Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hJrIUoz4GgLoc_tSz0vPHh0dZl4.roa
File: hJrIUoz4GgLoc_tSz0vPHh0dZl4.roa (raw, json)
Hash identifier: AeBDRT+t0SYlEVbfs1nUVoOHMZIL/RCnHgR/finP3Yw=
Subject key identifier: 84:9A:C8:52:8C:F8:1A:02:E8:73:FB:52:CF:4B:CF:1E:1D:1D:66:5E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01934DC6D8B28C11C26A2E6AE15EBC910C08
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hJrIUoz4GgLoc_tSz0vPHh0dZl4.roa
Signing time: Thu 21 Nov 2024 08:11:37 +0000
ROA not before: Thu 21 Nov 2024 08:11:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213829
IP address blocks: 80.64.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:c6:d8:b2:8c:11:c2:6a:2e:6a:e1:5e:bc:91:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 21 08:11:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=849ac8528cf81a02e873fb52cf4bcf1e1d1d665e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:57:71:5b:ad:8e:0b:ca:d4:1f:b7:d9:37:
cb:b6:e6:e4:a4:cd:35:d5:e2:86:3c:20:3b:01:4c:
b4:cd:62:82:88:2f:34:a6:36:89:07:66:4f:72:99:
af:35:23:3b:89:3b:3b:2e:32:b0:48:46:04:ff:91:
52:a3:f7:70:9e:89:77:cb:26:8a:be:cf:fd:da:bf:
1a:b9:f5:a1:fd:7b:5e:03:64:3c:17:9e:e9:9d:0e:
03:46:97:98:03:c0:41:18:f3:55:f2:60:5f:14:69:
53:03:05:0c:63:33:76:b3:03:d3:a0:21:fa:59:2d:
7a:c8:26:95:18:ef:91:08:fa:1f:77:11:d3:ba:f0:
71:92:f1:02:dc:71:cc:32:49:ce:e3:f5:aa:78:99:
b1:f0:24:bb:49:05:72:d1:0b:45:d8:66:ca:f6:88:
6d:01:fc:ad:45:c8:c8:59:fd:b3:09:db:84:57:64:
31:6f:8c:93:9b:5d:ab:1a:b8:de:df:30:86:84:7b:
0a:e3:86:49:42:d1:ca:dc:89:cf:6b:56:20:e9:92:
79:6f:80:a5:d1:73:9b:59:cd:a7:15:0c:80:dc:dd:
7f:7e:76:68:99:24:f3:a0:c5:17:e0:b1:a2:d9:79:
d1:b3:20:6e:27:28:bf:ac:0e:f1:19:4a:ec:86:68:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:C8:52:8C:F8:1A:02:E8:73:FB:52:CF:4B:CF:1E:1D:1D:66:5E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hJrIUoz4GgLoc_tSz0vPHh0dZl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.21.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b6:d0:ed:50:dc:87:dd:c3:a4:cc:1e:ce:08:fc:06:a7:de:
e4:d8:a9:c7:83:e0:00:4b:c4:86:97:d8:98:3f:4e:8e:26:fb:
52:82:d3:b8:c0:ee:a2:ec:9f:22:25:aa:0d:e9:38:c5:a4:14:
ab:c3:a7:35:a0:0d:84:b6:77:58:b5:c8:0e:88:66:aa:b7:8d:
ee:15:95:21:f5:da:56:03:0f:51:cc:c8:d4:05:db:72:a6:32:
3f:ba:1c:cc:fa:2b:f3:e7:e5:62:de:9e:0c:92:81:08:96:27:
c6:8f:7a:3f:49:2d:03:8d:58:6b:98:b0:51:cc:78:4e:41:6c:
fb:f2:37:82:cd:2b:59:1e:fc:e0:70:53:27:f8:44:ee:69:33:
5b:5d:23:2b:54:cd:67:e0:6f:e9:35:bc:6c:c6:09:fd:04:e8:
ae:5e:a8:41:54:bc:ca:7a:d2:3c:eb:c5:00:41:10:a7:94:4b:
13:5b:57:d5:d3:05:59:bf:84:3f:bd:e4:a5:c3:a5:0a:99:ce:
d2:6e:f2:9d:18:a7:d7:0b:33:44:b2:11:83:ad:42:ad:9b:e1:
b5:36:13:19:e9:03:e2:4f:ee:8f:98:63:85:31:da:51:96:25:
5c:50:b6:90:40:6e:60:55:11:db:ce:cd:ab:d6:79:42:64:98:
c7:c8:b3:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNNxtiyjBHCai5q4V68kQwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjQxMTIxMDgxMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDlhYzg1MjhjZjgxYTAyZTg3M2ZiNTJjZjRiY2YxZTFkMWQ2NjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJXcVutjgvK1B+32TfLtubkpM01
1eKGPCA7AUy0zWKCiC80pjaJB2ZPcpmvNSM7iTs7LjKwSEYE/5FSo/dwnol3yyaK
vs/92r8aufWh/XteA2Q8F57pnQ4DRpeYA8BBGPNV8mBfFGlTAwUMYzN2swPToCH6
WS16yCaVGO+RCPofdxHTuvBxkvEC3HHMMknO4/WqeJmx8CS7SQVy0QtF2GbK9oht
AfytRcjIWf2zCduEV2Qxb4yTm12rGrje3zCGhHsK44ZJQtHK3InPa1Yg6ZJ5b4Cl
0XObWc2nFQyA3N1/fnZomSTzoMUX4LGi2XnRsyBuJyi/rA7xGUrshmhCXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISayFKM+BoC6HP7Us9Lzx4dHWZeMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvaEpySVVvejRHZ0xvY190U3owdlBIaDBkWmw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEAVMA0G
CSqGSIb3DQEBCwUAA4IBAQBpttDtUNyH3cOkzB7OCPwGp97k2KnHg+AAS8SGl9iY
P06OJvtSgtO4wO6i7J8iJaoN6TjFpBSrw6c1oA2EtndYtcgOiGaqt43uFZUh9dpW
Aw9RzMjUBdtypjI/uhzM+ivz5+Vi3p4MkoEIlifGj3o/SS0DjVhrmLBRzHhOQWz7
8jeCzStZHvzgcFMn+ETuaTNbXSMrVM1n4G/pNbxsxgn9BOiuXqhBVLzKetI868UA
QRCnlEsTW1fV0wVZv4Q/veSlw6UKmc7SbvKdGKfXCzNEshGDrUKtm+G1NhMZ6QPi
T+6PmGOFMdpRliVcULaQQG5gVRHbzs2r1nlCZJjHyLOF
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:23 2025 by rpki-client