Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/gtasqkd8LOQGvXS--WQ7XX7aGqY.roa
File: gtasqkd8LOQGvXS--WQ7XX7aGqY.roa (raw, json)
Hash identifier: 3jEAd/GWbTafe1HkwtS7FvMerKkxxzcFs4ZaJ3V5S6c=
Subject key identifier: 82:D6:AC:AA:47:7C:2C:E4:06:BD:74:BE:F9:64:3B:5D:7E:DA:1A:A6
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 018E26F627A3D4D16B550CDAAAFFB9FD0D7E
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/gtasqkd8LOQGvXS--WQ7XX7aGqY.roa
Signing time: Sun 10 Mar 2024 06:04:09 +0000
ROA not before: Sun 10 Mar 2024 06:04:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19762
IP address blocks: 80.244.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:26:f6:27:a3:d4:d1:6b:55:0c:da:aa:ff:b9:fd:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Mar 10 06:04:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82d6acaa477c2ce406bd74bef9643b5d7eda1aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:96:00:3f:73:8b:e8:09:a6:dd:61:5c:aa:
d0:41:ea:0e:d3:d5:63:bd:d1:6e:89:95:a9:09:17:
1b:2f:61:71:4e:1f:62:1d:bb:f4:07:28:0e:97:49:
75:7f:ce:e8:aa:8f:45:a2:9b:ff:50:6d:e9:95:d5:
aa:c2:28:27:5b:f9:3b:99:90:2e:54:1a:d1:23:58:
77:85:fc:c0:39:27:1f:39:2e:eb:3b:2b:b4:1b:a2:
20:18:29:f4:16:cb:6e:c8:b7:3d:7a:41:a9:48:fc:
a1:41:22:ce:f6:d9:a2:f7:bd:fd:13:25:4d:14:52:
59:82:86:3b:3a:ff:d2:ba:71:c5:4d:05:b1:58:da:
69:c3:56:70:3d:e4:6b:58:da:ab:eb:2c:de:68:a6:
da:85:3f:cc:c7:3e:c7:f4:a4:42:a3:e6:b1:db:a9:
1a:b5:44:a5:59:00:55:aa:52:b6:88:68:5c:8e:8f:
07:03:35:4e:2a:fb:47:fb:c3:d3:6b:82:6f:91:89:
eb:10:36:cc:a1:09:ce:66:a5:e2:e0:02:23:82:f6:
84:9f:c1:6d:c8:f9:d6:34:e3:4a:e7:61:fa:c2:ee:
24:e3:ca:96:3f:27:ad:f7:9b:81:a8:3c:61:30:d1:
c6:8e:ad:31:19:b0:78:86:00:7b:6a:25:08:06:45:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:AC:AA:47:7C:2C:E4:06:BD:74:BE:F9:64:3B:5D:7E:DA:1A:A6
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/gtasqkd8LOQGvXS--WQ7XX7aGqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5e:4d:00:98:35:d3:07:4f:f2:a1:b8:86:c9:06:ae:14:b4:
c2:1c:6f:32:a6:fc:8a:b9:13:cf:4d:45:be:af:8a:23:0e:d1:
44:a6:3c:59:5d:96:d9:42:0e:2f:73:5b:be:af:fe:53:c5:ec:
40:2a:40:5d:36:a1:9b:ae:6e:57:22:7d:9d:ff:7d:e5:f0:04:
16:83:78:8a:3f:5e:c6:46:6c:76:6b:2b:f5:ef:af:8f:9a:eb:
36:9e:3b:76:a9:38:75:4b:d6:a2:67:f6:47:d6:fe:d5:e6:b1:
c3:08:d3:9f:55:5a:23:94:4c:74:45:fc:9e:4a:90:d6:89:90:
d8:e7:ef:46:57:e9:66:57:76:48:78:32:2f:6e:e3:4a:2c:6e:
a0:4c:64:3b:0d:fd:50:a4:a5:a7:52:e1:05:cf:4d:5e:0d:44:
36:77:16:cf:dd:66:e5:3b:4c:8b:e8:ff:ac:dc:c7:7e:a1:dd:
63:8f:ee:63:59:10:ca:6a:2c:03:32:ab:4d:9a:d1:d0:21:6f:
56:e9:a4:76:79:8a:d0:c0:02:a1:a5:bf:c0:e8:7b:fc:e6:82:
5c:5a:de:06:ba:00:45:a8:8e:e1:f0:c2:e2:e5:0a:6f:8e:a6:
3f:01:b2:cf:05:de:04:ff:ac:6b:6f:e3:df:51:5d:b0:f2:0e:
62:88:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:04:42 2025 by rpki-client