Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/7Z317R71X5NiOlLGYKO6mGetzoQ.roa
File: 7Z317R71X5NiOlLGYKO6mGetzoQ.roa (raw, json)
Hash identifier: PZ0bSMlW4BYvpo+fRBs0IEDf5ocFVHgByWRdk70GxS0=
Subject key identifier: ED:9D:F5:ED:1E:F5:5F:93:62:3A:52:C6:60:A3:BA:98:67:AD:CE:84
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0189014CCD7EB7C229F47DC6808F5B772DDA
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/7Z317R71X5NiOlLGYKO6mGetzoQ.roa
Signing time: Wed 28 Jun 2023 09:19:17 +0000
ROA not before: Wed 28 Jun 2023 09:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50867
IP address blocks: 80.85.155.0/24 maxlen: 24
2a0a:eec0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:4c:cd:7e:b7:c2:29:f4:7d:c6:80:8f:5b:77:2d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jun 28 09:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed9df5ed1ef55f93623a52c660a3ba9867adce84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:6c:e3:cf:bb:ce:af:7a:09:bf:e0:b6:f9:
fd:88:50:51:4d:af:b6:a7:d8:98:6f:00:79:74:f8:
81:72:57:f3:c5:13:9f:7b:88:3f:6b:06:2b:fc:b6:
34:09:59:40:62:6a:42:e6:67:69:10:39:03:63:f2:
d7:ca:90:78:cc:9e:c2:7b:cb:d3:02:26:93:25:26:
d8:b4:bb:ed:53:b7:11:68:b2:1c:8f:a5:d8:af:0b:
92:e8:b2:68:19:29:22:80:f6:fa:25:9a:9a:24:54:
de:19:bc:55:83:4b:cd:be:43:d7:95:43:de:e9:8d:
18:14:d7:87:1e:7d:a9:46:fa:56:70:61:0e:5a:b3:
7a:2a:23:87:63:bc:56:37:9e:8d:95:95:54:4a:29:
65:db:af:9d:f7:a7:4c:de:48:c7:73:95:9a:94:78:
04:2c:7c:8e:7b:78:bb:1d:ce:74:04:bb:60:1a:26:
0d:21:90:ed:13:fa:af:5e:41:20:48:94:f3:fd:94:
e7:3f:3d:86:81:a7:b7:b2:6c:6b:a6:e5:5c:c8:da:
a5:26:4b:e4:2b:9c:18:62:73:47:c5:0c:8f:17:16:
84:ce:b1:ae:14:a3:78:e5:bb:91:2f:88:f1:7f:cb:
51:07:4c:05:04:28:88:f7:68:4d:3d:90:fa:11:d2:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:F5:ED:1E:F5:5F:93:62:3A:52:C6:60:A3:BA:98:67:AD:CE:84
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/7Z317R71X5NiOlLGYKO6mGetzoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.155.0/24
IPv6:
2a0a:eec0:1::/48
Signature Algorithm: sha256WithRSAEncryption
72:04:7d:e3:0b:25:e3:f4:36:68:82:1f:c8:af:47:c1:a0:b0:
33:c4:24:e1:29:28:b2:c3:80:2c:53:8f:b5:9e:65:a0:58:ea:
ca:a3:a5:69:02:90:a1:39:06:47:ea:dd:14:27:95:bb:0e:7f:
e9:43:9a:7c:a0:ce:86:d5:de:b9:e5:b5:95:08:40:5a:d3:55:
31:c5:aa:df:27:12:0f:dd:13:6a:2c:bc:c5:6b:99:8c:44:77:
0a:a8:58:c9:ae:d1:47:4a:57:0c:c9:02:5b:bd:66:7e:dd:c3:
25:3f:63:66:1b:10:b0:43:97:09:71:3f:de:5e:e5:51:16:29:
95:c2:af:42:df:5f:0a:53:91:4f:e2:3d:f4:5c:12:b8:1f:5a:
16:2f:ad:5b:50:29:22:56:9e:45:e6:bd:51:9f:d0:f4:32:86:
ce:aa:1b:b2:ef:3c:96:64:df:26:5d:a5:4f:d4:a5:42:ff:db:
5c:aa:81:dc:1c:fe:1c:e0:33:4e:a2:a6:10:46:6d:ce:c1:f8:
ea:51:e2:e5:f7:5b:9c:e7:06:fa:60:52:a8:d8:c9:f0:50:69:
0a:55:02:6f:1d:3c:e3:59:ba:36:48:e6:c6:26:b9:ab:38:8b:
9e:9f:c5:26:f4:ca:2d:9e:ad:f8:d7:33:1b:33:8d:8e:37:4e:
0e:56:b3:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYkBTM1+t8Ip9H3GgI9bdy3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjMwNjI4MDkxOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDlkZjVlZDFlZjU1ZjkzNjIzYTUyYzY2MGEzYmE5ODY3YWRjZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrps48+7zq96Cb/gtvn9iFBRTa+2
p9iYbwB5dPiBclfzxROfe4g/awYr/LY0CVlAYmpC5mdpEDkDY/LXypB4zJ7Ce8vT
AiaTJSbYtLvtU7cRaLIcj6XYrwuS6LJoGSkigPb6JZqaJFTeGbxVg0vNvkPXlUPe
6Y0YFNeHHn2pRvpWcGEOWrN6KiOHY7xWN56NlZVUSill26+d96dM3kjHc5WalHgE
LHyOe3i7Hc50BLtgGiYNIZDtE/qvXkEgSJTz/ZTnPz2Ggae3smxrpuVcyNqlJkvk
K5wYYnNHxQyPFxaEzrGuFKN45buRL4jxf8tRB0wFBCiI92hNPZD6EdLwpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO2d9e0e9V+TYjpSxmCjuphnrc6EMB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvN1ozMTdSNzFYNU5pT2xMR1lLTzZtR2V0em9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUFWbMA8E
AgACMAkDBwAqCu7AAAEwDQYJKoZIhvcNAQELBQADggEBAHIEfeMLJeP0NmiCH8iv
R8GgsDPEJOEpKLLDgCxTj7WeZaBY6sqjpWkCkKE5Bkfq3RQnlbsOf+lDmnygzobV
3rnltZUIQFrTVTHFqt8nEg/dE2osvMVrmYxEdwqoWMmu0UdKVwzJAlu9Zn7dwyU/
Y2YbELBDlwlxP95e5VEWKZXCr0LfXwpTkU/iPfRcErgfWhYvrVtQKSJWnkXmvVGf
0PQyhs6qG7LvPJZk3yZdpU/UpUL/21yqgdwc/hzgM06iphBGbc7B+OpR4uX3W5zn
BvpgUqjYyfBQaQpVAm8dPONZujZI5sYmuas4i56fxSb0yi2erfjXMxszjY43Tg5W
sxM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:20 2024 by rpki-client on console-fra.rpki-client.org