Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/rRyQaiHypFjgzbInHcWjMXAx5C8.roa
File: rRyQaiHypFjgzbInHcWjMXAx5C8.roa (raw, json)
Hash identifier: wuRdkgDX0M9iqDxmP5tk+LBrbwBsAKJG998q+vFcaUs=
Subject key identifier: AD:1C:90:6A:21:F2:A4:58:E0:CD:B2:27:1D:C5:A3:31:70:31:E4:2F
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0186589BD418A92679162C7D54E9F6608A0B
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/rRyQaiHypFjgzbInHcWjMXAx5C8.roa
Signing time: Thu 16 Feb 2023 05:04:12 +0000
ROA not before: Thu 16 Feb 2023 05:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 80.73.120.0/21 maxlen: 24
80.88.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 01:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:9b:d4:18:a9:26:79:16:2c:7d:54:e9:f6:60:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Feb 16 05:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad1c906a21f2a458e0cdb2271dc5a3317031e42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:98:25:47:d7:5d:7d:59:00:27:d7:25:5e:
53:8d:76:11:35:0f:6d:66:cb:f5:24:f5:89:9a:fd:
a4:55:e0:34:7d:cd:93:5b:db:7d:56:92:39:04:7e:
ed:ee:fe:65:10:9a:4b:9f:23:52:0a:8d:8e:86:d7:
59:57:ec:5b:dd:db:d8:48:ad:c1:2e:f4:80:a7:a3:
76:4f:7b:1a:f1:0b:2b:b0:8e:a9:6c:ad:d3:c8:9f:
be:c3:0a:bb:c4:88:2c:32:44:96:0c:43:2d:d2:15:
ed:df:d0:75:14:a4:3b:a6:3f:34:7c:89:82:70:4b:
2f:5a:15:71:50:cd:19:af:43:52:72:e8:cb:1f:33:
c3:7c:81:8a:d9:73:a7:65:0b:df:f9:a8:31:96:1f:
48:e0:9f:a9:25:ed:8a:8e:b8:88:33:bb:b7:5e:c0:
44:5d:33:38:3e:8e:a9:83:da:5c:53:45:3b:2a:25:
fe:6a:72:84:ca:26:f2:13:41:a7:68:71:34:0c:de:
9f:f0:08:f5:2b:13:8f:e3:fc:35:60:65:1f:93:2e:
47:fc:15:04:37:06:3e:28:84:ee:df:d9:8b:04:63:
25:dc:90:bc:d8:76:72:24:08:55:d7:c3:cd:c1:6d:
40:2d:c3:8d:28:17:b6:d1:56:cf:69:6c:74:08:64:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1C:90:6A:21:F2:A4:58:E0:CD:B2:27:1D:C5:A3:31:70:31:E4:2F
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/rRyQaiHypFjgzbInHcWjMXAx5C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.120.0/21
80.88.76.0/22
Signature Algorithm: sha256WithRSAEncryption
95:b0:da:ee:f7:eb:b3:a2:13:04:1c:04:eb:75:60:0b:ee:6d:
38:db:10:e7:bc:c3:d5:80:5e:7b:86:73:57:0e:2f:e4:a3:88:
f7:33:fb:ce:b8:3a:72:36:4a:b5:46:ab:e1:ac:e2:0f:01:12:
99:d2:3c:d2:a1:9f:dc:a0:10:d0:43:11:59:a7:e8:2f:00:1d:
cf:88:43:94:58:87:30:09:aa:14:7a:28:e3:11:94:cf:d1:8f:
c7:b5:5b:4d:ba:d6:e2:54:24:fa:a4:7c:49:d2:06:92:c0:bd:
a9:f1:56:20:60:13:8e:e9:6f:b7:95:86:1a:17:83:ef:ad:a4:
55:e9:79:ac:b6:6f:0d:67:4d:91:b6:ba:6b:b8:f0:b4:74:21:
a3:9b:85:fb:38:03:be:8a:7c:97:e9:e4:78:33:55:a4:7d:b5:
bd:e2:4b:96:71:cc:f7:ae:e3:61:9c:f2:1f:63:65:fc:6e:2c:
f8:9b:9a:6e:7d:7f:c9:59:d5:fd:b0:f9:7b:5c:f5:d0:db:79:
2b:4d:71:1a:a1:d4:38:97:5b:a2:53:4b:dc:84:4f:d5:5c:4b:
cb:df:a5:cd:29:c9:d5:66:96:3f:3e:6d:28:cc:b1:7b:28:52:
1e:76:6b:41:97:3a:3f:fd:b2:ca:44:6f:df:bc:13:4a:12:bd:
71:66:4e:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZYm9QYqSZ5Fix9VOn2YIoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjMwMjE2MDUwNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDFjOTA2YTIxZjJhNDU4ZTBjZGIyMjcxZGM1YTMzMTcwMzFlNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPKYJUfXXX1ZACfXJV5TjXYRNQ9t
Zsv1JPWJmv2kVeA0fc2TW9t9VpI5BH7t7v5lEJpLnyNSCo2OhtdZV+xb3dvYSK3B
LvSAp6N2T3sa8QsrsI6pbK3TyJ++wwq7xIgsMkSWDEMt0hXt39B1FKQ7pj80fImC
cEsvWhVxUM0Zr0NScujLHzPDfIGK2XOnZQvf+agxlh9I4J+pJe2KjriIM7u3XsBE
XTM4Po6pg9pcU0U7KiX+anKEyibyE0GnaHE0DN6f8Aj1KxOP4/w1YGUfky5H/BUE
NwY+KITu39mLBGMl3JC82HZyJAhV18PNwW1ALcONKBe20VbPaWx0CGSn4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK0ckGoh8qRY4M2yJx3FozFwMeQvMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvclJ5UWFpSHlwRmpnemJJbkhjV2pNWEF4NUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUEl4AwQC
UFhMMA0GCSqGSIb3DQEBCwUAA4IBAQCVsNru9+uzohMEHATrdWAL7m042xDnvMPV
gF57hnNXDi/ko4j3M/vOuDpyNkq1RqvhrOIPARKZ0jzSoZ/coBDQQxFZp+gvAB3P
iEOUWIcwCaoUeijjEZTP0Y/HtVtNutbiVCT6pHxJ0gaSwL2p8VYgYBOO6W+3lYYa
F4PvraRV6Xmstm8NZ02RtrpruPC0dCGjm4X7OAO+inyX6eR4M1WkfbW94kuWccz3
ruNhnPIfY2X8biz4m5pufX/JWdX9sPl7XPXQ23krTXEaodQ4l1uiU0vchE/VXEvL
36XNKcnVZpY/Pm0ozLF7KFIedmtBlzo//bLKRG/fvBNKEr1xZk6x
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:59 2024 by rpki-client on console-ams.rpki-client.org