Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OdbkmExb1X8lqyJZ5he4qahUoNE.roa
File: OdbkmExb1X8lqyJZ5he4qahUoNE.roa (raw, json)
Hash identifier: HlkkKxMdYA5SZBkq/j8o/DzLghjDDYJXo/hQv+ioq4A=
Subject key identifier: 39:D6:E4:98:4C:5B:D5:7F:25:AB:22:59:E6:17:B8:A9:A8:54:A0:D1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018BAEC747645E0A1BEE899C8B7AE6F67932
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OdbkmExb1X8lqyJZ5he4qahUoNE.roa
Signing time: Wed 08 Nov 2023 11:52:57 +0000
ROA not before: Wed 08 Nov 2023 11:52:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34552
IP address blocks: 80.75.80.0/20 maxlen: 20
78.109.112.0/20 maxlen: 20
78.109.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:c7:47:64:5e:0a:1b:ee:89:9c:8b:7a:e6:f6:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 8 11:52:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39d6e4984c5bd57f25ab2259e617b8a9a854a0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:c2:1a:ff:4d:a1:be:1c:d1:0e:82:da:ca:
8b:17:fe:75:4e:f1:75:c1:ee:83:18:40:83:f3:cc:
77:93:23:69:57:1f:59:86:ce:8f:97:b0:d1:71:23:
21:2e:af:97:2b:a5:3d:45:b8:08:21:3e:c1:c3:3b:
68:5b:16:cc:16:3b:54:16:93:5c:29:93:7b:05:e7:
38:55:c5:53:68:1b:1d:26:4a:98:42:2f:1e:8a:a5:
b4:70:11:fd:07:8b:3a:5a:72:12:b4:c1:31:7a:7f:
09:7d:4c:f9:4c:37:48:c0:10:51:d2:1e:ea:b9:f5:
1b:26:e2:fc:c4:3c:3a:14:fa:a2:ec:4a:e7:ee:59:
3f:47:30:49:24:db:dd:80:8e:42:43:14:64:ce:3d:
2a:41:1d:fd:80:45:c8:22:e9:5b:76:30:2e:af:08:
58:3b:d7:83:9d:85:57:7c:2f:26:24:e2:28:4e:4b:
2b:35:76:f1:ac:6d:d7:68:bf:19:9c:76:8e:34:cd:
ce:f6:9e:4c:75:05:21:b8:b7:b1:f7:79:2b:1f:f4:
15:93:74:a6:6d:67:d3:c1:33:a1:55:94:ec:22:2b:
0d:ba:be:6e:cf:50:b2:7c:21:7b:5c:5d:0d:bb:a2:
59:1f:b9:3f:38:13:63:4c:62:43:26:97:f5:64:bc:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:E4:98:4C:5B:D5:7F:25:AB:22:59:E6:17:B8:A9:A8:54:A0:D1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OdbkmExb1X8lqyJZ5he4qahUoNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.112.0/20
80.75.80.0/20
Signature Algorithm: sha256WithRSAEncryption
67:f0:ca:57:40:ad:58:b1:27:01:da:d7:58:12:c2:08:fa:c8:
89:87:d1:8f:cb:d9:b0:a5:b4:c5:a2:73:00:e7:e9:ed:5b:5b:
35:27:2a:2a:f5:2a:b1:cf:97:95:b4:68:cc:f7:d0:51:37:b9:
0f:e4:9a:51:e9:0e:cb:96:05:c3:d2:9b:b4:b8:9c:e2:c9:61:
d5:45:ce:ba:d2:12:e1:0a:69:be:36:0d:cb:59:c7:a7:22:fb:
40:54:8f:be:e5:13:de:18:01:0d:60:87:86:14:18:63:7f:1e:
8a:8d:6a:86:4b:41:08:4c:dc:dd:93:49:0b:da:16:82:13:1f:
1c:bd:f0:94:a7:2a:09:d5:52:c8:76:27:e3:ef:ae:e1:19:5f:
2f:5e:3f:5c:99:7a:dd:46:32:80:9b:93:d5:eb:98:87:d7:db:
92:50:30:9d:9a:25:df:8e:68:1f:60:3d:0f:eb:81:07:65:f3:
c5:20:33:9f:26:96:bb:87:67:c0:2b:40:0f:28:1e:98:76:c0:
b1:cf:ab:1a:e4:31:7e:46:8e:85:d3:6d:27:ce:30:ed:b3:35:
2f:da:2d:7b:ec:d8:3f:98:58:03:74:d7:09:1f:23:d9:22:46:
1a:9a:76:ef:20:cf:08:06:57:81:bb:ad:8f:e8:96:7a:f5:18:
7b:4d:67:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuux0dkXgob7omci3rm9nkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMxMTA4MTE1MjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWQ2ZTQ5ODRjNWJkNTdmMjVhYjIyNTllNjE3YjhhOWE4NTRhMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8fCGv9Nob4c0Q6C2sqLF/51TvF1
we6DGECD88x3kyNpVx9Zhs6Pl7DRcSMhLq+XK6U9RbgIIT7BwztoWxbMFjtUFpNc
KZN7Bec4VcVTaBsdJkqYQi8eiqW0cBH9B4s6WnIStMExen8JfUz5TDdIwBBR0h7q
ufUbJuL8xDw6FPqi7Ern7lk/RzBJJNvdgI5CQxRkzj0qQR39gEXIIulbdjAurwhY
O9eDnYVXfC8mJOIoTksrNXbxrG3XaL8ZnHaONM3O9p5MdQUhuLex93krH/QVk3Sm
bWfTwTOhVZTsIisNur5uz1CyfCF7XF0Nu6JZH7k/OBNjTGJDJpf1ZLyagQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDnW5JhMW9V/JasiWeYXuKmoVKDRMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvT2Ria21FeGIxWDhscXlKWjVoZTRxYWhVb05FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETm1wAwQE
UEtQMA0GCSqGSIb3DQEBCwUAA4IBAQBn8MpXQK1YsScB2tdYEsII+siJh9GPy9mw
pbTFonMA5+ntW1s1Jyoq9Sqxz5eVtGjM99BRN7kP5JpR6Q7LlgXD0pu0uJziyWHV
Rc660hLhCmm+Ng3LWcenIvtAVI++5RPeGAENYIeGFBhjfx6KjWqGS0EITNzdk0kL
2haCEx8cvfCUpyoJ1VLIdifj767hGV8vXj9cmXrdRjKAm5PV65iH19uSUDCdmiXf
jmgfYD0P64EHZfPFIDOfJpa7h2fAK0APKB6YdsCxz6sa5DF+Ro6F020nzjDtszUv
2i177Ng/mFgDdNcJHyPZIkYamnbvIM8IBleBu62P6JZ69Rh7TWet
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org