Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/4_5fBvQHqQAT2HcYDr0shVeAwOg.roa
File: 4_5fBvQHqQAT2HcYDr0shVeAwOg.roa (raw, json)
Hash identifier: f7Q8haJoInXzsVzErzlZmENJ0G7nbSXhsAMlpAXeRWg=
Subject key identifier: E3:FE:5F:06:F4:07:A9:00:13:D8:77:18:0E:BD:2C:85:57:80:C0:E8
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D0C833095689FB694A1A787EE87819118
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/4_5fBvQHqQAT2HcYDr0shVeAwOg.roa
Signing time: Mon 15 Jan 2024 09:45:40 +0000
ROA not before: Mon 15 Jan 2024 09:45:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6813
IP address blocks: 80.58.201.0/24 maxlen: 24
194.179.98.0/23 maxlen: 23
81.45.26.0/23 maxlen: 23
195.55.74.0/24 maxlen: 24
194.224.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 08:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:83:30:95:68:9f:b6:94:a1:a7:87:ee:87:81:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 15 09:45:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3fe5f06f407a90013d877180ebd2c855780c0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:55:47:f9:f0:9e:f0:f3:e2:dc:c3:c6:a3:
14:f9:a4:98:27:c7:89:77:81:9e:9e:3a:bb:44:8e:
af:cc:4e:f8:7c:40:b0:46:ca:5a:1d:0e:e9:0a:a8:
d0:6c:32:b9:cb:90:51:7b:0a:ff:d8:9c:8a:b8:e9:
5b:ca:c1:a0:00:ea:65:5e:e4:a2:bc:e6:4a:0c:66:
3e:57:dc:b2:36:b1:7c:e5:8e:b1:53:a8:25:76:b8:
65:e2:cc:e1:9c:07:f4:99:4c:e7:c7:51:3f:8f:ae:
46:1e:90:af:80:70:a5:51:a4:dd:1d:24:f5:58:1b:
3c:95:ce:70:20:ec:0b:84:27:11:fc:dc:29:ec:02:
44:3c:43:1d:4c:08:03:d0:0c:00:e6:f4:fc:26:5c:
9c:73:21:9d:74:f3:55:61:20:ae:e0:89:cb:34:80:
03:a0:03:60:9e:e8:62:ba:77:63:a4:23:08:40:e6:
d2:a1:68:e1:ff:c6:13:06:41:f6:46:20:53:15:8b:
0d:ee:bf:62:73:63:a8:80:3a:77:4f:bb:f2:5c:30:
a3:28:67:41:47:c0:6f:79:7f:66:f3:90:bd:73:2e:
05:89:54:e0:e6:22:67:82:e6:17:7f:1c:7e:74:16:
10:4e:45:5d:98:6c:62:8f:a9:b8:63:ce:67:88:34:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:5F:06:F4:07:A9:00:13:D8:77:18:0E:BD:2C:85:57:80:C0:E8
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/4_5fBvQHqQAT2HcYDr0shVeAwOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.58.201.0/24
81.45.26.0/23
194.179.98.0/23
194.224.158.0/24
195.55.74.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6a:57:12:b5:da:3c:09:52:1c:61:cc:38:36:38:96:57:75:
27:1a:09:ec:b3:bb:5e:28:e4:53:bf:ec:e0:18:d8:5a:29:e9:
eb:d2:7c:85:34:27:95:2c:47:00:fa:20:86:76:bd:da:76:17:
c4:d6:d7:8b:6b:ba:c0:38:f8:16:64:3c:f8:7e:61:4a:0e:9a:
2a:a8:31:15:54:8a:14:75:e7:43:c3:7c:48:d3:43:57:9d:4f:
3b:b6:26:3a:2a:ae:a6:c7:dc:cc:41:24:d1:3c:bb:b6:27:dc:
51:1c:25:3f:bb:b0:85:06:04:ef:bb:23:f4:1c:f0:6e:f6:bc:
94:7b:c6:ec:e0:98:f5:99:38:0e:08:c1:f6:bf:4c:c8:5b:e2:
22:78:7d:76:5d:5f:b7:d4:ef:0d:06:d6:d6:87:de:50:d6:2c:
b5:9a:73:92:31:db:6c:a1:40:5a:78:b6:44:49:03:58:7a:36:
ae:87:6d:d2:e0:95:a5:61:c4:27:11:e3:bd:c4:4e:87:b1:fc:
1b:10:5a:66:09:2a:94:7c:c1:cc:b9:7d:59:79:43:8e:d6:bf:
fd:69:f0:bc:da:57:5c:d4:bb:df:c3:28:56:a8:a6:31:ae:07:
94:63:d6:4a:ae:f5:04:74:ba:61:26:8c:99:ad:ac:13:21:59:
c5:cd:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:18 2024 by rpki-client on console-ams.rpki-client.org