Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/_UGnh6A17AeuVXXGcLADls5Ggg4.roa
File: _UGnh6A17AeuVXXGcLADls5Ggg4.roa (raw, json)
Hash identifier: /1QHSvY5BDd6K91OVxhfMtQ/T/Cxw6UgEpuOz1Niuwg=
Subject key identifier: FD:41:A7:87:A0:35:EC:07:AE:55:75:C6:70:B0:03:96:CE:46:82:0E
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 01922925154469C440F5C3B07B2A560B4752
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/_UGnh6A17AeuVXXGcLADls5Ggg4.roa
Signing time: Wed 25 Sep 2024 12:25:49 +0000
ROA not before: Wed 25 Sep 2024 12:25:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20710
IP address blocks: 80.65.8.0/21 maxlen: 21
80.65.12.0/24 maxlen: 24
80.65.13.0/24 maxlen: 24
80.65.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 14:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:25:15:44:69:c4:40:f5:c3:b0:7b:2a:56:0b:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Sep 25 12:25:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd41a787a035ec07ae5575c670b00396ce46820e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:95:3d:37:6c:20:84:be:a8:9e:44:c2:a9:
b2:d8:c7:d2:4e:6c:9f:0e:48:d8:4e:84:2f:4f:8f:
6c:59:6f:13:79:55:17:2b:0b:a1:b5:c2:73:4a:92:
ff:98:c3:3f:c4:b6:c7:f9:ec:72:db:82:df:b6:58:
79:77:c9:b8:8c:fa:ed:f9:3d:94:d6:1b:59:ac:e5:
1f:87:de:a0:f2:7e:b5:3b:c4:cb:48:6a:56:64:d1:
c0:6f:4d:9b:da:1b:3e:17:ad:84:d8:3d:4c:b2:3c:
03:92:86:7a:14:7a:75:ae:3e:97:22:f4:82:11:7b:
8c:46:ab:ac:ea:2a:a2:cf:2e:a0:36:c3:f0:37:da:
b0:f5:b8:3b:5a:32:f5:3b:61:15:0c:69:bc:3d:f6:
6a:d3:6f:3d:43:f7:94:9e:40:13:3f:35:2e:8d:68:
c0:3b:c3:1b:ea:57:9d:b2:24:46:0a:4a:73:4b:55:
0b:dc:db:c5:9d:3d:e3:10:8e:49:c4:51:a0:3b:b4:
64:77:95:e8:a7:47:26:0c:7f:86:e2:99:c1:a8:a5:
de:b9:a8:1a:9f:97:37:ca:57:32:20:f3:87:a4:93:
03:0e:fb:c1:c7:96:53:ec:7e:f4:78:b8:7b:ee:d3:
a5:25:06:0b:4c:95:cd:02:a1:f3:c0:e1:83:7d:05:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:A7:87:A0:35:EC:07:AE:55:75:C6:70:B0:03:96:CE:46:82:0E
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/_UGnh6A17AeuVXXGcLADls5Ggg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:2b:c1:0b:65:eb:06:bb:29:94:61:1e:73:ec:49:7c:66:e3:
51:5d:6e:e4:d3:98:82:5b:c8:ae:e5:61:14:8c:af:59:af:7d:
f7:e7:10:16:99:d4:0a:ba:1d:b5:1f:29:f8:d4:a9:de:ee:f2:
ab:5e:56:bd:b2:f6:a7:fb:0e:1d:60:bc:53:44:9e:49:72:cf:
10:71:bd:ad:d3:33:68:5f:1e:72:6a:dc:69:9d:c1:08:d7:cf:
f8:56:c4:6f:01:e5:20:ac:87:f3:5d:8a:39:de:da:c2:b0:cc:
a6:d3:73:41:ee:b2:e8:5d:1f:55:99:e3:40:f4:b9:54:07:9b:
d3:63:e5:b7:94:b5:9f:b6:31:45:8a:06:22:ce:f7:44:e9:8f:
4c:3e:b4:4c:01:5b:97:d0:0f:99:c8:2e:f2:ce:40:a1:da:a9:
d6:41:6e:b8:b6:01:32:4a:fe:8e:a6:70:2d:a6:f5:66:f8:05:
52:16:6e:28:a3:58:da:ff:c8:f1:f7:dc:a0:6a:a1:44:cf:b4:
04:05:81:b8:9d:08:c8:36:86:d4:b0:a7:f1:15:d0:76:16:93:
cf:44:5c:fc:e1:5a:a9:1e:e5:5a:57:12:f2:60:b4:5d:f1:75:
10:f9:4f:3b:4d:c7:e8:66:8a:1c:23:0f:23:0e:da:5a:db:35:
cb:21:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:41:33 2025 by rpki-client