Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/lj8LVt751eRyTmZHHGOfbsnpA84.roa
File: lj8LVt751eRyTmZHHGOfbsnpA84.roa (raw, json)
Hash identifier: w7F+TMRe+BYQ+TCt9Vr7tSQY0fM7RQbF/AlSUylDg9o=
Subject key identifier: 96:3F:0B:56:DE:F9:D5:E4:72:4E:66:47:1C:63:9F:6E:C9:E9:03:CE
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 018CC80189478568BDD8D2C177CE009B609C
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/lj8LVt751eRyTmZHHGOfbsnpA84.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39875
IP address blocks: 80.247.16.0/20 maxlen: 20
185.147.108.0/22 maxlen: 22
2a02:308::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:89:47:85:68:bd:d8:d2:c1:77:ce:00:9b:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963f0b56def9d5e4724e66471c639f6ec9e903ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:d8:c8:98:82:9c:46:99:29:41:9a:11:23:
9e:6b:dd:dd:f4:12:43:09:30:f1:b2:c1:dc:3d:18:
e8:cd:7d:37:25:aa:09:3f:40:98:e0:42:58:09:3b:
d5:8b:27:9e:be:f1:d1:b9:29:a6:78:01:78:fa:32:
15:a3:ef:f3:ee:d9:b1:1a:4c:e4:66:98:51:75:2c:
be:db:5f:9d:7a:c1:be:0a:cf:8a:7f:9d:0a:76:68:
fb:d7:c2:97:70:e6:e6:6f:77:bc:d1:ae:9e:17:90:
bb:93:68:df:61:34:6d:4e:51:9a:65:4a:c7:85:87:
db:75:ef:68:25:78:84:39:d8:d0:12:42:d6:54:89:
86:0f:4c:c5:1f:38:c7:a0:66:77:d2:6c:13:89:fb:
a2:bb:ba:b7:8c:93:a7:e6:a4:7b:c9:e4:25:de:da:
f6:40:a7:c5:40:57:a0:d3:93:1a:ec:26:f0:8a:d8:
d6:f6:9c:ef:6c:74:03:c2:17:3b:e4:de:3a:86:9a:
8f:91:da:2f:e6:34:56:d1:76:d2:d3:8e:68:78:43:
0a:b1:27:d2:c9:2b:70:17:e4:ce:19:09:5f:17:c9:
1c:d2:f5:16:b5:d0:cd:30:cd:a2:af:0e:8e:d7:8d:
16:36:a2:95:18:2d:26:b3:0d:ee:ce:fb:ca:32:31:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:0B:56:DE:F9:D5:E4:72:4E:66:47:1C:63:9F:6E:C9:E9:03:CE
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/lj8LVt751eRyTmZHHGOfbsnpA84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.16.0/20
185.147.108.0/22
IPv6:
2a02:308::/29
Signature Algorithm: sha256WithRSAEncryption
34:ec:5d:81:b1:05:2c:b3:10:04:02:b3:bc:01:ed:7a:06:7b:
44:c5:20:86:0a:ca:09:99:01:f3:d1:9d:ff:78:85:e2:c5:37:
3f:52:25:c4:71:eb:65:d3:2d:f1:c2:39:6f:a0:95:eb:28:c8:
0d:49:bf:45:16:d9:93:7e:aa:5e:a9:90:99:43:f0:92:95:43:
c4:42:3b:3d:5c:b6:62:de:81:3f:ae:9a:65:eb:90:95:d8:6f:
42:64:a4:5b:9a:d5:3c:a9:b0:b1:09:2a:f8:57:41:55:66:2c:
12:01:50:6f:ca:0f:d8:f6:03:8e:3b:ca:74:45:56:11:a1:e1:
22:02:b2:54:19:0e:17:ad:2a:77:09:a2:32:89:f0:8c:b7:f5:
da:98:c5:27:44:6c:61:8e:78:05:fc:cd:d7:ed:d7:6f:65:a2:
90:a8:67:9e:b5:b8:ab:96:13:96:ca:ec:f3:41:fa:7a:7e:81:
63:0f:b6:be:02:04:59:4b:31:a0:24:e1:6f:b4:7d:75:25:9a:
fa:31:d0:44:fa:54:59:ad:b8:74:9d:7d:8b:35:eb:61:b3:78:
16:a2:28:ee:f6:19:7d:75:cc:ce:b2:c2:2f:bf:93:eb:84:61:
a4:df:f7:39:51:25:a3:1d:d3:a4:8c:13:94:b7:86:dc:67:af:
a9:6d:a9:e8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzIAYlHhWi92NLBd84Am2CcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjM1OTM3YWRmNGRhYjg5MjVkNTgwNDVhMzM3MTgxNmM5
ODA1MzEwHhcNMjQwMTAyMDIyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjNmMGI1NmRlZjlkNWU0NzI0ZTY2NDcxYzYzOWY2ZWM5ZTkwM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SPYyJiCnEaZKUGaESOea93d9BJD
CTDxssHcPRjozX03JaoJP0CY4EJYCTvViyeevvHRuSmmeAF4+jIVo+/z7tmxGkzk
ZphRdSy+21+desG+Cs+Kf50Kdmj718KXcObmb3e80a6eF5C7k2jfYTRtTlGaZUrH
hYfbde9oJXiEOdjQEkLWVImGD0zFHzjHoGZ30mwTifuiu7q3jJOn5qR7yeQl3tr2
QKfFQFeg05Ma7CbwitjW9pzvbHQDwhc75N46hpqPkdov5jRW0XbS045oeEMKsSfS
yStwF+TOGQlfF8kc0vUWtdDNMM2irw6O140WNqKVGC0msw3uzvvKMjH3ywIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJY/C1be+dXkck5mRxxjn27J6QPOMB8GA1UdIwQY
MBaAFIAjWTet9Nq4kl1YBFozcYFsmAUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NOWk42MzAycmlTWFZnRVdqTnhnV3lZQlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNjIzODItOTlkZC00N2Q0LThkZTQt
MWZlNjkxMmY4ZTdlLzEvbGo4TFZ0NzUxZVJ5VG1aSEhHT2Zic25wQTg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mNjIzODItOTlkZC00N2Q0LThkZTQtMWZlNjkxMmY4ZTdl
LzEvZ0NOWk42MzAycmlTWFZnRVdqTnhnV3lZQlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUPcQAwQC
uZNsMA0EAgACMAcDBQMqAgMIMA0GCSqGSIb3DQEBCwUAA4IBAQA07F2BsQUssxAE
ArO8Ae16BntExSCGCsoJmQHz0Z3/eIXixTc/UiXEcetl0y3xwjlvoJXrKMgNSb9F
FtmTfqpeqZCZQ/CSlUPEQjs9XLZi3oE/rppl65CV2G9CZKRbmtU8qbCxCSr4V0FV
ZiwSAVBvyg/Y9gOOO8p0RVYRoeEiArJUGQ4XrSp3CaIyifCMt/XamMUnRGxhjngF
/M3X7ddvZaKQqGeetbirlhOWyuzzQfp6foFjD7a+AgRZSzGgJOFvtH11JZr6MdBE
+lRZrbh0nX2LNeths3gWoiju9hl9dczOssIvv5PrhGGk3/c5USWjHdOkjBOUt4bc
Z6+pbano
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:14 2025 by rpki-client