Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/JTdM5-WTn1kYgicQMGTmyd5e0tY.roa
File: JTdM5-WTn1kYgicQMGTmyd5e0tY.roa (raw, json)
Hash identifier: AoHFhQmAIOepjy8Zn/I2cTI3TK69xe4BPkXtUevIJFQ=
Subject key identifier: 25:37:4C:E7:E5:93:9F:59:18:82:27:10:30:64:E6:C9:DE:5E:D2:D6
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 01856DC1EC6215DED8C8D9355D5457209A2E
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/JTdM5-WTn1kYgicQMGTmyd5e0tY.roa
Signing time: Sun 01 Jan 2023 14:35:03 +0000
ROA not before: Sun 01 Jan 2023 14:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57822
IP address blocks: 80.72.209.0/24 maxlen: 24
80.72.208.0/24 maxlen: 24
80.72.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ec:62:15:de:d8:c8:d9:35:5d:54:57:20:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Jan 1 14:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25374ce7e5939f59188227103064e6c9de5ed2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1b:da:5c:a5:27:a1:ee:a0:0c:0a:07:6d:97:
67:07:07:99:26:3c:6b:59:eb:4a:99:11:fc:bc:09:
43:29:5b:89:fd:fd:af:41:bb:00:33:84:61:20:ee:
1b:9e:a8:7c:cd:2e:e4:70:f8:0f:94:5c:74:72:20:
4f:c7:8b:da:b5:7b:13:d3:b9:07:f1:49:68:0e:ff:
25:ee:e2:1e:3e:a5:da:49:c9:86:ad:ed:84:0d:2b:
55:0c:89:ba:67:81:cd:7e:e3:62:b1:d9:31:de:9b:
d5:8f:99:a0:69:b2:2a:fe:db:22:90:35:e0:02:82:
11:28:61:d6:9e:56:0a:d9:24:17:38:fb:17:bc:d9:
15:fb:97:14:49:d9:10:5a:4d:94:2f:9b:be:e7:0f:
d1:34:5f:45:45:70:ff:7b:4c:08:2d:c1:1f:cb:a1:
b4:7d:1c:2a:3d:e8:e7:2a:f8:8e:cc:1e:0e:8b:d5:
e4:d4:a9:07:ed:e5:6c:18:d0:f5:0d:83:74:02:ab:
9d:67:c4:e0:c4:d8:60:49:6d:7e:86:76:e7:c9:60:
41:d5:6d:94:fe:00:6c:8e:7b:6c:47:2b:43:56:fb:
e5:8a:02:71:4f:81:e7:64:07:28:f0:a7:6c:4c:22:
8f:ae:c3:ae:40:e0:8b:2e:ee:91:ba:f9:c7:55:9e:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:4C:E7:E5:93:9F:59:18:82:27:10:30:64:E6:C9:DE:5E:D2:D6
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/JTdM5-WTn1kYgicQMGTmyd5e0tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.208.0/23
80.72.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:50:70:d4:e6:af:50:92:00:ad:e4:b7:9d:2b:a5:58:3a:9f:
93:fe:9d:44:ae:e6:2b:1d:fe:44:1c:a2:8b:6d:d0:9b:df:e1:
53:d1:eb:69:d0:81:c8:a1:79:66:49:f8:81:bf:85:40:13:16:
5b:ab:9f:26:04:dc:a0:43:ef:ab:45:40:53:77:9d:67:de:3c:
80:c9:0a:7c:b0:10:da:1f:12:8d:b1:1e:3a:ec:af:df:22:dd:
b6:20:ec:16:28:63:10:31:89:7d:89:1d:59:13:93:86:7a:15:
79:10:44:6b:fc:59:76:87:e1:a7:f1:c0:30:4a:23:c7:c6:79:
6c:2e:4a:e1:21:38:1b:64:34:30:eb:0d:51:2e:50:40:bf:51:
ee:c0:33:cc:8c:4e:e1:12:1c:e8:9b:fd:76:8e:fb:e1:a6:ca:
f3:1a:59:0e:a8:97:5e:c6:46:37:df:20:7f:89:ba:22:68:70:
59:9b:4e:0b:1c:36:80:08:30:d5:4d:b6:09:28:f3:f7:91:9e:
df:60:8d:66:fb:2c:f1:92:de:9e:f1:ee:9d:28:92:b1:d4:bb:
4c:d5:bb:e6:2b:4f:83:3c:7c:0c:1d:e4:c6:6c:a8:14:c6:c8:
b3:cc:78:48:e0:e8:37:53:c3:b1:91:3d:97:a8:7b:a1:1c:ae:
28:2d:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org