Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Z3JyF1sFe8fv2WwPBYqor8GbjCk.roa
File: Z3JyF1sFe8fv2WwPBYqor8GbjCk.roa (raw, json)
Hash identifier: zEwPbBUND9TdrH37TG+erlEsoVZu1sPi8GViV+X2kVM=
Subject key identifier: 67:72:72:17:5B:05:7B:C7:EF:D9:6C:0F:05:8A:A8:AF:C1:9B:8C:29
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B89057725E0C585F3F89D1125A51D6
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Z3JyF1sFe8fv2WwPBYqor8GbjCk.roa
Signing time: Mon 01 Jan 2024 20:30:33 +0000
ROA not before: Mon 01 Jan 2024 20:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57631
IP address blocks: 80.79.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:90:57:72:5e:0c:58:5f:3f:89:d1:12:5a:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677272175b057bc7efd96c0f058aa8afc19b8c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:63:25:aa:37:75:5f:da:bd:8b:de:ea:f0:
7e:db:f3:fe:26:dc:63:02:8f:bf:8b:10:90:7d:c3:
2c:01:99:eb:9c:6a:21:c6:a2:88:d3:01:b7:66:a9:
5b:a3:cd:8f:27:77:86:3f:53:56:8c:30:e6:5c:2f:
b0:ae:0e:ec:fa:12:d0:a2:b1:ff:e8:52:b7:f1:9a:
19:1c:0f:89:74:1a:1d:15:76:4c:16:66:43:6c:00:
08:8c:28:42:b0:b8:4e:04:82:2c:8e:8a:21:47:ee:
b5:32:95:10:9e:14:e2:06:f2:96:57:d1:51:aa:d4:
84:86:33:28:6b:fe:97:57:40:68:c2:56:2c:b9:92:
87:af:8f:de:d3:4e:52:68:82:93:cf:60:c7:4d:a1:
47:28:11:08:08:9c:93:53:a3:7a:cd:12:cd:ab:18:
49:19:a1:08:98:aa:65:82:44:cb:8e:73:df:54:10:
9e:0e:97:17:1f:7b:06:f0:3d:3c:17:87:93:6e:88:
1b:2d:2a:a6:76:7e:18:bf:2f:dd:1b:46:22:11:a5:
b2:3f:dc:c1:98:d9:57:35:d3:95:8a:87:9c:7c:5d:
02:5f:2c:f9:f8:50:3a:2b:43:9d:99:dc:d7:8b:e4:
cb:67:13:8a:73:a0:fe:8c:66:b8:fe:e0:cf:40:99:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:72:17:5B:05:7B:C7:EF:D9:6C:0F:05:8A:A8:AF:C1:9B:8C:29
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Z3JyF1sFe8fv2WwPBYqor8GbjCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.254.0/23
Signature Algorithm: sha256WithRSAEncryption
54:dc:1f:fa:3c:e9:42:73:e8:65:be:ce:49:fc:d7:b0:45:c0:
09:77:d1:cb:90:38:47:9d:a3:24:bd:d9:39:ef:8f:c6:4c:97:
18:37:e5:d9:be:7c:97:a2:d9:c4:00:14:27:86:60:34:ab:90:
9f:ba:d3:4f:eb:d5:15:2b:2e:ed:ea:21:fa:4a:4d:e9:36:16:
36:17:7b:81:5e:2e:f8:ee:46:07:95:d7:b0:90:df:0e:e9:7a:
28:ef:1b:d5:82:7b:5f:ba:17:3a:f8:ae:e7:28:64:fe:22:1f:
4a:32:4e:45:4c:d0:1e:db:fa:5f:ce:b4:46:7c:1f:28:e3:ab:
80:7e:0b:6c:b8:52:9b:6e:41:be:92:ac:a1:bb:35:2f:25:94:
36:db:63:29:50:34:67:2e:d6:8a:94:0a:bd:9f:66:90:22:22:
ac:50:c5:28:70:cc:e4:30:28:60:8f:a9:c2:2a:ba:d3:20:d9:
18:52:1d:33:03:ce:17:54:54:47:33:69:f7:a4:b0:ef:3f:d1:
ac:0a:1f:70:06:aa:43:40:ea:7d:c5:73:1f:f2:db:7c:02:f1:
1f:ec:88:e3:d6:85:a8:96:ed:d2:83:aa:77:cd:79:e7:c3:73:
f4:ff:38:15:1c:97:9b:7a:ef:fc:f2:eb:76:78:60:5e:2b:a3:
1b:31:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:01 2025 by rpki-client