Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/_lfJjaKb0TvE5MoeMJ6XFvYYxxo.roa
File: _lfJjaKb0TvE5MoeMJ6XFvYYxxo.roa (raw, json)
Hash identifier: C4rCXD51+kKKmBknPrG8TrFsHNKhqf+437HYPw5X4gY=
Subject key identifier: FE:57:C9:8D:A2:9B:D1:3B:C4:E4:CA:1E:30:9E:97:16:F6:18:C7:1A
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 018CC64A056CDE2437999F6FADEFA3547E7A
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/_lfJjaKb0TvE5MoeMJ6XFvYYxxo.roa
Signing time: Mon 01 Jan 2024 18:29:48 +0000
ROA not before: Mon 01 Jan 2024 18:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48716
IP address blocks: 80.90.178.0/24 maxlen: 24
80.90.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 12:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:05:6c:de:24:37:99:9f:6f:ad:ef:a3:54:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 1 18:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe57c98da29bd13bc4e4ca1e309e9716f618c71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:8a:7b:83:06:ec:3d:e2:08:5f:b4:d6:ff:
46:f7:7a:de:29:de:09:40:f2:81:e8:79:c1:40:09:
bf:4f:54:5e:86:ec:20:11:38:d6:67:02:43:5a:82:
5b:24:f5:e2:3f:a0:ba:5c:f1:9c:bc:81:ed:3d:6c:
61:11:f0:a6:7d:a8:dc:a4:a4:36:05:fc:e3:d1:24:
d7:3d:8d:e9:f4:21:b1:39:a9:00:b7:28:98:63:74:
f4:f2:a0:34:fe:14:a0:e1:f0:0e:66:7f:e8:a8:19:
21:1c:c9:8b:b6:e3:b1:78:9f:a9:2e:78:61:03:6a:
4f:6f:b1:66:5c:8c:ba:34:34:c3:c7:dd:c9:09:a3:
4d:62:76:3a:16:2c:0b:87:68:18:0e:fa:c4:25:95:
7f:60:12:75:1c:c0:66:b3:43:66:ff:57:6f:3d:cc:
7c:b4:6f:eb:50:e2:87:53:9e:9c:c1:e2:44:65:86:
bc:88:b0:4a:39:5d:54:a9:b2:99:92:f5:6b:d0:6f:
3a:bd:f8:67:55:97:3d:c3:88:1b:4a:b1:21:55:f4:
e7:30:de:d3:f9:6b:c1:8b:12:eb:cb:30:e4:1f:f9:
09:3e:5c:39:98:77:6f:91:e0:cb:eb:e2:d4:27:ba:
7f:20:79:52:71:7a:e9:4b:0c:48:4b:e8:db:60:c0:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:C9:8D:A2:9B:D1:3B:C4:E4:CA:1E:30:9E:97:16:F6:18:C7:1A
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/_lfJjaKb0TvE5MoeMJ6XFvYYxxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.178.0/24
80.90.180.0/22
Signature Algorithm: sha256WithRSAEncryption
18:20:17:be:2b:44:d0:76:c0:09:d5:f3:32:ef:47:58:e0:73:
2a:fb:2b:37:32:f5:9f:36:5a:b4:dc:c8:72:75:49:a5:43:6f:
77:a2:24:02:d4:45:73:55:61:24:a7:d0:1c:8c:44:2d:93:2b:
3f:4a:e1:f1:ec:f2:76:c7:a9:06:89:a5:25:86:09:e9:0c:bd:
d9:4b:74:8f:ca:cb:84:f2:e6:15:c0:9b:fc:0f:cb:64:5e:77:
3e:98:b0:ae:7a:b4:48:84:9a:29:e6:68:9e:8d:57:db:24:8f:
d6:b9:6a:a8:92:2a:a2:f8:24:4e:f2:8a:27:e1:85:8d:3a:ef:
e1:fd:db:b5:74:16:26:ad:87:d3:1c:5b:38:39:54:22:19:2f:
6e:ac:e9:08:a7:71:e5:55:b2:ab:ee:b4:56:e3:4e:ab:35:0f:
0d:b1:da:bd:bd:c7:62:15:05:5b:55:2e:67:0f:56:0e:7a:e3:
e1:36:22:9a:72:3d:dd:39:68:3f:b8:63:90:72:90:ae:cc:8a:
83:9a:a2:6a:a0:0d:c2:06:6c:8b:d2:26:ac:37:8e:17:ce:9a:
3f:3a:e5:b1:f9:6f:1f:2b:b9:63:5e:12:c4:b8:d1:d5:7c:97:
65:05:23:86:33:f0:58:63:5f:0b:5d:44:4a:eb:99:f4:f2:d9:
55:50:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org