Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/cuDnJ9YJGuz-aidg1onpx5GlkOU.roa
File: cuDnJ9YJGuz-aidg1onpx5GlkOU.roa (raw, json)
Hash identifier: M6pCVYHASa01nkgkdUxQ+TxsO5KIVmqXOxvfMPfJWxI=
Subject key identifier: 72:E0:E7:27:D6:09:1A:EC:FE:6A:27:60:D6:89:E9:C7:91:A5:90:E5
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 0190FDF44DF8C368FD719E6ABD7439B5B67F
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/cuDnJ9YJGuz-aidg1onpx5GlkOU.roa
Signing time: Mon 29 Jul 2024 10:06:04 +0000
ROA not before: Mon 29 Jul 2024 10:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 80.253.254.0/24 maxlen: 32
80.253.255.0/24 maxlen: 32
91.217.119.0/24 maxlen: 32
193.31.117.0/24 maxlen: 32
213.142.149.0/24 maxlen: 24
213.142.150.0/24 maxlen: 32
2a0e:36c0::/29 maxlen: 32
2a0e:36c0::/32 maxlen: 32
2a0e:36c1::/32 maxlen: 32
2a0e:36c2::/32 maxlen: 32
2a0e:36c3::/32 maxlen: 32
2a0e:36c4::/32 maxlen: 32
2a0e:36c5::/32 maxlen: 32
2a0e:36c6::/32 maxlen: 32
2a0e:36c6:ff80::/48 maxlen: 48
2a0e:36c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 23 Aug 2024 08:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:f4:4d:f8:c3:68:fd:71:9e:6a:bd:74:39:b5:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Jul 29 10:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72e0e727d6091aecfe6a2760d689e9c791a590e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:41:e6:9a:70:11:54:18:c2:62:e6:7f:99:
79:9a:f5:e5:2a:71:62:f3:ee:ac:ab:37:5a:67:2a:
46:af:75:a4:04:f9:14:74:15:39:4f:3f:62:6a:6b:
42:32:24:27:a1:6f:98:53:91:2c:32:2a:23:f5:2a:
34:4e:10:f9:3e:8c:d6:f8:ed:31:ef:70:54:56:c1:
cc:4d:79:0b:34:76:c3:15:65:41:39:78:a2:9b:bf:
7e:f7:e2:f2:fa:35:7e:2c:56:99:a6:2a:31:f5:6d:
26:53:d0:3d:7e:66:0a:b7:e5:5b:5a:05:34:dd:c8:
4b:78:90:ff:35:2d:f9:c1:9e:aa:c8:b2:f7:bf:d4:
0a:e9:5c:37:34:89:76:67:e2:ec:cc:c5:b3:f9:f5:
8b:6c:5d:4c:08:2d:2e:94:e0:1a:e3:7a:e9:49:fc:
64:35:eb:14:7b:6f:2d:2b:a1:4b:d8:0e:d5:f4:71:
fe:c6:3b:b3:10:ae:c3:ff:61:1e:6a:cb:5d:95:e6:
0f:45:f6:e7:1a:0a:cb:bf:36:c1:30:9c:a0:a0:e9:
83:13:a5:17:c8:c2:45:c7:f1:10:95:31:d2:56:7f:
96:d7:f4:36:20:4c:86:bb:73:4d:1c:ff:36:a8:87:
31:fc:22:e0:2b:a7:aa:73:d4:c3:ec:fd:e9:a8:4b:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E0:E7:27:D6:09:1A:EC:FE:6A:27:60:D6:89:E9:C7:91:A5:90:E5
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/cuDnJ9YJGuz-aidg1onpx5GlkOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.254.0/23
91.217.119.0/24
193.31.117.0/24
213.142.149.0-213.142.150.255
IPv6:
2a0e:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:ef:8d:80:c5:e1:31:84:89:1a:55:40:4d:44:c7:c8:67:b7:
34:29:46:95:f1:57:78:40:1b:d7:1d:ab:e2:2c:e4:34:e0:ec:
2c:25:60:cb:02:ac:ed:83:41:1e:95:ab:4c:ea:d6:69:0a:a8:
10:ed:19:b7:61:b5:64:5f:42:c9:e6:49:24:8a:73:33:5f:f4:
71:f8:fc:6c:0f:06:05:0c:0d:6a:11:f4:e8:d6:87:8c:4b:ec:
2b:30:18:42:7e:b1:ec:8a:0d:83:3e:fa:ba:2d:4b:93:94:db:
2d:39:79:41:a1:4e:a8:52:85:cb:46:8c:de:3f:56:b2:e3:45:
4a:16:21:86:f7:c2:66:10:47:8a:ba:b6:66:fd:bb:3f:0b:51:
7b:bc:c1:70:dc:38:5b:b3:3a:32:61:e7:e3:d7:89:18:83:18:
f4:bb:09:bc:f4:6e:76:cb:eb:04:89:6f:66:b5:3b:f3:9a:01:
69:17:00:4f:bd:76:75:89:31:53:4d:cf:60:bd:b7:06:fe:7d:
e0:23:fa:4e:b8:e7:6d:dd:b7:72:c8:f4:32:b6:ce:69:32:d7:
37:2a:53:4e:c9:0c:1c:82:38:76:1d:e0:95:55:47:2d:01:69:
d2:a7:d0:92:f0:99:2f:60:dd:7e:f8:16:c2:c6:ad:10:8a:4a:
f5:29:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org