Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/RjascPD0zPAwUbwk3QjD1SleLBw.roa
File: RjascPD0zPAwUbwk3QjD1SleLBw.roa (raw, json)
Hash identifier: X8HhjVonSal3MfpUQqbKhJFGCqJte+fIILhotZZr7cc=
Subject key identifier: 46:36:AC:70:F0:F4:CC:F0:30:51:BC:24:DD:08:C3:D5:29:5E:2C:1C
Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial: 018CC5DC4852A49B24B3952C93331196CF84
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/RjascPD0zPAwUbwk3QjD1SleLBw.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205368
IP address blocks: 80.86.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:48:52:a4:9b:24:b3:95:2c:93:33:11:96:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4636ac70f0f4ccf03051bc24dd08c3d5295e2c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:a0:fc:6f:9f:5c:8d:ec:9d:da:03:ac:a8:
d4:9e:10:fc:fe:aa:04:65:e2:e0:62:17:42:de:4c:
1b:63:f2:6a:5a:57:d8:71:6a:ef:0b:d7:89:76:c1:
3a:cd:d1:02:8b:ff:73:4c:35:5a:42:da:5d:89:60:
49:16:95:6e:09:a4:45:1c:44:29:f5:aa:a1:71:57:
d5:c4:45:1a:6e:f6:0c:69:80:f5:68:07:6a:58:82:
a7:33:43:58:a4:47:33:cf:92:ef:e7:8f:85:19:48:
6a:7c:09:17:ae:60:ab:1f:a8:39:88:41:08:c5:66:
58:41:79:1b:33:2f:48:6e:dd:f8:88:c9:5f:c4:e6:
cf:20:c8:27:da:7f:77:29:e7:91:6c:ba:ca:f6:67:
35:7c:a4:9e:04:ec:1c:57:53:91:6d:66:69:9a:0b:
5e:95:ba:f1:14:a2:c1:4c:a6:c8:2b:1b:37:dc:06:
56:89:92:1b:c2:19:e9:53:ba:39:17:31:ad:76:b2:
d7:ee:57:55:3f:d3:ad:53:00:19:2f:01:81:0d:3e:
21:c0:a0:fd:56:cc:9b:05:0b:2e:8c:78:95:b7:86:
4b:b3:25:a2:9e:65:86:24:aa:45:e0:49:dd:f7:54:
92:ca:22:de:f8:b6:c4:b8:c6:5b:a2:6d:a0:7e:78:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:AC:70:F0:F4:CC:F0:30:51:BC:24:DD:08:C3:D5:29:5E:2C:1C
X509v3 Authority Key Identifier:
keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/RjascPD0zPAwUbwk3QjD1SleLBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.229.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f5:42:cf:79:35:df:3d:4a:20:43:2f:07:1b:3f:a2:cb:b5:
9e:a0:10:6c:12:b8:51:9e:27:a3:5f:73:a6:10:38:6f:c5:bc:
b4:98:32:26:60:19:19:45:6c:40:2f:b2:94:43:a5:83:a6:d0:
84:b3:02:d9:52:28:87:74:e0:b2:af:af:7c:9a:fa:c0:36:43:
21:06:1b:a2:12:3b:4a:48:66:c3:69:eb:47:44:9b:d9:6d:c2:
3e:c4:92:77:bd:4c:46:a3:ad:b2:fd:30:2c:e5:53:98:dd:4c:
c1:67:d4:e9:27:3e:10:57:45:bb:ad:09:ce:51:da:9c:1f:46:
85:1b:8e:08:a1:2d:ba:b9:3e:b4:05:f1:1c:cf:53:2e:49:d0:
69:0c:78:5b:e1:cc:ca:8e:a2:1f:f4:1a:29:03:c3:3d:a0:15:
ff:71:52:a5:8c:18:2a:a1:fb:ce:17:63:cc:64:82:7f:d3:e0:
40:4c:6d:c6:b3:7e:30:f9:b1:ad:14:f8:a9:0a:50:81:7c:95:
4b:0d:d6:bd:7a:81:34:51:be:85:77:2c:d0:c5:90:7c:d9:43:
6f:58:d0:c1:9a:58:cd:26:d8:fd:54:41:b5:dc:98:dc:16:0e:
6e:8d:69:f9:56:51:d9:c2:1c:58:7e:81:68:fc:d6:96:a7:c7:
47:7a:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:32 2025 by rpki-client