Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/JH6Df0ki0b9Hdwi1joTudyH9QIY.roa
File: JH6Df0ki0b9Hdwi1joTudyH9QIY.roa (raw, json)
Hash identifier: yx2wXIh12mYqMBkCh9Q+eEmaD8SUEaiccfYk4UABkJw=
Subject key identifier: 24:7E:83:7F:49:22:D1:BF:47:77:08:B5:8E:84:EE:77:21:FD:40:86
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 0186173672E6B9E06F9E8438605B48787CB3
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/JH6Df0ki0b9Hdwi1joTudyH9QIY.roa
Signing time: Fri 03 Feb 2023 12:18:09 +0000
ROA not before: Fri 03 Feb 2023 12:18:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212578
IP address blocks: 80.255.112.0/24 maxlen: 24
185.84.119.0/24 maxlen: 24
80.255.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 09:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:36:72:e6:b9:e0:6f:9e:84:38:60:5b:48:78:7c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Feb 3 12:18:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=247e837f4922d1bf477708b58e84ee7721fd4086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:52:94:95:b3:af:bb:d7:9c:40:64:d0:87:
83:44:14:f9:4d:bf:2c:cf:f1:24:7c:5d:38:c4:4e:
f6:32:14:c0:7d:6b:c0:21:ef:55:ea:31:62:41:0a:
46:6f:3a:11:a2:d7:3c:57:c3:da:0e:0f:1e:e6:bd:
eb:c3:cb:cb:64:ee:3a:0f:8d:e2:9b:00:25:99:8b:
50:7b:1d:15:81:49:82:2d:c8:2e:c2:c2:94:74:70:
73:26:e0:f3:a9:d0:fa:30:5f:e5:61:67:35:58:fe:
09:62:c1:c6:6d:6c:3f:28:d1:36:2a:de:1a:95:ca:
bc:f6:58:fb:af:a0:6a:c5:1d:80:8e:b5:c3:c1:61:
84:af:e6:46:71:c8:8e:dd:d1:10:fa:0d:f2:27:f4:
3a:e7:33:e7:c2:fc:bd:45:82:b5:47:f3:01:25:e1:
40:fd:22:61:05:19:c0:65:91:45:73:ad:8a:ec:7b:
7f:5d:4b:22:0f:da:a9:22:64:a1:1f:02:2b:7b:34:
7f:9b:bb:92:a5:8c:07:e2:c4:05:74:b7:4e:80:ac:
38:2f:e8:77:b5:e1:66:70:a1:ad:c0:ab:9a:dc:36:
a3:a7:59:5f:7f:06:fe:0c:bf:60:93:e9:1d:39:ce:
4e:85:66:d5:eb:27:35:82:fc:7d:f5:b2:42:45:7b:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:83:7F:49:22:D1:BF:47:77:08:B5:8E:84:EE:77:21:FD:40:86
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/JH6Df0ki0b9Hdwi1joTudyH9QIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.112.0/24
80.255.124.0/24
185.84.119.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fc:29:88:91:a2:bb:d7:38:b6:05:df:ab:53:df:b8:8f:54:
a4:5b:c2:71:10:14:67:86:5e:3a:58:c6:00:e8:0d:a0:5c:f9:
1f:45:9f:1e:b6:42:bb:72:5d:0f:ab:93:ef:b5:6f:2a:d0:32:
de:f0:c7:ab:f4:17:7c:af:76:7c:7f:6a:c3:a5:04:3f:74:bf:
e9:12:a0:7d:50:cf:cc:a1:3b:80:99:95:21:d2:85:8e:d5:ac:
3e:31:dd:52:2d:92:54:a4:55:86:41:9f:5e:b2:2c:4e:0c:27:
98:96:11:68:cb:6c:ce:b5:ab:48:d8:07:53:74:8a:af:12:19:
0f:94:e8:84:c6:1f:b6:54:37:b2:70:0b:c9:69:bd:c8:b0:0a:
fb:d6:97:cb:77:fd:a0:b4:dc:8f:14:15:91:b7:c5:8d:51:4b:
c0:bf:78:0f:0c:93:ed:bc:46:e4:0f:b8:24:ef:cd:b0:8a:ac:
17:75:c9:1a:13:41:7d:30:43:da:08:da:d9:98:5e:b6:0a:d4:
89:f4:04:91:08:66:74:a7:68:3c:1c:98:d8:3a:65:cd:8e:3f:
0f:20:d2:be:4b:eb:3e:c8:2e:ea:63:c1:91:5d:0b:f6:cf:9d:
e2:46:6f:57:c3:6d:b3:3a:42:f6:aa:69:9b:5c:45:33:a1:db:
06:f7:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org