Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/W1lX_7PgzUCMly9EPIced6xcfbU.roa
File: W1lX_7PgzUCMly9EPIced6xcfbU.roa (raw, json)
Hash identifier: plPz00m/eM28qHdafp88yl8Knmz9jmdbE/SpjaHmR7o=
Subject key identifier: 5B:59:57:FF:B3:E0:CD:40:8C:97:2F:44:3C:87:1E:77:AC:5C:7D:B5
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 018CCA2BBC22E0AD31F0E4F912865916A48A
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/W1lX_7PgzUCMly9EPIced6xcfbU.roa
Signing time: Tue 02 Jan 2024 12:35:12 +0000
ROA not before: Tue 02 Jan 2024 12:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3292
IP address blocks: 80.73.48.0/20 maxlen: 20
95.130.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bc:22:e0:ad:31:f0:e4:f9:12:86:59:16:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jan 2 12:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b5957ffb3e0cd408c972f443c871e77ac5c7db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:fa:2d:1e:68:f2:af:54:fe:d5:38:9f:a6:
2e:e0:8c:75:9f:20:3e:6f:a5:5c:3d:13:87:83:14:
d3:a1:0f:b9:fb:6b:24:80:58:d3:9c:ce:f8:2e:58:
3d:b7:b0:8d:58:c8:60:5d:02:7f:8d:1c:5a:e7:f3:
bd:60:48:12:51:71:55:d0:d9:f0:a9:df:f6:95:67:
a8:1b:ff:cf:65:68:c8:88:88:f1:ec:e0:6e:27:8a:
dd:f8:d5:b0:82:a5:1c:42:fe:fd:c4:fc:64:da:30:
43:7c:d2:b3:ae:11:22:87:c1:8f:ff:c4:c2:c4:e1:
f1:17:54:85:78:66:c5:d2:51:5d:7a:24:bd:70:ab:
5e:e8:12:f0:c4:da:76:54:d4:e1:fc:b1:3b:74:db:
a0:81:0a:8c:26:0d:06:12:72:fb:99:e7:38:13:03:
9a:92:8a:bc:f8:4c:32:63:03:4a:40:ae:31:82:9c:
fb:f9:ce:63:b7:c0:f4:68:49:a0:21:c2:61:a1:eb:
75:14:30:03:6c:99:ea:2d:0c:24:90:0c:5d:d2:0d:
8c:5d:27:6d:cd:ea:e1:aa:3c:bf:41:bb:e6:ae:b6:
8e:16:de:af:95:02:b7:fc:17:07:b8:25:cb:94:30:
77:72:6e:a4:0d:28:fa:6d:9a:de:f7:88:c3:75:7d:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:57:FF:B3:E0:CD:40:8C:97:2F:44:3C:87:1E:77:AC:5C:7D:B5
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/W1lX_7PgzUCMly9EPIced6xcfbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.48.0/20
95.130.64.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:a0:63:a3:7a:26:86:d4:97:75:83:43:37:d1:c6:4b:e2:58:
4a:4a:21:89:2a:4b:9d:9b:fe:34:05:85:98:52:b2:42:9b:0a:
10:3c:fa:0e:d8:ab:ae:c8:55:e9:bd:f3:30:3e:9e:79:bc:b2:
11:49:d3:bf:7f:40:24:7d:5f:93:de:18:78:f4:df:73:8f:96:
4e:4d:43:5a:da:1f:13:5c:81:8f:62:5f:b7:c6:05:45:83:32:
3d:23:97:80:75:d8:b5:4e:e7:bb:eb:a5:31:90:31:41:68:5d:
f4:65:ae:c7:f7:b0:0c:48:64:fc:47:d2:97:0d:00:bd:22:0f:
0d:73:c5:05:eb:b8:4d:64:77:57:68:01:4e:3d:22:58:9b:57:
01:2e:ba:c6:60:2c:fe:21:20:30:8e:6b:31:10:90:a4:cd:97:
95:d1:46:43:e8:52:e2:f3:47:4a:f0:68:74:7e:28:97:bd:f2:
0d:15:9d:b5:0c:2e:54:df:21:ce:90:36:36:3b:94:c3:b6:10:
9d:ac:12:27:46:7f:fb:f5:ae:a3:ab:6a:d4:e4:ef:1f:d7:d3:
3e:de:dc:13:15:fc:ff:49:3f:a3:cf:65:99:f4:ab:41:ab:49:
0a:14:d7:e7:f6:0e:8d:2b:4f:0f:0b:c8:f8:20:3c:c0:58:61:
3e:be:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:18 2025 by rpki-client