Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/mVJb3snwnaeGcPim25_UKA_qgwQ.roa
File: mVJb3snwnaeGcPim25_UKA_qgwQ.roa (raw, json)
Hash identifier: oSdl72pCgsAX5V8fDKXqbxoGkFSbyyPveeoUVSwdFhw=
Subject key identifier: 99:52:5B:DE:C9:F0:9D:A7:86:70:F8:A6:DB:9F:D4:28:0F:EA:83:04
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 018EC3649456BFBF8765B3E66ADE59E56044
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/mVJb3snwnaeGcPim25_UKA_qgwQ.roa
Signing time: Tue 09 Apr 2024 15:05:32 +0000
ROA not before: Tue 09 Apr 2024 15:05:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215633
IP address blocks: 80.75.213.0/24 maxlen: 24
2a09:2b80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Apr 2024 11:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:64:94:56:bf:bf:87:65:b3:e6:6a:de:59:e5:60:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Apr 9 15:05:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99525bdec9f09da78670f8a6db9fd4280fea8304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:13:c1:fa:90:5b:c5:2d:78:eb:59:15:9d:
45:3a:d8:71:82:21:f3:26:ac:cc:49:63:5c:da:27:
9d:1a:32:18:d5:d6:6a:8e:81:19:ec:ac:91:47:88:
da:bb:ad:b1:b9:98:61:30:f4:47:3b:2b:a2:1c:a8:
b9:36:90:d7:c2:d9:4b:71:78:89:04:11:4d:3f:25:
78:70:18:27:37:59:d2:32:fb:c6:69:9d:07:90:3b:
df:f5:70:8d:1f:55:1a:07:90:93:6b:28:3d:5f:a9:
b3:30:0b:90:be:2b:49:b7:56:20:78:03:88:33:dc:
b8:0e:2b:b4:a2:ba:90:8d:32:03:de:05:01:56:16:
55:44:6e:cb:e0:90:67:2c:19:2c:b6:94:6e:53:2e:
06:c7:3c:da:56:85:d1:a4:64:51:d8:b8:65:72:df:
4a:56:9b:12:57:04:e4:0e:12:4f:64:26:61:6d:d5:
11:2a:1c:31:33:ed:28:45:4b:ab:c6:30:e6:42:23:
d8:1b:75:e3:89:76:5d:fa:0e:8b:40:7b:52:76:49:
07:6f:d6:a1:1d:03:1d:4e:e6:15:7f:e6:02:24:18:
41:9a:7d:c0:6c:df:50:8a:2e:0b:c1:43:6c:30:e2:
47:9b:8b:5a:d6:a1:79:7e:47:c4:b6:75:b9:18:6a:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:5B:DE:C9:F0:9D:A7:86:70:F8:A6:DB:9F:D4:28:0F:EA:83:04
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/mVJb3snwnaeGcPim25_UKA_qgwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
IPv6:
2a09:2b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
84:77:b4:2d:cf:8d:2d:88:c1:65:24:40:d0:63:f0:94:99:53:
68:09:df:c1:61:33:ef:2a:d3:57:d5:4e:c8:94:28:ef:d0:26:
60:c3:0a:e5:a2:0c:54:0f:0b:1b:cb:31:c3:e7:c6:f3:0f:fd:
d2:aa:b5:7b:90:0b:da:69:84:81:19:bc:ee:41:3f:42:fa:39:
fb:ae:af:00:bc:2f:77:55:12:74:d9:ae:e2:57:7c:f4:1d:02:
40:7d:5e:a4:7d:44:6d:d5:69:53:d3:27:1c:ee:1e:ad:54:c0:
32:88:9b:eb:37:14:77:a2:a0:5d:d3:8c:7d:ef:61:38:e4:a1:
21:97:a6:44:39:ce:84:a8:31:93:4f:c4:ca:eb:14:6d:24:d9:
4a:3a:19:ea:0f:72:62:95:84:b4:a6:84:3f:98:ad:8f:40:b5:
83:f6:39:9c:83:b3:80:80:59:06:47:16:f2:01:71:c4:27:0a:
ca:7e:d0:07:99:89:fb:a7:f0:66:cf:09:f8:be:79:34:2c:89:
f7:5c:f6:23:4d:8f:ba:60:50:04:55:b2:00:0a:29:08:fb:de:
ae:f3:88:42:8c:1e:f4:de:0b:22:87:fd:8d:88:ff:bb:1d:a2:
20:52:95:e3:c0:43:01:10:c4:fd:9b:5c:6f:3a:de:12:3a:f1:
2d:42:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org