Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/R1akyXixyl6WkFyezilc05u6UuE.roa
File: R1akyXixyl6WkFyezilc05u6UuE.roa (raw, json)
Hash identifier: elgQlYxHjzUnKWG7vuVZ8o8W+6PnhmivOpD+SwTRztU=
Subject key identifier: 47:56:A4:C9:78:B1:CA:5E:96:90:5C:9E:CE:29:5C:D3:9B:BA:52:E1
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018601BB75CE77B26D3AF43F37B3EF464957
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/R1akyXixyl6WkFyezilc05u6UuE.roa
Signing time: Mon 30 Jan 2023 08:11:47 +0000
ROA not before: Mon 30 Jan 2023 08:11:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 80.254.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 06:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:bb:75:ce:77:b2:6d:3a:f4:3f:37:b3:ef:46:49:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 30 08:11:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4756a4c978b1ca5e96905c9ece295cd39bba52e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:70:69:cc:9e:85:8f:94:a5:23:fb:0c:bb:
74:d1:c9:49:f1:6b:28:70:69:9d:3a:74:b2:6e:59:
b8:0d:92:c7:70:f8:f5:59:be:d9:23:5c:ea:7d:e7:
ed:68:75:5c:63:cc:e6:a7:89:b8:52:de:53:b6:c4:
a8:31:0d:f0:ed:99:dd:61:e0:6b:29:e8:9e:54:62:
0e:69:7e:eb:f4:cd:00:c0:be:c3:78:a6:c7:e0:94:
3a:65:36:55:b4:25:fc:b8:86:b0:0c:95:78:3c:e6:
78:ff:63:05:ab:22:db:32:c1:2f:00:89:6a:a9:8d:
6e:33:ae:57:0b:3e:19:12:b5:6e:8b:51:d5:69:43:
cb:8a:be:c1:0c:58:b2:94:aa:f1:00:04:45:32:e9:
ef:70:89:f1:dd:2f:66:53:6d:98:49:15:e9:10:46:
7c:6d:94:dd:31:da:f6:1f:ce:52:11:a7:ad:1f:ae:
52:0c:c3:85:24:0e:ce:51:5a:3f:f0:5d:0c:93:fe:
f0:bf:52:5f:af:fe:10:d3:a8:6f:c5:fa:60:6a:6c:
51:b7:a3:55:f4:5a:a9:9d:2e:8c:47:ee:39:34:4a:
23:08:4b:ab:99:bc:fb:3c:2c:43:f9:ae:87:e2:bd:
da:ff:17:72:0b:2c:7d:c4:d8:f9:b9:23:11:37:53:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:56:A4:C9:78:B1:CA:5E:96:90:5C:9E:CE:29:5C:D3:9B:BA:52:E1
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/R1akyXixyl6WkFyezilc05u6UuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:10:e1:5c:60:d4:4b:1d:a2:41:54:18:b6:9e:55:bf:c6:50:
fd:e6:2b:ea:84:62:94:74:98:3b:6d:14:bf:23:60:1b:a8:fa:
0c:7b:fd:b1:e2:6f:26:35:2a:1f:1b:bd:86:4b:33:a7:00:29:
5e:ad:4a:95:0f:68:3a:a5:e4:43:87:86:73:ab:a2:a0:8a:4b:
44:d9:e2:2a:67:af:39:1e:2e:ce:91:b1:a0:2b:0e:7c:5b:bf:
02:fd:04:97:df:cb:f7:d5:c7:cc:78:72:fa:91:3b:2c:5a:39:
ed:ec:1d:06:5a:b9:76:54:91:ea:00:50:99:fd:e4:19:b1:fb:
54:ff:07:bc:29:f3:d6:56:d1:66:79:05:40:e1:31:a3:d9:45:
ce:cc:d5:e3:33:9b:49:5e:d1:4c:c8:b4:08:ea:4f:42:59:ff:
80:25:05:13:a4:67:cb:84:d2:e6:ce:cf:85:4f:af:14:60:a4:
f8:c9:79:31:f6:75:84:dd:5c:ec:ef:f0:fc:44:3b:09:93:e3:
e1:1c:83:89:10:c2:eb:85:49:fe:8a:0a:0d:81:57:ac:5e:b4:
0c:d0:9a:87:0b:f3:19:58:b0:6d:ca:56:c8:0c:63:7c:02:54:
a6:e2:8c:24:b3:5b:aa:33:b0:b3:21:40:37:9e:1b:a8:98:c4:
d4:90:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org