Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/xojZpThrunr7q1SmFhWEF8SkbKI.roa
File: xojZpThrunr7q1SmFhWEF8SkbKI.roa (raw, json)
Hash identifier: bqLkzKolTUklhFD2vHhiOZ6Dzk86yzyNzArX0dbOEOU=
Subject key identifier: C6:88:D9:A5:38:6B:BA:7A:FB:AB:54:A6:16:15:84:17:C4:A4:6C:A2
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 018930748701B20BB7ED4AA3841FE870AE69
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/xojZpThrunr7q1SmFhWEF8SkbKI.roa
Signing time: Fri 07 Jul 2023 13:04:50 +0000
ROA not before: Fri 07 Jul 2023 13:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201973
IP address blocks: 80.246.96.0/20 maxlen: 20
80.246.96.0/24 maxlen: 24
2a03:f8c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Jul 2023 14:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:74:87:01:b2:0b:b7:ed:4a:a3:84:1f:e8:70:ae:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Jul 7 13:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c688d9a5386bba7afbab54a616158417c4a46ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:f4:78:54:36:ef:7e:b3:e4:39:af:7d:5b:
fd:d6:28:1c:80:47:21:b9:4b:5a:7c:19:d0:64:50:
2d:d6:8e:0d:d1:8a:56:05:9d:91:ee:15:d8:d0:28:
4f:3a:2f:3f:5f:54:45:3c:e2:96:3c:30:90:b4:f9:
e6:6e:9a:a4:dc:8b:9b:9e:ad:6c:5c:24:d5:f1:bb:
96:95:89:ea:6b:25:ea:db:6e:11:cd:38:9e:dd:a1:
b1:cd:3d:2d:ad:bc:6c:58:23:87:4d:48:b1:e8:44:
d5:55:ea:56:f2:4e:f1:f8:11:35:89:3d:16:b0:50:
fc:7d:00:1b:b1:41:ae:64:67:65:c4:92:cc:49:f1:
eb:fe:90:55:fe:69:95:c6:9d:12:8a:30:5c:1e:ea:
fb:f0:85:f6:ec:9c:f5:13:5c:5a:26:75:e7:83:f8:
11:7f:8f:e0:45:a4:ba:f6:e4:52:df:7c:06:f0:af:
09:8a:28:f1:4f:21:98:eb:0d:18:a1:9b:5b:1e:b1:
1e:c5:ab:11:92:33:3e:77:d6:ee:e2:32:1a:e7:4f:
51:aa:c7:9f:ea:9b:f4:8a:97:ef:33:0a:0c:bc:e9:
1d:09:04:cd:54:08:ae:1f:fd:57:89:be:b6:67:13:
4f:d8:b8:1c:b2:27:90:6e:08:09:ec:ee:92:f6:e1:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:D9:A5:38:6B:BA:7A:FB:AB:54:A6:16:15:84:17:C4:A4:6C:A2
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/xojZpThrunr7q1SmFhWEF8SkbKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.96.0/20
IPv6:
2a03:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:19:4a:1e:11:03:5d:e9:81:1d:1b:74:7b:5b:20:e7:4b:11:
84:81:48:d0:0a:b6:75:85:01:95:00:73:5d:cc:06:d7:03:de:
c4:6c:e6:65:62:3e:28:01:cf:8a:e8:fd:07:fd:14:29:98:74:
22:44:dc:b8:6c:bd:54:25:d0:a9:19:17:eb:65:be:b4:98:a8:
2e:44:be:9c:47:6f:70:86:ca:16:e0:67:df:c7:1e:ab:e2:e0:
cc:52:d5:23:ef:ab:6f:ee:49:47:7f:52:c3:2c:46:12:a4:3b:
5a:09:3d:e2:a6:da:8f:58:73:0a:d4:44:a5:c1:bf:9c:4d:6f:
89:7e:48:bb:18:f8:51:48:37:d8:ac:c3:34:f5:2c:04:f9:a5:
b3:74:37:0e:5b:29:28:7e:1a:ab:c3:9d:21:e6:17:38:cf:87:
6c:ea:50:13:85:3a:8c:2a:b2:b7:87:81:a6:b2:bc:90:55:b2:
35:ea:43:d7:f8:06:e8:4f:32:c3:d7:6c:ef:74:25:34:94:5e:
01:7e:46:ab:f0:f5:98:0c:c0:5a:4a:4c:38:02:55:a6:8c:8d:
38:97:ef:58:22:37:ff:6a:32:2b:e8:46:d0:3c:5f:0a:79:7c:
88:48:3b:e5:b1:40:2d:75:ad:88:ca:59:f1:13:22:f0:c2:ca:
83:b0:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:29 2024 by rpki-client on console-ams.rpki-client.org