Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/X7jUWn6j64jbE8JkhdwxwbL53k8.roa
File: X7jUWn6j64jbE8JkhdwxwbL53k8.roa (raw, json)
Hash identifier: LGZ2iH7e19w3U6MBu9qCY2adw261eHWN6naR3X21VNc=
Subject key identifier: 5F:B8:D4:5A:7E:A3:EB:88:DB:13:C2:64:85:DC:31:C1:B2:F9:DE:4F
Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial: 019246AE96289E8A5EF0352724D9EA18B3D2
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/X7jUWn6j64jbE8JkhdwxwbL53k8.roa
Signing time: Tue 01 Oct 2024 06:04:59 +0000
ROA not before: Tue 01 Oct 2024 06:04:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201378
IP address blocks: 80.184.196.0/24 maxlen: 24
80.184.197.0/24 maxlen: 24
80.184.198.0/24 maxlen: 24
80.184.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:ae:96:28:9e:8a:5e:f0:35:27:24:d9:ea:18:b3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
Validity
Not Before: Oct 1 06:04:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb8d45a7ea3eb88db13c26485dc31c1b2f9de4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:2c:27:28:ba:f3:5f:d7:ce:5e:64:d5:95:
df:35:91:5f:5b:aa:44:c1:19:6e:3a:14:72:09:f4:
42:4f:5c:5f:9c:bc:f9:a2:e1:47:d8:0b:57:26:b2:
92:3f:49:95:0f:5b:1a:a9:19:f3:b5:5f:c8:66:39:
a2:2d:61:64:61:03:d0:4c:10:eb:82:07:a4:b5:1a:
44:10:1c:f1:2d:03:ff:67:14:08:97:ea:ae:b5:c5:
9d:9e:b7:3f:7c:d6:0b:d9:93:01:99:92:51:15:3b:
02:b6:20:27:b2:e6:91:e6:d2:8c:b4:a5:d3:65:a5:
5c:1f:17:1a:6f:ab:33:49:42:0d:b0:6d:d2:2e:ba:
e3:ba:61:8d:0c:5b:95:8b:bf:c8:e1:c9:83:93:9a:
de:84:ff:bb:dc:ed:3f:11:81:7a:15:eb:16:a6:2b:
46:45:2c:9a:82:cb:95:45:c0:d2:83:f8:f5:15:00:
54:3d:68:e9:5f:3a:4b:ee:0e:c9:de:a2:3a:60:06:
4a:70:18:4b:04:a6:31:fb:7e:1d:53:47:c7:04:9b:
14:03:e2:c4:7c:ec:61:96:15:15:b5:38:18:a9:e1:
58:87:68:a4:3a:51:32:1a:68:5d:93:14:b3:d5:e1:
71:55:00:c2:37:65:37:fa:0e:c7:01:e5:a0:0b:c5:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:D4:5A:7E:A3:EB:88:DB:13:C2:64:85:DC:31:C1:B2:F9:DE:4F
X509v3 Authority Key Identifier:
keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/X7jUWn6j64jbE8JkhdwxwbL53k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.184.196.0/22
Signature Algorithm: sha256WithRSAEncryption
62:bb:31:17:04:86:82:ee:22:4f:27:ed:45:71:2b:9c:c4:0f:
bb:f1:f8:c2:17:bb:37:f8:f6:c0:6a:2c:2b:a7:a3:57:c7:f8:
4d:fe:7a:6a:1f:65:ee:d9:4f:96:cd:ec:59:26:46:d2:b3:a2:
73:6b:57:09:fd:23:37:f8:5f:b4:a6:e8:15:b5:87:08:ef:94:
fe:ac:5f:cd:86:3c:09:d1:8e:c6:da:b7:5d:1d:1f:c5:52:79:
6f:2d:4b:7e:19:a9:33:19:76:8e:41:eb:97:96:5d:8c:e8:f9:
67:e2:12:72:ef:be:67:cf:a9:db:58:0f:e9:26:05:7d:10:7a:
4d:d9:f1:6b:56:e7:e0:d0:df:69:98:af:88:5c:b8:6c:aa:7d:
b3:48:0a:a2:6d:7d:93:e8:e7:b9:b8:80:39:1e:01:ba:95:bd:
3a:5a:70:f7:9f:2c:57:b1:6e:64:36:f5:66:90:e3:bb:45:c5:
d7:c8:ad:3f:0b:3d:01:af:75:c6:03:1a:1d:a5:00:4d:d8:6e:
cd:44:44:61:0d:3b:86:23:ea:ef:7e:a4:42:3c:48:32:15:d7:
d2:1f:11:ed:2a:54:06:e8:fe:5b:98:12:cf:35:d0:7b:a8:98:
21:15:7f:44:0e:ac:7a:ba:b1:f4:99:c6:dc:fc:f7:5c:87:2c:
2a:db:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:00 2025 by rpki-client