Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ozkK3gGAfbavHv_i55dqYHmIL0s.roa
File: ozkK3gGAfbavHv_i55dqYHmIL0s.roa (raw, json)
Hash identifier: dtkfC+G7oBFZg8lBwk4BJw9CKI+UqH2AvYjJASQK5n4=
Subject key identifier: A3:39:0A:DE:01:80:7D:B6:AF:1E:FF:E2:E7:97:6A:60:79:88:2F:4B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB60548AE83F491C7CD70050C582A9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ozkK3gGAfbavHv_i55dqYHmIL0s.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 80.76.60.0/24 maxlen: 24
185.192.246.0/24 maxlen: 24
185.192.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:54:8a:e8:3f:49:1c:7c:d7:00:50:c5:82:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3390ade01807db6af1effe2e7976a6079882f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:e2:9b:b3:24:4f:48:d8:74:2d:82:f6:6e:
fd:17:9f:31:64:5d:ab:b9:2e:f3:de:1c:9a:7a:ca:
47:97:62:2e:a0:46:af:2c:d9:ea:ef:cb:fe:8b:9a:
06:8f:12:ad:d4:1c:c8:ca:25:cb:4d:43:65:5c:d1:
cd:3d:d8:3d:fd:a5:e4:f4:05:87:72:5e:fa:80:e1:
9c:d5:2f:fc:9d:68:03:17:9f:27:c8:b5:23:9b:95:
45:fe:51:48:5a:95:51:8b:30:00:8f:c6:dc:6f:aa:
8b:00:42:e2:37:11:8a:4d:33:e4:71:d6:4c:d8:9b:
52:9c:7f:b2:14:6e:7e:98:09:13:8b:6c:1b:c0:8d:
6a:23:af:0b:25:38:42:49:84:ba:ef:78:30:6c:93:
15:de:db:5d:28:6c:ee:f1:53:01:3b:bb:32:66:9a:
91:de:3a:8c:8c:4a:02:50:13:95:e5:cf:7b:4d:99:
5a:5b:fd:f8:6e:49:76:fa:b1:0f:27:6f:33:a6:c3:
46:1e:71:02:9b:c7:a5:0e:66:0b:ed:9a:e7:3b:9f:
26:ff:63:08:ff:bf:0d:b3:59:f1:35:d8:2d:1d:cd:
40:44:1b:ac:e7:ea:d0:5a:71:ff:77:24:af:11:ff:
9e:51:c9:c2:84:90:50:20:6a:8e:f2:2c:b8:01:07:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:0A:DE:01:80:7D:B6:AF:1E:FF:E2:E7:97:6A:60:79:88:2F:4B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ozkK3gGAfbavHv_i55dqYHmIL0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.60.0/24
185.192.246.0/23
Signature Algorithm: sha256WithRSAEncryption
56:83:be:8d:a7:c7:6c:e7:50:0b:ab:60:62:d4:1c:9a:16:d6:
e5:4b:5e:6a:e2:a5:c7:9d:76:21:c3:ba:99:44:8c:90:ac:39:
6e:51:fd:f0:64:fc:f0:c4:f9:ac:f2:2d:55:15:d5:ec:9a:4b:
6b:0b:bd:27:b3:00:c4:87:45:6f:93:04:0f:81:e3:bc:b4:10:
49:c1:b5:ab:f7:2b:62:64:b6:bb:a5:8c:78:c4:09:8c:68:e7:
db:6b:59:c7:1c:fd:85:fd:77:53:a3:96:ff:1d:39:0b:a5:3e:
75:3d:09:54:a4:7f:4d:c8:08:f2:01:c5:b0:f1:b4:13:4d:79:
10:47:c2:26:cd:14:95:35:be:e3:de:94:dd:5d:52:e8:05:24:
01:5f:6e:ec:a0:5a:6b:0a:c6:40:13:b7:db:ce:83:f4:e7:b2:
8b:f0:bf:3f:61:75:8b:7b:fb:af:35:9b:b5:e8:bf:06:57:f9:
48:95:29:4b:6a:ed:f8:25:62:1b:2e:db:70:df:aa:51:58:a0:
36:32:dc:6c:46:82:9c:e4:61:5f:bf:15:a1:3f:70:e4:1a:7a:
9c:b2:38:2a:b5:cd:b4:92:14:b3:b6:b3:75:bc:aa:11:24:c8:
c9:90:38:51:15:14:a7:20:4f:54:5a:00:75:59:43:a5:c5:63:
1a:d7:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:11 2025 by rpki-client