:6a:6b:1a:44:2f:
07:a4:20:e2:13:c6:ae:0f:7e:02:d6:99:cf:4b:85:
8a:7a:c2:0a:67:a8:8f:92:b1:2b:7c:53:86:e7:2a:
a2:3c:10:07:60:51:eb:c5:bc:1c:41:5c:09:84:d4:
78:fd:5e:7d:54:ab:33:c3:bf:46:e7:07:8c:05:8b:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:B8:54:B7:6F:DA:E9:51:E9:34:71:48:31:11:02:C5:AF:6D:5E
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/d6W4VLdv2ulR6TRxSDERAsWvbV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
IPv6:
2a09:2b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:fd:f6:2b:c5:d0:ad:b6:df:cc:e2:15:1c:35:ef:a1:f9:cf:
b1:6f:86:61:5b:f6:45:06:f8:7f:c0:38:3d:72:f2:cd:c9:f9:
81:b6:60:3b:1e:94:02:b1:06:b0:6b:7c:c3:01:a6:7e:a2:80:
9c:77:33:5b:aa:4b:60:6e:b1:16:49:9d:7e:22:2f:e3:8d:53:
fc:bf:d8:48:4c:2e:81:65:8a:a1:4b:64:3d:13:e8:e0:63:76:
4f:8c:e1:47:c5:ee:a4:09:c3:61:b9:75:91:7f:e4:df:b5:15:
8d:d4:c6:13:19:b0:ea:ca:5d:3f:fb:75:cc:f8:7f:94:2b:f5:
43:4d:e6:c2:c4:de:59:1e:53:bf:da:8a:3b:be:b0:84:94:af:
08:3b:78:79:94:d9:17:f0:46:11:89:f2:67:0a:e9:35:60:99:
7d:2d:91:31:ab:1c:30:73:4f:75:e5:c1:4a:37:49:2e:86:0e:
d3:cf:48:cd:63:70:9e:bb:5c:86:0a:91:a8:bd:1d:ac:06:ab:
e3:c7:2a:d7:04:d8:50:83:56:12:98:47:39:4a:c3:f6:5f:18:
4d:3e:2f:4f:ba:f7:5f:3f:6b:43:1a:e7:f7:ae:1c:6e:bf:43:
ec:7b:b1:b4:5a:c8:1f:e7:47:2a:3e:47:ac:92:2a:71:de:65:
8a:20:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:17 2024 by rpki-client on console-fra.rpki-client.org