Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1FPrE3394tHHPZdGcKYF02RjYk0.roa
File: 1FPrE3394tHHPZdGcKYF02RjYk0.roa (raw, json)
Hash identifier: LCZJE7ZhpS2BZ5ZD5WnDm+4vQuZLyqwW9/EYHJYjWyk=
Subject key identifier: D4:53:EB:13:7D:FD:E2:D1:C7:3D:97:46:70:A6:05:D3:64:63:62:4D
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0185F34CAE8434FEC8DC735CB8A7E4FC82DD
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1FPrE3394tHHPZdGcKYF02RjYk0.roa
Signing time: Fri 27 Jan 2023 12:56:06 +0000
ROA not before: Fri 27 Jan 2023 12:56:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 80.90.184.0/21 maxlen: 24
80.90.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jan 2023 18:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:4c:ae:84:34:fe:c8:dc:73:5c:b8:a7:e4:fc:82:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 27 12:56:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d453eb137dfde2d1c73d974670a605d36463624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:20:1a:77:89:36:10:87:94:f3:12:27:df:
c7:64:26:84:c2:b2:95:8a:7f:6c:43:55:2f:02:64:
dd:f2:52:b6:02:ff:4d:59:8a:6d:32:5f:d4:33:96:
0e:cd:b8:38:70:0e:d9:b1:2a:4b:35:51:d4:6e:8a:
30:30:00:26:56:f8:91:e6:e8:6f:09:80:86:57:b0:
ed:4d:05:fb:58:ff:b0:da:9d:b7:81:e4:44:20:b7:
a8:36:af:e0:28:02:c9:8c:1d:1f:be:ec:0a:76:49:
73:b1:f5:47:eb:45:68:ca:a7:2c:ed:02:44:c7:39:
88:4b:08:f5:7b:bb:c7:d7:21:05:8e:2b:e1:12:5e:
2b:f3:c4:26:55:a3:e6:c2:a4:d9:ae:49:f7:20:79:
32:55:2d:06:35:26:7c:ff:12:59:c4:b5:2c:e6:1c:
86:1b:a8:ae:d1:13:c9:4c:a1:08:18:c8:db:f2:64:
89:a8:a7:f3:e2:85:66:75:cc:56:9e:2e:c6:d1:4a:
46:9f:9d:d9:d3:ef:f1:ee:fb:a4:e2:46:78:d1:f2:
3e:d2:5c:18:f1:89:cf:f6:46:f8:a3:5b:2b:20:3c:
e0:c3:04:8b:89:75:3e:56:78:50:41:fd:3a:60:15:
21:7e:2d:50:d1:00:91:30:e2:a5:c7:3f:64:47:93:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:EB:13:7D:FD:E2:D1:C7:3D:97:46:70:A6:05:D3:64:63:62:4D
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1FPrE3394tHHPZdGcKYF02RjYk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0-80.90.191.255
Signature Algorithm: sha256WithRSAEncryption
27:2f:8a:a9:9c:c4:be:40:b9:14:e1:e9:d8:e3:fa:dc:4b:65:
54:a3:fd:64:d6:e2:89:fc:27:f4:05:75:99:8d:61:ac:4e:ec:
17:f4:95:55:ad:ec:bb:20:72:0f:6e:58:3d:da:f9:79:25:2e:
2f:07:d0:e3:6d:9c:dc:3f:94:21:a4:b5:47:54:f9:91:6c:f7:
ba:76:5a:48:7d:64:0c:69:62:3a:0e:c4:70:2d:4f:46:5a:25:
b0:03:f0:0c:33:1e:a1:d5:32:5f:a3:0e:d9:db:c7:00:66:a4:
5d:d2:e3:2f:14:84:a3:63:8f:d8:9c:18:23:9c:79:c5:09:a1:
7f:a6:d9:62:f5:32:80:1f:9a:93:ad:08:21:1d:f2:89:18:c4:
90:d8:c7:f4:f1:89:01:34:68:e2:2c:56:6c:33:27:0d:b9:a6:
e2:5c:75:8f:b0:f9:a2:53:95:70:70:75:83:fa:2f:95:38:7e:
b7:ed:e3:01:59:38:b7:d2:6b:c7:30:71:9e:5c:cb:54:66:b3:
cf:f6:ab:eb:6f:d2:fa:16:69:32:14:9d:63:65:87:e2:8e:0d:
54:27:dc:0c:b6:89:15:4c:3c:ae:fd:10:e1:d3:7e:21:67:ac:
0c:15:97:62:8d:42:d0:22:a6:4d:30:fb:8f:41:75:fe:a3:c5:
30:69:77:ec
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYXzTK6ENP7I3HNcuKfk/ILdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2
N2VmMTMwHhcNMjMwMTI3MTI1NjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDUzZWIxMzdkZmRlMmQxYzczZDk3NDY3MGE2MDVkMzY0NjM2MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qggGneJNhCHlPMSJ9/HZCaEwrKV
in9sQ1UvAmTd8lK2Av9NWYptMl/UM5YOzbg4cA7ZsSpLNVHUboowMAAmVviR5uhv
CYCGV7DtTQX7WP+w2p23geREILeoNq/gKALJjB0fvuwKdklzsfVH60Voyqcs7QJE
xzmISwj1e7vH1yEFjivhEl4r88QmVaPmwqTZrkn3IHkyVS0GNSZ8/xJZxLUs5hyG
G6iu0RPJTKEIGMjb8mSJqKfz4oVmdcxWni7G0UpGn53Z0+/x7vuk4kZ40fI+0lwY
8YnP9kb4o1srIDzgwwSLiXU+VnhQQf06YBUhfi1Q0QCRMOKlxz9kR5O3PwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNRT6xN9/eLRxz2XRnCmBdNkY2JNMB8GA1UdIwQY
MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt
YjI1MDk5N2ZjNzVkLzEvMUZQckUzMzk0dEhIUFpkR2NLWUYwMlJqWWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk
LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJQWrQD
BAZQWoAwDQYJKoZIhvcNAQELBQADggEBACcviqmcxL5AuRTh6djj+txLZVSj/WTW
4on8J/QFdZmNYaxO7Bf0lVWt7Lsgcg9uWD3a+XklLi8H0ONtnNw/lCGktUdU+ZFs
97p2Wkh9ZAxpYjoOxHAtT0ZaJbAD8AwzHqHVMl+jDtnbxwBmpF3S4y8UhKNjj9ic
GCOcecUJoX+m2WL1MoAfmpOtCCEd8okYxJDYx/TxiQE0aOIsVmwzJw25puJcdY+w
+aJTlXBwdYP6L5U4frft4wFZOLfSa8cwcZ5cy1Rms8/2q+tv0voWaTIUnWNlh+KO
DVQn3Ay2iRVMPK79EOHTfiFnrAwVl2KNQtAipk0w+49Bdf6jxTBpd+w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org