Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/sKc8iPhEfIUPGWAdNUU4WRgKUYU.roa
File: sKc8iPhEfIUPGWAdNUU4WRgKUYU.roa (raw, json)
Hash identifier: KTxvLySTh0swV79kmJlGRK9PEjr+18lxYRnuwXV4ZlQ=
Subject key identifier: B0:A7:3C:88:F8:44:7C:85:0F:19:60:1D:35:45:38:59:18:0A:51:85
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 01857170A5256A456FFD27404EEEC925BE89
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/sKc8iPhEfIUPGWAdNUU4WRgKUYU.roa
Signing time: Mon 02 Jan 2023 07:44:45 +0000
ROA not before: Mon 02 Jan 2023 07:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20953
IP address blocks: 80.79.192.0/20 maxlen: 20
2a02:1d8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 11 Jan 2023 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:a5:25:6a:45:6f:fd:27:40:4e:ee:c9:25:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Jan 2 07:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0a73c88f8447c850f19601d35453859180a5185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:29:9c:13:dd:de:33:22:1c:72:27:28:c3:
bb:20:23:81:48:ea:9e:65:ca:4d:e7:3e:03:63:50:
91:d0:1b:51:05:bf:fe:dd:b0:12:a9:87:72:36:1b:
17:c2:58:dc:b5:c7:40:47:7a:fa:32:ab:46:06:f9:
86:af:53:27:5b:e0:35:f8:a7:a8:bc:13:83:e9:5a:
48:2c:bc:0b:ea:2b:68:18:b1:25:18:af:57:98:33:
2a:91:90:6b:e2:62:46:23:ab:6b:04:12:bf:cf:6a:
d0:2b:43:23:99:15:48:37:09:29:f2:bc:17:2e:8c:
40:a5:db:ed:e9:c5:94:0b:e4:04:73:81:a6:4e:10:
a9:6e:07:e4:10:16:f4:da:61:8f:c7:0c:43:88:7b:
ac:25:e8:9a:a4:80:ac:91:f5:31:e7:fa:cd:0b:f3:
db:67:ec:e7:52:45:d8:54:ac:34:c9:36:e2:50:7c:
bd:43:cd:3e:da:ef:be:c4:12:e4:1c:95:ee:6b:a9:
4b:a7:6a:3c:12:4d:46:ce:d1:6a:9d:a8:8d:26:ef:
d8:a8:5b:12:dc:45:1b:ad:d2:5d:9e:db:b2:db:fa:
86:ab:be:f6:e1:8f:0d:64:08:a2:97:3e:e1:f7:77:
b1:29:5e:da:7e:43:0c:c1:22:16:3d:be:9a:a3:0d:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:3C:88:F8:44:7C:85:0F:19:60:1D:35:45:38:59:18:0A:51:85
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/sKc8iPhEfIUPGWAdNUU4WRgKUYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.192.0/20
IPv6:
2a02:1d8::/32
Signature Algorithm: sha256WithRSAEncryption
4a:68:45:91:b3:a3:ef:fa:14:26:2e:51:0c:8c:09:96:26:ce:
89:d0:36:34:ce:0f:71:94:8b:cf:60:b0:41:90:61:7a:e8:6f:
cf:5c:16:d0:43:d7:ee:1f:76:5d:34:9b:44:0e:5b:b5:52:a8:
30:3b:0c:12:36:90:24:92:5d:b5:11:56:c9:56:de:c0:d1:28:
2c:40:f9:4e:3b:e6:17:ea:8c:97:5a:2d:e0:09:95:d4:dd:dc:
67:55:46:5e:df:38:03:a1:4c:c5:f1:80:6b:95:31:c3:46:17:
8b:42:48:4d:f4:9d:60:a9:8d:0a:b6:a4:e9:24:8a:43:de:49:
4c:68:12:3d:97:5f:77:35:6a:f6:c3:f3:54:0f:ba:2b:c0:70:
46:8a:47:be:af:48:aa:e8:2e:58:3b:80:cd:f9:0c:6c:e7:b1:
7a:21:db:e4:50:3d:73:71:62:79:c5:4b:42:98:c8:4b:a5:aa:
b3:2a:72:c8:27:c3:84:32:84:1a:a8:09:7f:fc:7a:c7:e3:6c:
83:34:a1:4c:91:47:95:e1:1f:b6:18:37:61:8c:ba:3a:a8:a0:
5f:6b:92:d1:1b:70:6d:53:05:96:36:3f:98:ae:a4:18:a3:7f:
f1:bb:51:a1:db:8e:fb:0d:92:fa:53:a8:39:b3:1f:1d:fb:01:
df:20:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:00 2024 by rpki-client on console-fra.rpki-client.org