Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0aAM8pWk3SmbFDkzqxbV2Db8t1o.roa
File: 0aAM8pWk3SmbFDkzqxbV2Db8t1o.roa (raw, json)
Hash identifier: zASGInH+QzRPevrRyMFVHINgIK1u/11W6VsnWy6l00g=
Subject key identifier: D1:A0:0C:F2:95:A4:DD:29:9B:14:39:33:AB:16:D5:D8:36:FC:B7:5A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191E56D9326114A9B8E0149E9EE1B7AE796
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0aAM8pWk3SmbFDkzqxbV2Db8t1o.roa
Signing time: Thu 12 Sep 2024 08:50:49 +0000
ROA not before: Thu 12 Sep 2024 08:50:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401116
IP address blocks: 80.76.51.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
178.215.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 09:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:6d:93:26:11:4a:9b:8e:01:49:e9:ee:1b:7a:e7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 12 08:50:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1a00cf295a4dd299b143933ab16d5d836fcb75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:d4:e6:b8:bb:fb:ea:85:fb:2d:f6:af:6a:
62:b1:0c:fd:8e:fa:f2:27:3d:b4:97:0c:e1:57:df:
89:20:6a:b8:e7:a5:a3:cb:22:ce:fd:7c:78:f3:1e:
df:21:93:b7:ae:a4:7a:2a:e5:55:01:ab:eb:0e:78:
11:c8:2a:70:a1:5d:36:eb:43:a2:23:45:61:1d:7e:
b9:a2:1a:7d:c4:ed:45:59:a6:15:57:18:ec:2b:72:
4d:15:bd:c9:91:8a:4d:1b:92:08:d6:92:23:98:4b:
78:ae:27:86:bc:50:d8:4f:88:3c:1c:45:26:82:48:
70:70:8b:d6:b3:4c:f3:b0:13:71:eb:b5:6d:48:df:
ef:12:e8:d2:82:bc:77:db:b2:2b:66:d2:aa:db:3e:
4e:73:b6:2a:e9:c1:0b:12:10:0b:e1:dc:94:f9:6a:
db:fe:8c:c3:62:89:37:72:1a:3c:1e:3e:c2:74:03:
b3:de:3a:50:d8:0d:f8:5c:ad:99:48:6d:aa:2d:c7:
37:5d:d5:0c:5b:fa:89:3a:91:b5:55:1e:64:a1:13:
ee:47:27:ba:f1:3d:b4:a3:b8:7a:cf:8f:db:41:a3:
ab:70:70:bd:32:05:27:d3:f9:ec:3a:48:40:86:71:
9d:7b:fb:f0:da:dd:50:73:10:c9:81:0d:8b:5f:5a:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A0:0C:F2:95:A4:DD:29:9B:14:39:33:AB:16:D5:D8:36:FC:B7:5A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0aAM8pWk3SmbFDkzqxbV2Db8t1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
85.31.47.0/24
94.103.125.0/24
178.215.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b7:d1:d2:c4:6f:f3:f7:19:3c:6d:76:f0:85:0d:ff:ce:cb:
1e:ec:eb:b0:2d:c0:5a:28:da:9e:2c:c9:23:59:a3:7f:32:01:
55:95:20:31:a3:cf:81:d3:01:60:96:fe:60:5d:15:3a:63:20:
43:57:ba:4d:40:e8:fb:9c:5b:e1:3d:4f:eb:ad:29:5b:3b:a8:
49:e4:3a:32:6c:94:14:25:f2:d6:d1:3a:e3:52:be:df:df:8f:
46:bf:9a:46:83:d6:5a:75:a9:54:02:32:76:7b:cd:59:75:b0:
fb:d0:5a:d2:08:3c:e8:23:14:15:12:05:b1:c0:34:b5:50:e6:
c2:5d:96:df:04:4e:aa:4d:66:b9:9a:f8:6a:ba:7a:1b:fd:a4:
5e:ad:9b:dd:23:50:b0:66:fa:23:58:f6:d5:06:1f:e0:ce:75:
ba:9d:8d:a8:c0:38:4c:73:c8:f8:6e:63:46:96:5d:8d:cb:9f:
84:d4:c7:e4:c1:4e:03:46:f6:3a:be:a4:7f:44:96:62:57:cd:
98:40:00:5f:42:b3:33:b9:a2:f0:ea:c7:4e:50:28:5b:ff:b4:
45:f0:6e:1a:a8:cb:29:7a:5c:71:9c:25:09:fb:2e:67:ce:43:
f8:79:7a:97:ac:54:18:0c:f1:d1:54:4e:e1:7c:52:39:43:d7:
08:89:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:31 2024 by rpki-client on console-ams.rpki-client.org