Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/faVER0OejA1XnxVFwMnu-IPoLOI.roa
File: faVER0OejA1XnxVFwMnu-IPoLOI.roa (raw, json)
Hash identifier: R7O/Qc6QMbcNjgMttyqK17MMAO406cS2sHM2+Itqq8M=
Subject key identifier: 7D:A5:44:47:43:9E:8C:0D:57:9F:15:45:C0:C9:EE:F8:83:E8:2C:E2
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 018E995C9405B9B247AE03BAE49F35C922F2
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/faVER0OejA1XnxVFwMnu-IPoLOI.roa
Signing time: Mon 01 Apr 2024 11:12:44 +0000
ROA not before: Mon 01 Apr 2024 11:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215724
IP address blocks: 80.73.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 17:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:5c:94:05:b9:b2:47:ae:03:ba:e4:9f:35:c9:22:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Apr 1 11:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7da54447439e8c0d579f1545c0c9eef883e82ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:bc:6f:d0:83:ac:1b:4a:23:9b:58:bc:a8:
03:7c:cd:9d:c0:51:ce:c1:5e:22:77:f0:c0:68:56:
e6:e6:dd:b4:f5:69:61:42:0a:78:d6:b5:fe:05:23:
48:64:4c:f9:42:1a:b4:c4:61:f8:7e:8d:a2:e5:46:
a8:55:ef:04:db:10:93:04:3a:5f:55:82:3d:83:f9:
e8:59:da:8a:e5:2d:54:f7:53:38:5f:5f:a7:84:bd:
8c:03:77:9c:18:48:ff:eb:41:5f:0e:2b:2c:9d:2e:
64:d7:f0:2a:c2:9d:d8:60:b8:85:9a:ba:a1:eb:0e:
31:3a:30:ce:26:5c:eb:5f:a3:b1:dd:1e:23:4a:b1:
b8:77:11:f6:d8:3b:c8:ed:59:1f:f7:9e:81:4e:12:
db:fa:13:a0:87:82:3c:56:37:01:2e:b7:b2:05:25:
dc:bc:6b:bd:0a:8e:be:93:04:75:39:ba:70:d5:c3:
d4:f8:20:10:b8:14:46:03:05:80:fd:0d:49:d4:58:
06:78:8a:48:1e:c2:62:f4:be:0a:3d:ab:79:2a:a6:
17:46:bc:05:f7:61:b4:ae:d2:03:df:04:9e:2c:72:
13:0b:57:31:47:3c:da:90:6d:50:32:06:6d:b1:db:
26:88:9d:1d:b9:6c:1b:e8:f9:46:7e:5f:61:33:ac:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:44:47:43:9E:8C:0D:57:9F:15:45:C0:C9:EE:F8:83:E8:2C:E2
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/faVER0OejA1XnxVFwMnu-IPoLOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bc:61:a2:15:69:6c:d3:db:0b:98:13:3a:00:2c:2f:5d:cb:
69:83:69:0a:f5:ff:89:5e:da:0e:f0:c2:17:45:9b:5e:a1:62:
0d:33:81:1e:4d:d2:50:82:f6:c0:d6:b1:31:c4:fa:01:ac:90:
ca:d5:44:4d:46:f5:0b:d8:65:ab:3c:b2:8f:e6:d7:cd:eb:46:
44:e5:d0:c7:cd:a5:e6:c6:99:ff:3e:9e:0c:02:51:53:30:65:
0f:90:da:b2:78:47:b6:34:a4:11:23:b7:48:14:eb:dc:ed:ad:
ac:1d:9b:65:20:de:3f:a5:c9:a5:0f:18:95:04:4a:ee:b5:d2:
96:99:5a:8f:29:7f:b7:0b:51:be:d4:ad:e7:e6:2f:9d:e0:3f:
d6:22:74:d6:0a:6b:cd:10:14:d9:91:a5:50:b0:28:d4:4d:4b:
4a:53:92:b5:11:2c:37:e7:c1:b9:b7:bf:aa:6b:41:a2:6e:5e:
15:7d:34:d7:6e:97:72:df:e4:3a:d2:06:d3:20:a9:5d:64:52:
df:5c:42:1d:f5:2d:2c:60:4b:3f:cd:49:d0:51:de:6b:2e:32:
30:52:27:9d:2b:48:0c:ea:a6:94:f2:e9:14:6a:f5:fa:ac:06:
b7:45:f8:35:09:42:b0:34:d1:a2:f8:f4:40:60:68:b0:2f:84:
f0:4a:d1:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6ZXJQFubJHrgO65J81ySLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz
ZWFiYjkwHhcNMjQwNDAxMTExMjQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGE1NDQ0NzQzOWU4YzBkNTc5ZjE1NDVjMGM5ZWVmODgzZTgyY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfq8b9CDrBtKI5tYvKgDfM2dwFHO
wV4id/DAaFbm5t209WlhQgp41rX+BSNIZEz5Qhq0xGH4fo2i5UaoVe8E2xCTBDpf
VYI9g/noWdqK5S1U91M4X1+nhL2MA3ecGEj/60FfDissnS5k1/Aqwp3YYLiFmrqh
6w4xOjDOJlzrX6Ox3R4jSrG4dxH22DvI7Vkf956BThLb+hOgh4I8VjcBLreyBSXc
vGu9Co6+kwR1Obpw1cPU+CAQuBRGAwWA/Q1J1FgGeIpIHsJi9L4KPat5KqYXRrwF
92G0rtID3wSeLHITC1cxRzzakG1QMgZtsdsmiJ0duWwb6PlGfl9hM6y6qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2lREdDnowNV58VRcDJ7viD6CziMB8GA1UdIwQY
MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt
NjU2YzE2MmZiMjRlLzEvZmFWRVIwT2VqQTFYbnhWRndNbnUtSVBvTE9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl
LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEmHMA0G
CSqGSIb3DQEBCwUAA4IBAQAdvGGiFWls09sLmBM6ACwvXctpg2kK9f+JXtoO8MIX
RZteoWINM4EeTdJQgvbA1rExxPoBrJDK1URNRvUL2GWrPLKP5tfN60ZE5dDHzaXm
xpn/Pp4MAlFTMGUPkNqyeEe2NKQRI7dIFOvc7a2sHZtlIN4/pcmlDxiVBErutdKW
mVqPKX+3C1G+1K3n5i+d4D/WInTWCmvNEBTZkaVQsCjUTUtKU5K1ESw358G5t7+q
a0Gibl4VfTTXbpdy3+Q60gbTIKldZFLfXEId9S0sYEs/zUnQUd5rLjIwUiedK0gM
6qaU8ukUavX6rAa3Rfg1CUKwNNGi+PRAYGiwL4TwStHa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org