Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/SvFmEV8y6AHIcESpYhM05LE457U.roa
File: SvFmEV8y6AHIcESpYhM05LE457U.roa (raw, json)
Hash identifier: ln87TVBhEcuRrU0ywArMkX79VnB61doape9Ra/DEI58=
Subject key identifier: 4A:F1:66:11:5F:32:E8:01:C8:70:44:A9:62:13:34:E4:B1:38:E7:B5
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 01965C7C93ECAE044F261C818B016931C395
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/SvFmEV8y6AHIcESpYhM05LE457U.roa
Signing time: Tue 22 Apr 2025 07:53:10 +0000
ROA not before: Tue 22 Apr 2025 07:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34731
IP address blocks: 80.76.16.0/20 maxlen: 20
80.76.16.0/21 maxlen: 23
80.76.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 22 Apr 2025 08:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:7c:93:ec:ae:04:4f:26:1c:81:8b:01:69:31:c3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Apr 22 07:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4af166115f32e801c87044a9621334e4b138e7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:dd:80:a8:01:85:3b:25:d8:ec:b3:e7:57:
c7:49:53:c0:4c:f5:f0:e5:1f:d3:49:f4:fd:b1:1c:
5b:6b:d1:09:ec:67:e2:c9:6c:7b:9b:f4:59:c6:22:
9a:ec:73:01:c2:1c:5b:27:bb:eb:a6:fa:07:21:4f:
82:01:c9:a1:0f:52:09:7f:79:bc:b5:51:a7:ab:10:
ff:25:19:da:39:3f:2a:23:6b:a9:58:64:b8:c3:80:
cb:c4:56:19:5e:6b:73:5a:68:73:aa:f9:36:db:bf:
c6:ba:4f:1a:6e:71:06:ed:7f:da:94:96:ac:28:dc:
4d:b6:bb:5c:36:22:60:d1:94:53:e5:40:c9:81:af:
06:31:ca:01:c3:91:ce:68:fd:c1:20:36:8c:05:8f:
b7:0f:e9:59:ae:a3:d4:d4:93:bc:69:fa:d3:f3:39:
3f:66:c3:78:5e:22:1f:ea:61:45:23:11:6e:b2:fc:
15:50:e0:87:01:97:25:9e:e0:dc:f3:34:5d:eb:03:
67:c4:ca:72:62:6c:2c:1e:03:07:a8:88:7a:3d:b1:
c8:66:37:9c:89:45:73:77:56:b6:d9:59:69:7f:36:
6a:ea:48:ed:d4:e4:28:60:b8:9b:f8:92:35:46:42:
28:0b:da:00:7f:52:19:d7:af:04:ea:54:07:7c:0d:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:66:11:5F:32:E8:01:C8:70:44:A9:62:13:34:E4:B1:38:E7:B5
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/SvFmEV8y6AHIcESpYhM05LE457U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:77:ee:5b:e1:f4:b9:5b:50:4c:26:5d:5e:72:f7:01:ce:94:
1c:14:e3:a1:9b:8b:c7:b9:9f:c7:23:88:aa:c1:b6:d1:ad:8b:
db:e3:09:50:79:6c:80:1d:60:68:24:58:44:2d:8a:02:d9:fe:
ca:c2:c2:ff:41:93:7b:d4:96:25:55:8b:19:51:50:5f:c9:50:
c8:8d:1e:83:6b:0f:c3:60:fa:89:f0:05:20:ce:73:a5:6e:36:
29:4c:ec:2b:4d:ad:1a:24:09:33:cf:fb:bb:58:02:cc:51:e9:
78:46:97:e6:22:10:72:81:72:86:e6:0b:08:8c:f3:7e:6a:53:
6f:b7:60:f9:a6:1a:ed:2c:9c:01:fb:72:05:35:aa:3a:34:8e:
a0:74:ad:3b:49:34:8e:ac:38:04:a3:07:59:9c:d8:59:df:8f:
91:0d:fe:83:7f:b8:a9:93:6f:5d:98:04:4e:de:44:3e:a8:6e:
23:e5:09:dd:5f:f8:1b:f2:4a:3e:81:fa:ee:d7:9b:b1:e3:3e:
da:81:e9:90:54:7c:d8:37:c4:89:d8:fb:57:ac:38:25:c5:bd:
c7:d6:1c:49:ea:f2:17:19:b3:a9:07:6d:61:1b:1e:54:89:b5:
86:d8:8c:1c:3d:b3:ba:75:d2:de:50:58:66:23:b9:e8:db:cb:
19:f9:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:08:01 2025 by rpki-client