Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_JvR92s1AwoOGnI_1z7n_FXOqGQ.roa
File: _JvR92s1AwoOGnI_1z7n_FXOqGQ.roa (raw, json)
Hash identifier: E9JeDAhQUemGUxkF3Js2xTdkvgfuGHoTWrhW/FclmfM=
Subject key identifier: FC:9B:D1:F7:6B:35:03:0A:0E:1A:72:3F:D7:3E:E7:FC:55:CE:A8:64
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018CC500D8F7D761BF7D1BF729F81DCD8E17
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_JvR92s1AwoOGnI_1z7n_FXOqGQ.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206680
IP address blocks: 80.72.22.0/24 maxlen: 24
2a00:8740:700::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 09 Jul 2024 12:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d8:f7:d7:61:bf:7d:1b:f7:29:f8:1d:cd:8e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc9bd1f76b35030a0e1a723fd73ee7fc55cea864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:a1:4d:ba:56:77:dd:44:c0:86:f8:bb:49:
e5:4c:fd:9c:c0:84:85:cd:dc:44:64:cd:2c:dc:bb:
7a:d4:a9:52:20:27:7e:e7:95:36:ba:bb:64:3d:8e:
fe:60:43:5b:f3:45:cc:59:df:5e:7a:e2:1d:a2:0e:
5d:95:27:c4:ec:11:54:67:62:b8:86:a5:05:dd:ad:
67:a1:74:b4:8b:5d:4d:32:4f:c2:a8:90:01:51:d5:
a0:bc:7c:92:94:00:19:cd:f0:c6:78:a5:12:f5:80:
e8:a1:1a:8c:45:c9:a3:78:bd:0e:d3:2a:86:0c:d9:
c1:06:0c:54:8a:15:0b:05:c7:ed:fd:4a:44:f4:36:
62:d8:b0:9f:62:f4:b0:4d:65:a5:bc:7d:00:10:53:
53:c4:06:4c:b8:b2:10:6f:ec:a4:de:a8:f7:8f:a9:
8d:a0:9e:aa:2a:10:8b:78:cc:2b:76:a0:c3:14:dd:
3b:d7:20:03:bc:8c:c9:04:af:15:08:0d:2e:a3:8b:
32:d2:2e:7d:67:79:8f:35:92:e9:c5:ac:06:ad:f2:
cc:a7:1a:dc:1a:e6:8e:f4:28:5d:99:65:9a:ba:6e:
ae:29:76:7b:14:e4:df:3a:ff:bc:2e:e5:04:9a:11:
e2:bf:b3:6c:9f:2e:e2:7e:30:f9:a6:bc:f7:65:c9:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9B:D1:F7:6B:35:03:0A:0E:1A:72:3F:D7:3E:E7:FC:55:CE:A8:64
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_JvR92s1AwoOGnI_1z7n_FXOqGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.22.0/24
IPv6:
2a00:8740:700::/40
Signature Algorithm: sha256WithRSAEncryption
8a:42:48:72:f2:14:64:d6:4b:f0:00:65:db:ec:a1:9e:27:f1:
a3:b8:fc:e3:cc:d0:d8:97:b5:75:65:78:f6:ac:ef:c6:cf:fe:
43:d3:26:1d:0b:15:4a:5f:d1:35:43:e4:d2:f0:d9:48:62:14:
85:f8:87:b6:5b:d8:af:a9:0c:c6:f0:04:c2:9e:03:50:c9:02:
d4:ef:d4:9f:c9:af:73:4e:28:6a:4c:7a:aa:d1:b7:a3:a1:ac:
4d:68:54:62:f7:60:61:a7:bc:6d:fc:65:e7:4d:e0:e1:fd:72:
ce:50:04:c8:4f:69:05:19:19:9b:df:6b:17:a2:c4:74:82:d6:
a9:eb:83:72:5b:21:d9:d2:94:82:5c:b0:04:eb:5d:9f:92:01:
4f:a1:57:f1:b9:3b:83:04:d2:65:51:b3:f8:9b:a1:ef:5f:a5:
68:98:f0:37:9b:af:f1:cb:e9:30:a6:1c:bd:56:cd:89:65:37:
c0:ff:0b:c3:81:78:3b:90:ab:a7:4b:8f:70:63:16:be:e8:e9:
f0:04:ac:2b:8c:5f:88:a3:ea:ff:ba:fc:7d:38:63:0e:9f:8f:
08:12:32:05:7e:65:5a:ca:f9:06:06:69:c2:cd:b3:f0:67:47:
35:9e:34:c0:01:e4:5d:ec:d5:26:f7:1f:da:77:13:90:c1:cc:
5a:ba:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 15:12:05 2024 by rpki-client on console-fra.rpki-client.org