Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/usP4k7QzIJNepzsi6QRUbmh9Ung.roa
File: usP4k7QzIJNepzsi6QRUbmh9Ung.roa (raw, json)
Hash identifier: +6ffZ8kb2oNntaILRGOeurTOFfHujJe2TGV1zqTeFmQ=
Subject key identifier: BA:C3:F8:93:B4:33:20:93:5E:A7:3B:22:E9:04:54:6E:68:7D:52:78
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019372CA23A86B4494384CC49A2F0E91C5E6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/usP4k7QzIJNepzsi6QRUbmh9Ung.roa
Signing time: Thu 28 Nov 2024 12:41:10 +0000
ROA not before: Thu 28 Nov 2024 12:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152159
IP address blocks: 185.80.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:ca:23:a8:6b:44:94:38:4c:c4:9a:2f:0e:91:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 28 12:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bac3f893b43320935ea73b22e904546e687d5278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:22:a6:5b:d3:cc:f1:62:db:84:7b:cf:39:
d3:1d:1f:c5:8f:28:50:52:1e:07:0a:33:b5:48:f3:
af:b7:f4:b5:34:15:30:9a:ea:1f:cc:a4:1c:89:fc:
7b:6a:e6:03:2e:51:93:8c:e5:86:2d:32:43:c4:62:
9a:b1:ae:dd:81:dd:d1:e2:ad:b2:31:aa:65:10:2c:
61:59:4f:11:c0:bd:45:e3:a2:8c:11:01:bc:24:b1:
45:c0:da:35:c0:6e:65:a1:f9:b0:10:37:5b:40:fb:
a2:1c:94:b3:5f:1e:fa:c5:f6:80:8a:94:aa:a2:f7:
7c:ef:d7:43:34:3d:17:99:10:34:c4:4e:bd:eb:7f:
c0:5f:b0:83:4b:38:69:2a:db:ca:e1:a3:da:c4:a9:
3c:77:4a:88:7a:67:86:db:e0:f0:35:52:c2:ae:6e:
ab:28:21:1b:3e:5c:00:bc:bb:0e:c6:a7:91:57:a8:
e8:39:18:f5:70:4f:39:17:a7:e7:69:50:57:2c:2d:
8f:58:55:f2:e0:6e:c6:55:0c:d3:38:94:bf:c2:a0:
b3:5d:7f:b6:b9:6a:44:30:18:89:06:36:e8:b7:9e:
bb:c7:20:e1:df:df:4e:b4:9d:8f:e0:95:9b:dd:6a:
35:e1:a6:08:27:ea:fe:07:47:7a:53:d6:f1:38:f7:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:F8:93:B4:33:20:93:5E:A7:3B:22:E9:04:54:6E:68:7D:52:78
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/usP4k7QzIJNepzsi6QRUbmh9Ung.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.197.0/24
Signature Algorithm: sha256WithRSAEncryption
89:02:86:f9:59:fc:e6:7b:ca:59:e5:6e:f7:dc:f8:76:e8:4c:
85:08:ec:19:35:88:dc:b3:28:90:4d:26:eb:7f:41:ec:7b:72:
7e:50:d4:c2:92:36:4d:13:c2:c8:64:0c:9a:a0:b1:32:4b:42:
51:1c:9e:e9:f4:ba:6d:83:51:8f:43:be:3c:7b:e3:4c:43:74:
0e:fb:cf:d0:6f:29:95:b3:0a:e1:82:4c:60:cc:af:da:3e:88:
f5:78:61:9e:79:53:ed:85:f0:59:4d:89:2a:b0:25:f4:81:19:
0c:c1:1a:d4:d4:56:95:89:d9:a9:cc:bc:49:89:04:58:6d:7e:
bb:66:d7:dc:ee:13:24:07:32:2e:b4:e6:4d:41:cf:cb:08:78:
b6:2d:65:42:be:09:4c:de:e1:5d:0e:7b:a8:da:4d:2d:ad:01:
b3:a9:48:f1:a0:a8:66:bf:01:e8:70:17:82:d9:8a:b1:13:ec:
27:11:85:f2:b2:cd:4a:a3:d7:07:b2:da:00:e5:2d:7b:06:59:
ef:c2:c0:a3:f2:e3:2d:c8:2d:68:4e:2d:c5:33:9f:8c:6b:02:
ae:9a:94:ad:1c:ba:04:72:5e:0d:2c:a8:91:3a:8b:39:c2:fc:
99:09:0a:83:d3:04:33:04:6d:9e:f5:80:7b:04:2e:c8:87:29:
4a:9d:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:54:22 2025 by rpki-client