Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/DODgWaf9P4EMOr4lk0tk6MMtQeQ.roa
File: DODgWaf9P4EMOr4lk0tk6MMtQeQ.roa (raw, json)
Hash identifier: c1ZmlmDE++Gbk12FOozU+KTMvQd+ULmTXVrXzW4jM+Q=
Subject key identifier: 0C:E0:E0:59:A7:FD:3F:81:0C:3A:BE:25:93:4B:64:E8:C3:2D:41:E4
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 0194228DDC3BCA356A46E54FA1C576BC1DDB
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/DODgWaf9P4EMOr4lk0tk6MMtQeQ.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273189
IP address blocks: 80.80.90.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 27 Mar 2025 16:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:dc:3b:ca:35:6a:46:e5:4f:a1:c5:76:bc:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ce0e059a7fd3f810c3abe25934b64e8c32d41e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:d7:e2:79:1f:3b:17:b8:d8:20:97:c3:11:
82:42:79:fe:57:9a:ca:80:2e:a9:0c:85:6a:20:8d:
60:4a:07:19:b2:69:88:a0:01:26:24:45:ba:5a:02:
c0:73:81:6c:bc:25:7d:07:fd:8a:b0:9a:f4:78:09:
80:90:62:3b:91:53:49:fd:02:06:4f:9c:11:e1:3d:
3d:ab:be:34:75:25:a9:50:fa:88:3d:7b:55:72:00:
66:28:54:53:8e:06:a7:4d:18:12:d7:d3:31:00:08:
fd:57:72:80:33:a2:b0:60:58:1a:36:e4:db:60:fb:
53:67:26:b4:32:4b:03:4d:5a:20:4a:78:e6:57:45:
8f:86:6a:e4:2d:43:21:0b:7a:89:2b:6f:6c:55:31:
17:43:e2:53:25:5b:e0:f3:1f:f3:7d:9e:c8:5b:42:
f3:0f:70:50:31:b2:e2:6a:95:30:32:58:d4:9e:9d:
8d:45:ef:1a:a5:db:0f:ba:2a:c2:0d:b8:4b:7e:ff:
71:85:b3:c5:51:47:11:d7:0c:ce:5d:62:4e:37:ea:
a6:8d:2d:f7:4d:51:51:aa:47:b3:8d:f0:6e:0b:28:
22:c7:d7:ba:80:97:c7:1a:2a:12:39:12:e6:3b:3c:
50:bb:3c:b6:79:c0:03:e9:4f:35:66:35:77:67:a7:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E0:E0:59:A7:FD:3F:81:0C:3A:BE:25:93:4B:64:E8:C3:2D:41:E4
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/DODgWaf9P4EMOr4lk0tk6MMtQeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.90.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:5c:9f:b2:75:80:76:8d:84:7e:5d:7c:d4:3c:45:35:1d:bb:
1d:6f:9b:01:90:44:42:d0:18:f1:74:32:fc:b1:26:5b:8e:95:
ff:d7:f9:e6:bf:49:b6:32:af:2a:be:cb:bd:d9:68:dd:e7:17:
2e:e7:fb:e3:a7:31:5d:34:3a:4e:94:c7:e1:d6:17:48:ac:ec:
dc:9a:36:d4:9b:27:c5:18:35:87:06:b9:7f:29:eb:04:2c:a8:
f7:43:a8:b4:3c:c3:ce:0d:0c:d9:3b:f5:96:66:31:e6:c7:8f:
71:04:c6:5d:75:dd:d9:b2:49:21:38:89:72:7e:cb:7c:ac:cd:
35:8f:86:5e:fd:f6:e6:7e:35:a7:b8:51:1d:cc:e3:32:f4:28:
b5:17:28:70:50:8f:82:68:83:f7:a0:97:dd:99:c6:7a:41:20:
74:7a:39:a8:b3:da:d9:ca:58:e6:12:dc:c1:db:03:ab:f0:d4:
56:bf:79:20:38:66:28:45:05:56:7d:0c:1b:70:3e:57:98:bd:
4a:84:61:69:58:37:e7:b5:8f:78:72:66:ef:b8:a5:cb:a1:b6:
ff:f3:a7:66:af:db:f2:2c:95:bf:79:44:54:56:e1:98:5f:2a:
64:8d:fd:7e:7b:eb:88:ea:d6:32:54:57:ab:87:e4:29:a6:9b:
ab:cb:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:37:02 2025 by rpki-client