Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/U7c0yVdX9TF3tgOyzCMYNDcN3P0.roa
File: U7c0yVdX9TF3tgOyzCMYNDcN3P0.roa (raw, json)
Hash identifier: Z60B6fLqt06u6AobWD2OY21xYUMmbYuT9Lmb3FXHC08=
Subject key identifier: 53:B7:34:C9:57:57:F5:31:77:B6:03:B2:CC:23:18:34:37:0D:DC:FD
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 018E9E6CF7FF8AF879101E7EB9F88411BBE1
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/U7c0yVdX9TF3tgOyzCMYNDcN3P0.roa
Signing time: Tue 02 Apr 2024 10:48:45 +0000
ROA not before: Tue 02 Apr 2024 10:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216230
IP address blocks: 80.75.208.0/24 maxlen: 24
2a13:f540::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:6c:f7:ff:8a:f8:79:10:1e:7e:b9:f8:84:11:bb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Apr 2 10:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53b734c95757f53177b603b2cc231834370ddcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:29:83:c4:55:f9:35:76:09:67:53:d3:82:
e8:01:fa:11:6b:56:c6:c0:29:35:7b:34:ae:2d:80:
07:fa:63:ad:dd:1b:5f:9b:70:33:8d:77:c2:b5:37:
6e:e6:0c:0b:4f:dd:35:a4:ab:dd:88:c7:32:cd:28:
ad:c6:b4:e4:43:6b:3f:01:58:2c:67:86:6e:6b:5e:
73:38:1a:be:83:9e:a3:80:35:3e:72:c8:e7:aa:28:
53:f1:12:52:86:eb:3b:2c:bb:23:57:c6:0c:56:04:
15:2b:53:c5:1c:62:86:a1:8b:eb:fc:42:97:b9:0a:
1d:ee:37:40:fd:44:34:6a:27:e4:6b:6e:ee:fc:69:
cf:06:d1:a2:ab:fa:b7:e9:cf:dc:47:3a:1f:f5:0f:
f9:66:02:aa:15:da:51:15:b3:31:c4:33:6c:b0:11:
2f:1b:14:7b:df:05:e1:87:d6:66:16:fc:14:28:3e:
b4:2d:9e:d6:97:aa:1a:a9:04:4c:ce:b3:21:2e:9a:
75:9e:ba:3f:ee:69:17:6a:47:b3:9b:60:b9:63:9c:
17:37:36:02:f0:f0:92:ca:6d:a8:73:f6:aa:13:bc:
33:32:f9:d2:7b:6b:67:ba:64:47:da:fb:a1:de:20:
63:6e:93:1b:ab:f0:57:21:8f:c7:1d:46:b5:bb:b3:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:34:C9:57:57:F5:31:77:B6:03:B2:CC:23:18:34:37:0D:DC:FD
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/U7c0yVdX9TF3tgOyzCMYNDcN3P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.208.0/24
IPv6:
2a13:f540::/29
Signature Algorithm: sha256WithRSAEncryption
11:66:e2:7b:e8:b2:bc:b5:12:de:c7:e1:12:10:f2:26:03:50:
65:02:53:3d:72:6b:5a:ae:56:f8:3b:3c:a5:5e:f0:bd:30:d2:
9d:fe:c6:1e:05:ce:1d:34:c0:0d:ed:67:e0:f7:6a:cd:89:b6:
a7:82:02:6c:5a:46:17:dd:86:93:95:58:1c:d8:f1:68:54:17:
c1:23:5d:e0:7c:4c:f5:23:b7:ed:6a:70:5c:1f:96:95:a4:1a:
7c:d3:35:d7:63:2d:46:2a:7c:6b:68:72:95:d8:db:33:b0:78:
7e:15:f5:19:49:c7:f3:1c:65:a1:a6:35:d1:bb:f6:49:73:e0:
3d:43:7d:a7:90:32:45:37:34:a4:24:06:2f:d3:45:46:6f:be:
05:b0:03:ba:64:ee:9a:74:a8:48:3f:b7:b8:3c:d3:ce:86:43:
ef:8a:8c:76:06:13:11:6a:85:63:26:bb:0e:e4:21:fb:cc:ab:
a3:fa:c8:37:06:85:d1:03:44:cd:ed:f6:00:e2:35:80:ab:81:
88:61:e5:eb:ae:cb:6e:f8:a3:f0:ee:47:85:42:87:91:7e:bf:
7a:24:74:2a:ed:a4:3a:36:b3:cf:b0:c2:f1:fe:3d:bc:e5:6c:
b3:d5:17:29:0d:95:6a:50:66:0c:ac:48:ab:83:ac:9f:e7:e8:
7a:f4:50:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:56 2025 by rpki-client