Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/nkDb1m3b40xSsbKRegZAntkAq1w.roa
File: nkDb1m3b40xSsbKRegZAntkAq1w.roa (raw, json)
Hash identifier: fI3+DC/qd1DV9lv8lmNQ0bUbDRACHnjUcp73wJRg9Y8=
Subject key identifier: 9E:40:DB:D6:6D:DB:E3:4C:52:B1:B2:91:7A:06:40:9E:D9:00:AB:5C
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018FCA779DBE1CFDFC97EFC95E1048556BCF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/nkDb1m3b40xSsbKRegZAntkAq1w.roa
Signing time: Thu 30 May 2024 17:06:27 +0000
ROA not before: Thu 30 May 2024 17:06:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 80.242.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 16:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:77:9d:be:1c:fd:fc:97:ef:c9:5e:10:48:55:6b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: May 30 17:06:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e40dbd66ddbe34c52b1b2917a06409ed900ab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:8a:8f:95:7c:93:37:8e:c4:e1:30:aa:49:
7a:77:1b:eb:74:ea:50:47:b4:dd:56:4f:ba:5b:28:
5e:98:64:07:8c:58:f8:90:86:c1:d4:98:83:57:b3:
26:bb:5f:74:41:0e:13:28:98:55:73:ef:e8:12:d9:
ee:66:4f:bf:f0:51:88:65:f5:17:3d:69:3f:dd:31:
85:db:47:7e:d0:09:4a:58:9b:0e:11:d5:23:d8:84:
ba:4e:f1:20:dd:23:4e:10:c5:23:58:fb:c6:1e:76:
98:5b:1d:5f:88:1c:fd:93:79:78:f1:e4:d1:57:af:
d1:f9:25:4b:f7:4e:17:2f:3a:2f:c3:9b:f1:75:a6:
79:f2:98:78:a3:34:d4:b1:15:ea:fe:ce:87:f9:0d:
bd:d8:88:43:52:ef:f6:b4:cc:bc:41:0b:41:d0:36:
fb:17:02:4a:68:54:26:e7:00:1c:a2:2e:a7:d4:70:
48:97:e6:6a:e1:f8:08:13:77:45:91:08:87:11:8b:
56:86:0a:be:08:80:3b:e0:59:5f:7a:26:17:07:33:
bc:4d:99:13:46:76:2d:b4:8f:6f:cc:4e:84:58:f1:
c7:1a:9b:7b:0e:bd:e0:5e:42:65:e6:06:89:0c:53:
32:f6:6c:d9:5b:78:e9:18:2f:e7:0e:bc:59:27:e9:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:DB:D6:6D:DB:E3:4C:52:B1:B2:91:7A:06:40:9E:D9:00:AB:5C
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/nkDb1m3b40xSsbKRegZAntkAq1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:50:c1:57:ed:b5:15:ff:f3:56:82:bc:7c:76:ee:fa:6a:2c:
29:22:5f:d6:0a:a7:2d:d4:e8:d0:e4:c7:4d:8f:c8:94:60:ae:
6e:df:9e:7d:08:87:2b:4f:72:5b:bf:34:21:3e:e5:5b:e3:f3:
05:16:ca:d0:c0:f9:5c:e1:ca:27:b8:73:b9:0f:33:de:49:6d:
be:ad:84:fa:70:cb:a1:46:62:44:f6:6b:cf:34:df:59:eb:40:
d9:f4:db:30:d1:17:89:74:7c:84:9e:99:5c:59:ee:75:0c:ad:
5d:b5:84:bf:23:eb:8f:e8:f4:3d:c1:26:82:dc:5c:e9:91:c4:
e1:a8:f6:19:88:32:61:aa:3b:7f:0d:c5:17:d9:a0:85:1a:22:
5a:2e:b5:3e:32:4e:7e:27:9a:b3:e4:24:9a:1d:13:2f:79:90:
5c:c0:0b:09:70:d9:fb:3c:73:08:2a:1d:c5:6a:ef:9b:f7:32:
f0:bb:95:3c:93:9f:ca:fc:4d:56:3e:c1:ff:76:45:4b:dc:49:
48:20:79:3f:50:f1:2f:47:ea:a2:0d:7b:73:27:3e:13:fa:10:
b5:06:ff:08:a4:73:74:09:37:92:c4:f6:de:b0:b2:48:88:03:
c0:d1:ec:58:b0:52:ad:a7:5f:85:a9:fe:f3:71:2e:03:81:65:
20:df:fc:1b
-----BEGIN CERTIFICATE-----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Generated at Mon Jun 10 20:37:17 2024 by rpki-client on console-fra.rpki-client.org