Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4dyTESoQX4Cuf-u_bAe2x9jVDTI.roa
File: 4dyTESoQX4Cuf-u_bAe2x9jVDTI.roa (raw, json)
Hash identifier: 5q4SPy3p+JACQmBPnmxUZSi8Y+L5M8RzcTR/YV4L4EI=
Subject key identifier: E1:DC:93:11:2A:10:5F:80:AE:7F:EB:BF:6C:07:B6:C7:D8:D5:0D:32
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DC59EFBAFC189B6D86DC4327A1C73
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4dyTESoQX4Cuf-u_bAe2x9jVDTI.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12810
IP address blocks: 80.75.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c5:9e:fb:af:c1:89:b6:d8:6d:c4:32:7a:1c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1dc93112a105f80ae7febbf6c07b6c7d8d50d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:dc:71:24:77:14:36:fa:b6:2d:b4:80:22:
b3:fc:c3:c2:04:22:f5:0f:8f:1c:ae:d5:9d:55:21:
a8:19:28:c4:b7:18:e9:dc:14:63:26:3d:54:60:33:
95:2c:aa:0c:ab:e8:aa:2b:25:49:2a:a0:3d:ec:fa:
c1:04:f7:81:e8:68:34:1f:8f:91:65:11:8a:95:5e:
a7:e5:66:22:6d:44:d3:c8:79:c3:a6:e2:ed:7a:8c:
a5:f8:a0:5a:ab:78:b2:b2:12:ee:86:44:ed:fa:2c:
e1:72:96:ef:0b:c2:b0:12:a0:95:37:5f:8c:88:e6:
1e:f1:82:53:7f:33:5c:81:39:39:b9:1b:6f:b0:da:
c5:d1:ce:b0:24:83:97:94:c6:8d:d4:ad:16:1b:e5:
fc:3d:6d:66:b6:08:ab:18:fc:a8:23:40:cf:f7:99:
e0:ff:6c:a8:d1:4d:07:cb:24:ab:ee:51:bc:6d:57:
12:a7:d0:17:a4:c6:37:46:55:4d:b5:6b:3d:82:9f:
41:8d:46:7f:d8:bc:98:7f:f8:e4:44:f9:4e:a2:8b:
44:16:1a:fe:4e:74:97:3c:4c:a6:1e:09:63:a5:3c:
87:c9:56:4d:32:2e:61:61:3f:0f:ec:91:02:94:3f:
84:8a:da:d4:22:69:8c:25:c4:40:c8:02:4b:5d:41:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:93:11:2A:10:5F:80:AE:7F:EB:BF:6C:07:B6:C7:D8:D5:0D:32
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4dyTESoQX4Cuf-u_bAe2x9jVDTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:7a:69:e4:83:dc:1f:86:f7:d7:ce:53:0b:60:58:32:7b:52:
20:65:e9:37:3f:05:2a:71:86:e5:39:95:ac:0a:99:e8:fe:03:
85:79:d5:36:91:4a:e8:f8:01:08:31:4b:94:06:7a:62:a3:e3:
0e:7a:9f:0c:3b:ac:af:a9:1e:6b:ff:d3:32:28:28:35:99:11:
5b:7e:b4:e5:c9:0e:cb:8f:34:13:d2:ca:f1:eb:66:28:7b:e7:
91:e4:a4:6b:f9:3e:78:b7:48:58:c3:4d:4e:66:34:1d:de:24:
49:13:86:c3:de:aa:68:6a:88:70:87:c3:3c:fe:8e:05:ee:31:
84:59:3c:6c:f6:70:7d:80:41:77:23:99:65:d0:a3:2c:50:47:
b3:b7:5b:9f:2e:88:68:d1:95:17:1c:80:55:d3:0e:9a:9b:ac:
8e:5d:ad:30:45:e4:41:d1:92:d9:14:64:66:52:e4:1c:7b:8a:
0c:5a:b1:cb:08:0a:ca:c6:5a:1f:11:01:c1:a3:00:ee:3b:ef:
08:28:82:77:c5:9e:1d:f0:6a:b7:60:3b:03:c0:09:d6:2f:67:
41:04:70:e4:26:b5:aa:ed:63:61:ed:9f:73:3f:d8:11:e5:92:
fb:66:53:b7:64:4f:1f:bc:88:ae:11:e4:44:37:f2:fc:1b:72:
77:cf:50:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXcWe+6/BibbYbcQyehxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjMwMTAxMjIwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWRjOTMxMTJhMTA1ZjgwYWU3ZmViYmY2YzA3YjZjN2Q4ZDUwZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcDccSR3FDb6ti20gCKz/MPCBCL1
D48crtWdVSGoGSjEtxjp3BRjJj1UYDOVLKoMq+iqKyVJKqA97PrBBPeB6Gg0H4+R
ZRGKlV6n5WYibUTTyHnDpuLteoyl+KBaq3iyshLuhkTt+izhcpbvC8KwEqCVN1+M
iOYe8YJTfzNcgTk5uRtvsNrF0c6wJIOXlMaN1K0WG+X8PW1mtgirGPyoI0DP95ng
/2yo0U0HyySr7lG8bVcSp9AXpMY3RlVNtWs9gp9BjUZ/2LyYf/jkRPlOootEFhr+
TnSXPEymHgljpTyHyVZNMi5hYT8P7JEClD+EitrUImmMJcRAyAJLXUFmAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHckxEqEF+Arn/rv2wHtsfY1Q0yMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvNGR5VEVTb1FYNEN1Zi11X2JBZTJ4OWpWRFRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUEs0MA0G
CSqGSIb3DQEBCwUAA4IBAQBKemnkg9wfhvfXzlMLYFgye1IgZek3PwUqcYblOZWs
Cpno/gOFedU2kUro+AEIMUuUBnpio+MOep8MO6yvqR5r/9MyKCg1mRFbfrTlyQ7L
jzQT0srx62Yoe+eR5KRr+T54t0hYw01OZjQd3iRJE4bD3qpoaohwh8M8/o4F7jGE
WTxs9nB9gEF3I5ll0KMsUEezt1ufLoho0ZUXHIBV0w6am6yOXa0wReRB0ZLZFGRm
UuQce4oMWrHLCArKxlofEQHBowDuO+8IKIJ3xZ4d8Gq3YDsDwAnWL2dBBHDkJrWq
7WNh7Z9zP9gR5ZL7ZlO3ZE8fvIiuEeREN/L8G3J3z1Df
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org