Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rw5RFrz0nQ5qrMHtsrZauXF-16k.roa
File: Rw5RFrz0nQ5qrMHtsrZauXF-16k.roa (raw, json)
Hash identifier: OP3K+kXNDPjD8acKiX0P+mmRxdhOkWdfa5rhdaw1olU=
Subject key identifier: 47:0E:51:16:BC:F4:9D:0E:6A:AC:C1:ED:B2:B6:5A:B9:71:7E:D7:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190344B817C6C09A04030AEEEE58B59EB69
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rw5RFrz0nQ5qrMHtsrZauXF-16k.roa
Signing time: Thu 20 Jun 2024 06:18:01 +0000
ROA not before: Thu 20 Jun 2024 06:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 80.76.51.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 10:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:4b:81:7c:6c:09:a0:40:30:ae:ee:e5:8b:59:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 06:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=470e5116bcf49d0e6aacc1edb2b65ab9717ed7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:4a:66:b8:70:ec:96:f2:c8:67:d0:5a:27:
e0:0f:f6:48:73:a9:4f:cc:21:eb:a7:21:49:bb:c3:
ec:08:60:a5:5b:d0:41:74:2a:e1:bf:35:5d:bc:44:
4d:20:e1:8e:55:52:be:06:9c:d8:9e:c3:25:e9:7c:
64:e6:25:3d:8e:d7:e6:ee:4d:0c:42:a1:96:98:ef:
e1:23:3c:26:99:ba:38:1e:f4:4e:d9:e8:2b:bb:e6:
dc:c3:e0:4b:74:40:b8:76:4a:1e:a9:05:87:64:11:
94:29:3a:c3:a1:16:2d:69:ac:22:a9:1c:1a:8e:27:
66:dd:25:90:a6:c7:8c:4a:16:b5:f8:a2:91:81:ee:
ab:e6:2f:59:ec:42:e5:0f:1f:91:13:90:54:87:0c:
af:79:df:b5:d2:bd:7f:72:df:c3:13:0f:e1:6a:7b:
57:fc:bb:b5:4b:78:70:af:d2:8e:f0:c0:a1:20:e0:
92:fe:5d:6d:f0:d5:25:78:c6:6b:0e:3d:5d:dd:d7:
48:c5:98:0f:b6:78:63:98:f3:60:52:45:26:34:3d:
10:20:63:ec:07:67:9f:90:76:ec:36:e3:55:83:9c:
9d:f0:3f:b8:f6:57:5c:ed:e8:b0:0b:b7:80:a5:6d:
1b:56:3d:10:46:f6:64:75:80:06:a0:6e:4d:d9:da:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0E:51:16:BC:F4:9D:0E:6A:AC:C1:ED:B2:B6:5A:B9:71:7E:D7:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rw5RFrz0nQ5qrMHtsrZauXF-16k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4c:dc:f7:91:c6:10:2a:e1:ff:21:ca:0b:a9:81:18:74:4a:
0a:38:c5:cd:ee:46:b6:9c:80:b3:1f:cd:6f:76:19:29:f3:dc:
65:ae:13:0c:c9:ab:e7:9e:91:39:b2:93:07:af:5c:d8:43:7a:
ea:0a:cf:9e:fa:bf:9c:16:a9:cd:81:57:e6:68:64:3c:6e:70:
82:2e:a5:68:5e:69:4a:2c:6f:87:64:29:d7:0e:ea:34:69:b2:
0c:98:bc:a7:21:71:64:c7:ae:b9:db:22:81:a7:71:98:db:8c:
e1:a5:98:c0:35:48:f8:de:fe:a9:e8:ea:2e:42:af:4e:91:c8:
6c:8f:6b:ca:c4:ee:1b:91:c9:b1:a0:31:1e:f9:cd:f7:8c:df:
e6:7c:ea:97:28:c6:5b:ac:9d:58:cb:64:b4:a6:c8:68:f0:60:
c2:6a:47:1a:10:8b:96:08:93:9f:c6:ea:1d:15:28:a1:53:e3:
46:27:41:11:fd:ba:87:89:e1:32:ce:4f:5e:c3:00:ba:c7:d3:
fc:0d:d0:40:b0:1e:30:37:80:4c:9f:dd:fe:fc:53:3b:c1:1f:
24:3b:08:8b:26:f3:2f:2b:51:44:fe:48:1b:ea:17:87:f1:92:
d6:df:7e:38:6e:b2:40:fc:1c:f9:b3:0b:b3:21:3c:a7:a0:af:
dc:13:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:44:46 2024 by rpki-client on console-fra.rpki-client.org