Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/7bflHvNLBEtlNAED_3h8bhDVIPc.roa
File: 7bflHvNLBEtlNAED_3h8bhDVIPc.roa (raw, json)
Hash identifier: iK65XUZ9Kv9j486AxXJAkR4T46Ojk3A6wI/txwyYFtg=
Subject key identifier: ED:B7:E5:1E:F3:4B:04:4B:65:34:01:03:FF:78:7C:6E:10:D5:20:F7
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 0192B0F1E9AAAF1B935C1C17941C66290F1D
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/7bflHvNLBEtlNAED_3h8bhDVIPc.roa
Signing time: Mon 21 Oct 2024 21:18:16 +0000
ROA not before: Mon 21 Oct 2024 21:18:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25184
IP address blocks: 80.244.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:f1:e9:aa:af:1b:93:5c:1c:17:94:1c:66:29:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Oct 21 21:18:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb7e51ef34b044b65340103ff787c6e10d520f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:c9:4a:23:e0:0a:b0:c4:03:ff:bf:c2:ea:
b9:5f:30:74:2c:82:c3:09:67:33:99:b7:9b:01:d5:
a6:55:11:ff:0d:28:24:44:f3:86:ee:25:b7:06:8e:
5e:c0:57:6e:51:46:f3:9e:fa:2b:9e:96:9f:55:d3:
b7:30:8e:4d:9b:43:0c:1a:78:26:34:21:48:97:56:
29:02:56:86:4d:db:36:9a:f2:97:2f:68:de:10:a1:
b3:c7:5e:6d:d1:11:b8:21:bb:bd:6b:e2:82:12:19:
c7:01:a1:c8:49:c5:88:87:5c:6a:a7:fd:60:83:07:
49:ab:12:d4:ce:78:c2:27:35:6b:30:63:92:85:f0:
67:a4:47:f3:bf:91:bc:d1:b7:15:54:8e:81:5a:de:
64:93:b8:62:ae:a5:8c:25:50:da:a9:38:f1:62:2c:
cf:69:5a:ba:66:d3:98:bf:4b:0e:49:ab:42:7e:ef:
4c:0c:10:da:16:cf:3f:39:7c:05:7f:85:32:47:39:
08:cd:4b:e2:7c:94:3f:bc:93:af:a2:1f:d0:d3:3e:
84:e6:bc:55:1f:20:9b:46:00:c9:f5:50:aa:f9:01:
cb:4f:d4:ac:f3:66:1d:2b:92:65:30:29:12:72:07:
85:bf:01:f3:fb:43:fd:0b:20:48:4e:9b:4e:e1:37:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:E5:1E:F3:4B:04:4B:65:34:01:03:FF:78:7C:6E:10:D5:20:F7
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/7bflHvNLBEtlNAED_3h8bhDVIPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.7.0/24
Signature Algorithm: sha256WithRSAEncryption
07:55:23:00:8b:e6:3e:75:33:50:d3:0c:2c:8c:9f:b4:ee:cd:
42:4a:d6:29:de:62:f2:eb:c1:7a:8c:c2:77:bd:88:85:90:72:
c6:f9:b4:84:2d:a0:ab:d4:37:1f:a4:bd:2a:9a:48:60:d0:0e:
2d:94:92:6c:8e:c2:12:ef:b7:2f:67:3c:3b:a7:dc:09:80:5d:
cb:d0:15:77:c3:1f:35:e0:8a:ef:76:45:1a:f2:c9:26:17:47:
fb:cb:46:b2:2b:d0:0e:da:ce:ea:f0:a1:15:6d:13:21:4c:6f:
30:98:98:62:43:55:85:d1:da:69:f3:21:87:4a:d6:42:fa:86:
b7:b6:d1:df:09:5b:4b:d9:d7:6d:06:81:a1:6f:d6:ed:45:25:
8c:b1:73:03:cd:46:79:a2:03:71:0a:d1:f2:d7:5f:0c:40:de:
db:0d:e5:c1:27:da:2b:bd:fe:d2:20:96:c9:af:b2:01:cf:fa:
03:a0:83:35:eb:2e:59:18:94:66:66:26:2d:7b:a4:04:bd:31:
b9:2a:12:65:cd:25:ae:de:0a:80:8b:11:b9:ca:49:6f:50:61:
74:f3:e6:f1:0f:cf:3a:bc:5f:63:67:31:30:3a:8a:1d:e9:13:
d3:d7:44:80:91:f7:fc:a5:86:38:a2:80:c9:5a:28:d9:a4:ea:
8d:34:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:44 2025 by rpki-client