Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/fcSBI9ArMlBOYgwy6Fo0ymqrq8k.roa
File: fcSBI9ArMlBOYgwy6Fo0ymqrq8k.roa (raw, json)
Hash identifier: WOjL28+xWLAn6yPB7GMonYpALeJij9BfL6Z5d5XuP+Y=
Subject key identifier: 7D:C4:81:23:D0:2B:32:50:4E:62:0C:32:E8:5A:34:CA:6A:AB:AB:C9
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 0190A558BC0DB8988E57CA6F79528F016114
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/fcSBI9ArMlBOYgwy6Fo0ymqrq8k.roa
Signing time: Fri 12 Jul 2024 05:09:34 +0000
ROA not before: Fri 12 Jul 2024 05:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215063
IP address blocks: 80.73.48.0/20 maxlen: 20
95.130.64.0/21 maxlen: 21
2a04:8080::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:58:bc:0d:b8:98:8e:57:ca:6f:79:52:8f:01:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jul 12 05:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc48123d02b32504e620c32e85a34ca6aababc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:b5:36:6d:83:6d:b5:95:f7:89:21:b2:d7:
3e:2b:df:b6:18:cc:bd:bb:40:63:ac:94:5f:20:41:
51:13:c6:ba:99:fb:76:97:45:82:56:95:3f:d9:07:
d1:f5:63:9a:0c:b7:ef:18:22:06:5c:b2:17:7c:2a:
ae:4d:ad:20:0d:64:cf:e5:6a:34:a7:50:08:02:fb:
1f:d7:9f:28:16:c9:4c:16:f5:ce:fc:06:40:8f:7d:
fa:bb:e0:ca:ca:52:db:05:a3:fe:a8:e4:d5:bc:90:
cf:03:4c:34:94:49:ae:76:f3:85:0d:13:87:04:85:
19:c2:7e:f8:f5:b1:3b:41:e7:15:13:f9:79:d4:bf:
48:d5:f3:ff:89:b1:24:72:34:19:56:04:8d:21:cc:
ab:04:df:ba:4b:70:fe:5d:3e:7d:a7:ae:84:98:b0:
e8:ef:2d:bf:1c:bc:cc:35:98:bd:f7:31:08:40:21:
66:b1:8e:da:84:49:88:0d:9f:f1:5c:e2:8d:b1:fc:
df:e9:67:fc:60:5d:f7:f2:eb:ee:38:81:60:d3:86:
4d:51:69:fb:26:c8:5b:c4:6a:bd:05:cb:3e:7c:dc:
8a:03:55:63:b3:82:d4:05:0f:db:b2:07:00:be:60:
b0:5f:d0:8e:aa:a3:80:31:3c:a0:58:c4:87:c7:07:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:81:23:D0:2B:32:50:4E:62:0C:32:E8:5A:34:CA:6A:AB:AB:C9
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/fcSBI9ArMlBOYgwy6Fo0ymqrq8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.48.0/20
95.130.64.0/21
IPv6:
2a04:8080::/29
Signature Algorithm: sha256WithRSAEncryption
66:86:98:b4:d1:de:96:5b:a9:55:c3:52:3b:bd:f3:48:16:2f:
02:f5:01:01:f5:fb:c8:41:f4:ed:a9:34:e9:ef:5c:44:91:77:
dc:17:5c:86:87:df:d8:c7:83:ef:11:da:1e:81:0c:43:1c:ea:
a7:08:46:aa:36:5a:5f:e4:7b:9f:be:48:60:26:aa:1a:76:9f:
5c:c2:45:96:4a:7d:69:6d:a1:a9:91:b2:73:11:f9:ac:e0:d1:
64:05:4b:49:23:c2:a1:1b:61:10:66:b0:22:9e:91:5e:10:a5:
1f:a4:44:8d:a9:cc:15:db:49:63:b6:23:86:96:a8:87:b8:9b:
b9:c8:31:d0:43:01:c1:3f:bc:6e:4b:8b:a3:e8:c2:e2:8f:fc:
cb:30:09:1b:61:09:45:61:24:2b:15:fb:b1:e8:45:95:75:11:
8e:d3:11:6c:c8:b3:79:5f:77:31:b6:65:68:83:c8:45:df:81:
c9:41:9c:dc:83:94:65:d0:66:a3:cd:4f:ec:bc:0c:b4:79:bb:
5e:6b:b0:3b:4b:e3:aa:98:bd:35:17:c6:59:5b:0f:c9:7d:41:
ba:ef:10:61:2b:71:10:89:ac:81:85:43:1e:b4:db:86:58:8b:
ae:23:70:8a:11:32:f6:42:b6:a5:66:7e:c4:e5:ee:4e:0c:4b:
66:14:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:48:21 2025 by rpki-client