Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/fG7ue9vcJeijWMqcm_1p7taXdRk.roa
File: fG7ue9vcJeijWMqcm_1p7taXdRk.roa (raw, json)
Hash identifier: V1jRedJ5QyJZF9+rVlM184nt30aNQqQwA3fd9sSplm8=
Subject key identifier: 7C:6E:EE:7B:DB:DC:25:E8:A3:58:CA:9C:9B:FD:69:EE:D6:97:75:19
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 01942827D70E05F9CD45488C773DA5EE56EE
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/fG7ue9vcJeijWMqcm_1p7taXdRk.roa
Signing time: Thu 02 Jan 2025 17:54:47 +0000
ROA not before: Thu 02 Jan 2025 17:54:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208555
IP address blocks: 80.75.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 12:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d7:0e:05:f9:cd:45:48:8c:77:3d:a5:ee:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Jan 2 17:54:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c6eee7bdbdc25e8a358ca9c9bfd69eed6977519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:58:c7:15:9c:95:3c:7d:4c:47:a6:16:f6:
45:14:6a:7d:43:96:39:01:2e:07:38:4e:b3:f7:3f:
94:64:1b:8b:f0:f2:94:c1:cd:cc:78:1c:57:44:f3:
fc:1b:e2:d0:0e:87:a9:5f:f4:d1:57:76:20:16:ca:
91:22:e6:1c:a3:89:1a:24:91:a2:9a:46:ef:44:74:
29:33:e1:ef:d0:7a:d7:cb:3a:fb:c4:13:5a:6b:a0:
62:aa:09:cc:7f:27:b5:93:60:1d:22:09:94:dd:d0:
2f:fa:ec:f9:3a:f0:c9:3e:00:80:f2:0f:1e:57:4f:
b0:36:cc:2e:fc:d4:23:16:22:d6:51:19:6b:af:50:
b5:4f:dd:75:8a:74:32:7f:f1:b5:49:cd:19:75:ce:
a3:1e:b6:19:f8:4e:ce:39:2c:01:56:6e:83:19:24:
aa:d2:fb:bd:26:28:27:fb:44:7d:26:48:6f:8a:c0:
9f:be:91:0d:a4:72:35:57:66:d0:66:7b:d2:a1:38:
45:cf:a3:54:35:75:5e:16:9d:84:e3:19:6e:b8:da:
07:75:3e:e2:6c:20:69:b3:e6:31:de:fe:86:1f:c7:
3d:a8:25:9d:fe:3c:60:73:24:d0:3f:c2:aa:45:43:
69:32:8b:2e:c0:3f:92:41:26:49:9d:d9:95:a6:27:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6E:EE:7B:DB:DC:25:E8:A3:58:CA:9C:9B:FD:69:EE:D6:97:75:19
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/fG7ue9vcJeijWMqcm_1p7taXdRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a9:e2:a8:9e:3a:0d:a2:68:a3:99:f3:32:2a:4f:6b:41:a7:
1c:9a:1a:ab:37:38:0e:43:63:eb:d8:23:9a:ba:57:96:f9:e4:
24:f4:63:82:2b:c8:21:98:be:f3:4e:62:da:0d:61:95:92:04:
fc:da:37:83:08:71:ab:a3:6d:20:67:e8:6b:be:51:97:23:7a:
d1:39:c0:23:41:ec:e0:42:01:d9:d8:20:f5:52:97:99:9b:db:
cd:7b:00:c1:1d:f9:4f:b7:62:a6:a3:44:9f:e4:35:11:ef:9f:
2b:08:70:64:1d:02:12:73:99:0f:d3:93:83:30:26:4f:ee:d0:
58:a8:6f:4a:86:49:56:a7:b5:e4:30:6d:c5:2f:1c:cf:ef:42:
3a:77:25:d6:17:b0:c0:ac:b4:05:2a:9c:e4:37:97:5f:08:d1:
ad:e8:c6:b2:ee:4d:c2:98:d8:59:ce:7b:28:13:6d:04:2d:95:
bc:bf:2e:13:84:7f:02:3c:43:da:9e:37:02:9c:ca:c5:29:5a:
78:4f:c9:b9:4d:85:df:98:49:94:3a:dc:10:22:de:65:d6:d9:
1a:f6:9a:0e:de:ec:7f:24:90:c3:3d:73:03:09:84:d8:60:ea:
8d:3b:26:e6:49:28:9b:ad:79:e7:60:c0:cf:5f:3d:99:e2:99:
c7:46:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:20 2025 by rpki-client