Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/NIXzuft1kvxlEOezrLT_KbnZyVQ.roa
File: NIXzuft1kvxlEOezrLT_KbnZyVQ.roa (raw, json)
Hash identifier: dhZ9jSRdBVJE7FgEn0fYM3mm/HGzwLBvu3ZamX+FHUU=
Subject key identifier: 34:85:F3:B9:FB:75:92:FC:65:10:E7:B3:AC:B4:FF:29:B9:D9:C9:54
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 019381D303177B4FC6144023E17D6AD8EA8E
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/NIXzuft1kvxlEOezrLT_KbnZyVQ.roa
Signing time: Sun 01 Dec 2024 10:45:09 +0000
ROA not before: Sun 01 Dec 2024 10:45:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19551
IP address blocks: 80.244.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:81:d3:03:17:7b:4f:c6:14:40:23:e1:7d:6a:d8:ea:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Dec 1 10:45:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3485f3b9fb7592fc6510e7b3acb4ff29b9d9c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:e0:6a:31:b9:dc:88:13:c1:23:18:e0:bd:
2b:c0:52:6e:5e:e6:b8:61:91:e0:2d:b4:79:ee:ce:
36:d3:3a:8c:b0:22:4d:50:a4:fc:30:96:20:45:5d:
70:49:6b:24:cf:5c:2d:30:8a:a0:34:02:79:5b:37:
f7:a3:44:f5:64:3d:2c:25:e4:59:e4:0c:04:b8:76:
43:8e:d6:ef:2c:49:72:b0:c3:8d:16:e0:ae:41:ec:
31:2f:d9:86:a6:a1:c5:c8:6f:fa:32:02:8f:83:1d:
2f:a4:32:77:68:9c:d3:7f:0e:81:a5:5b:a1:66:6a:
05:ea:31:42:25:3a:fc:11:ff:ef:23:d8:cf:02:88:
4c:9d:12:0d:59:e7:63:d0:bf:e6:c1:f7:16:ee:a4:
4f:1a:95:63:14:06:c0:4d:dc:49:c5:34:3f:22:1f:
ac:1c:f5:ad:8d:1f:e0:d5:61:d8:c3:39:35:bf:a2:
2d:64:d6:c7:e3:3e:bf:0d:d5:a9:d3:11:5f:a3:37:
e4:85:22:32:f9:84:f3:2e:9b:1c:a2:80:04:3f:bf:
85:92:33:73:dd:e4:12:f2:50:cd:27:04:e5:79:6c:
ed:0e:5b:cd:30:21:d2:7b:04:5d:94:4e:30:cc:46:
25:d6:b9:61:53:bc:12:0a:2f:ba:3d:53:a0:75:ea:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:F3:B9:FB:75:92:FC:65:10:E7:B3:AC:B4:FF:29:B9:D9:C9:54
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/NIXzuft1kvxlEOezrLT_KbnZyVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.170.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c1:c7:d4:ba:1b:e6:f0:39:51:8d:bd:cb:d1:82:28:f2:2a:
fc:e1:c2:c4:3b:f3:59:bc:90:98:7c:3e:80:15:56:3f:ec:82:
74:8e:83:a5:40:e6:65:66:95:8e:01:13:42:91:eb:5d:c7:30:
e7:63:06:7f:82:b7:b2:05:e1:39:20:38:53:36:a8:7e:b5:74:
d0:d7:0e:ff:f4:82:06:c1:d2:6c:2c:60:9d:43:1d:0e:37:b3:
64:c2:96:43:3e:9e:cd:70:c5:41:f7:81:e7:89:97:1f:f0:43:
78:2d:b1:69:5c:83:1b:22:5f:ef:4f:5d:82:ee:37:31:66:43:
4a:ef:31:f7:28:7f:78:31:a0:70:82:6e:d9:63:0a:fa:a2:a7:
a0:d8:d8:6d:09:75:13:0c:67:04:e2:a9:3a:f9:6a:b1:4d:61:
f0:c5:2d:a4:e0:75:0b:a4:cc:cf:0d:69:5c:1a:9f:a5:da:8c:
c3:d3:dc:f4:5b:22:a1:d8:32:28:ab:df:3c:56:65:76:dd:83:
8b:5c:84:88:e9:82:1d:12:83:5f:00:c3:14:d7:a7:23:01:b2:
74:0b:2b:6f:4d:00:94:47:5e:c5:73:20:98:d7:73:92:b6:5e:
37:ca:db:d5:d7:30:5e:c6:2b:12:07:bf:8e:2c:66:bd:4e:a2:
28:34:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:27:37 2025 by rpki-client