Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/gRPOs6Fbnv8ZEZXVhnuk6neNDYU.roa
File: gRPOs6Fbnv8ZEZXVhnuk6neNDYU.roa (raw, json)
Hash identifier: BiwEl61Xthvg/cJL5f2MzK9WFvk/vLNgd22UoVIfrWk=
Subject key identifier: 81:13:CE:B3:A1:5B:9E:FF:19:11:95:D5:86:7B:A4:EA:77:8D:0D:85
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 01856DDD542F7FD16598F635F5D5FEC1DE39
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/gRPOs6Fbnv8ZEZXVhnuk6neNDYU.roa
Signing time: Sun 01 Jan 2023 15:04:59 +0000
ROA not before: Sun 01 Jan 2023 15:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 80.82.4.0/24 maxlen: 24
80.82.3.0/24 maxlen: 24
80.82.0.0/24 maxlen: 24
80.82.2.0/24 maxlen: 24
80.82.1.0/24 maxlen: 24
80.82.11.0/24 maxlen: 24
80.82.10.0/24 maxlen: 24
80.82.5.0/24 maxlen: 24
80.82.7.0/24 maxlen: 24
80.82.6.0/24 maxlen: 24
80.82.9.0/24 maxlen: 24
80.82.8.0/24 maxlen: 24
80.82.12.0/24 maxlen: 24
80.82.14.0/24 maxlen: 24
80.82.13.0/24 maxlen: 24
80.82.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:54:2f:7f:d1:65:98:f6:35:f5:d5:fe:c1:de:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jan 1 15:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8113ceb3a15b9eff191195d5867ba4ea778d0d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:45:68:1b:be:57:73:08:33:25:03:28:38:
bc:45:6a:31:07:77:76:70:7e:01:23:43:23:21:81:
34:8b:54:55:a5:12:a6:cb:40:cd:ca:05:84:9f:78:
6f:b5:1d:f0:88:4c:0c:ba:d9:73:60:8e:c6:e7:e1:
a7:53:e2:c9:eb:1b:21:d1:2d:4e:d7:89:e0:44:00:
f3:be:62:53:dd:2e:03:f3:c4:1c:c5:2c:d0:e4:ed:
b2:1c:b3:4d:60:ff:a3:86:ac:03:fe:07:7a:5c:29:
6b:db:78:22:1d:89:41:89:69:c0:44:70:51:4b:d0:
3d:8e:b1:fd:2d:26:20:46:63:0c:e4:69:cc:fd:a8:
ca:bd:e0:82:40:f7:50:08:0b:4a:90:28:63:40:27:
48:57:9b:9d:ad:68:db:ed:ed:18:86:55:fc:86:3e:
e4:08:c6:7c:3e:1c:fe:8b:a0:76:b8:d8:60:16:87:
47:4e:5d:5c:3e:d7:73:d3:8e:b4:46:de:02:67:1e:
34:58:4f:f4:c0:d8:6d:c4:9a:52:c3:d4:11:3f:26:
35:e5:2b:5d:ae:7a:02:e9:5d:8e:15:07:e1:c8:b2:
0b:c5:93:aa:af:81:2b:83:54:d0:e4:48:04:24:be:
f1:35:6d:f3:90:68:db:c4:b0:dd:6b:5d:eb:45:0b:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:CE:B3:A1:5B:9E:FF:19:11:95:D5:86:7B:A4:EA:77:8D:0D:85
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/gRPOs6Fbnv8ZEZXVhnuk6neNDYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:26:c4:61:52:9f:06:b2:c9:6f:95:45:f1:72:c8:d9:e0:a7:
43:e9:dc:57:5e:99:29:f6:18:ae:2a:36:3c:9a:bf:d4:4c:b3:
2e:f2:a9:94:7c:d7:df:c5:e7:d4:d2:7c:24:1b:fa:cf:96:cd:
ae:37:02:90:0d:51:49:b5:c3:38:45:77:f6:b7:c9:77:cc:6a:
0d:6a:6c:7b:ed:2a:0a:4c:95:7e:ae:25:7a:cb:1d:f1:f2:cc:
ed:8d:16:56:09:92:f5:8f:e8:c6:f8:a8:05:2c:ca:e6:d6:dd:
10:c8:45:56:61:84:32:02:94:13:dd:6e:a3:46:57:1e:63:aa:
a7:b3:37:50:6a:7b:50:b4:3f:a0:d4:c3:4a:4c:6f:e6:f0:95:
16:2e:32:86:3b:ec:49:0b:77:cc:58:67:ac:46:22:a1:66:98:
37:be:84:d2:27:9d:07:9a:b8:2a:64:86:91:e9:2f:4a:ce:1a:
c3:1c:9b:bf:9d:e2:5c:9d:5b:32:a5:c7:92:fd:4c:42:d4:43:
43:ac:62:4d:ca:3d:f3:16:f6:3d:95:38:00:3b:26:e3:da:72:
9f:88:71:02:d8:ff:ef:9e:ec:b9:a5:27:a0:4f:99:47:ec:43:
1f:02:61:f7:43:d8:ed:86:d7:89:d1:c3:20:cd:9b:38:37:2a:
dd:6c:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org