Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/4N6QV-lUpgZe5I9AcYqSDyp43nU.roa
File: 4N6QV-lUpgZe5I9AcYqSDyp43nU.roa (raw, json)
Hash identifier: MSHLp33gJPcDSFggN3oUEwqQYEUuWLVnugEUCOLEitU=
Subject key identifier: E0:DE:90:57:E9:54:A6:06:5E:E4:8F:40:71:8A:92:0F:2A:78:DE:75
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018DF295EE030412C0EE896FD91F914CBD8F
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/4N6QV-lUpgZe5I9AcYqSDyp43nU.roa
Signing time: Thu 29 Feb 2024 01:58:48 +0000
ROA not before: Thu 29 Feb 2024 01:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 80.87.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 12:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:95:ee:03:04:12:c0:ee:89:6f:d9:1f:91:4c:bd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Feb 29 01:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0de9057e954a6065ee48f40718a920f2a78de75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:01:2d:cd:3b:66:82:24:a5:b7:b5:32:a8:
77:48:0f:2b:1e:30:e2:ff:37:0f:71:74:ef:b4:1f:
21:0e:f4:fa:40:99:8c:cd:78:54:56:0e:e8:28:38:
7d:7f:d5:20:4b:54:55:c9:ea:13:9a:64:f5:b5:cf:
b5:65:04:46:ca:8c:b0:f0:57:48:54:7b:10:0b:a1:
98:c0:da:13:e6:3c:a8:17:0c:95:a2:f4:eb:37:c0:
1b:5d:a5:3d:b4:fd:7d:be:66:98:80:69:ae:cf:a7:
3f:36:93:71:03:06:bc:04:93:4e:eb:40:92:02:a7:
78:05:49:4c:35:2f:7d:40:2c:8f:ba:68:4e:da:ac:
80:f7:fe:41:cc:37:c7:2d:7a:bb:5c:6e:ac:cc:31:
54:6a:36:df:ac:3d:e2:6d:85:19:f3:a9:4c:ca:c1:
ca:d1:fe:ae:39:1f:bd:b0:fd:53:0b:fa:ef:0f:f5:
06:3a:db:ae:75:63:de:55:72:03:22:0a:28:e2:bc:
6f:6e:c1:30:ee:aa:68:7f:ee:7c:b6:fc:c6:fe:3e:
de:6d:04:2e:9a:df:62:42:d4:8d:ba:df:53:ab:1a:
14:81:b0:5f:d6:62:a1:98:47:1e:a4:06:31:fa:b9:
f7:8a:a3:e8:94:19:e9:72:9f:91:dd:0b:df:46:0b:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:90:57:E9:54:A6:06:5E:E4:8F:40:71:8A:92:0F:2A:78:DE:75
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/4N6QV-lUpgZe5I9AcYqSDyp43nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:29:6a:f7:67:2f:49:16:7a:9a:cc:ea:73:3e:5a:37:29:d1:
53:05:3e:51:25:75:36:7d:bc:5c:ff:73:9b:4a:6e:65:b1:15:
21:e9:e4:cb:8f:dd:a6:94:88:9e:82:31:bb:e9:bf:e1:8c:28:
fb:b2:52:a4:58:68:73:5b:64:8a:2e:16:95:96:71:30:d8:8a:
f4:90:e4:f1:43:fb:14:37:c1:33:31:36:a3:d5:be:a1:c0:a3:
11:02:eb:2b:b1:7f:f7:0e:6b:60:3d:f5:7a:a3:ba:1b:86:80:
68:65:f3:ce:9f:df:6c:b8:38:cc:e8:94:47:80:83:31:48:ee:
c0:b1:d9:4c:79:8b:43:a7:f8:ad:f0:eb:e7:3a:0d:e7:1f:64:
8f:7a:ee:d5:0f:ab:62:4f:d3:14:98:d6:9e:97:04:a5:42:4c:
bc:e5:79:0b:90:82:5c:43:c8:ff:4a:5b:c2:86:ca:64:9c:5a:
aa:ec:2b:c4:9e:32:5b:65:ce:9d:0d:d0:ad:64:5c:cf:50:77:
68:6a:cc:3e:09:73:dd:f9:c1:30:38:07:c5:0d:0a:13:da:4b:
eb:bf:86:7d:bf:f0:c9:9e:ce:4c:8d:56:42:01:05:0a:d9:b4:
ee:00:95:38:7f:82:f9:2c:ac:3a:fc:45:de:52:17:4d:9c:ca:
00:c3:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org