Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/MDrGodIgn9kMIKYpfp7oEuVn07U.roa
File: MDrGodIgn9kMIKYpfp7oEuVn07U.roa (raw, json)
Hash identifier: Ni7YtWUu3/BbRFx5lK20npCX65pweifJjGLyQhL+sWQ=
Subject key identifier: 30:3A:C6:A1:D2:20:9F:D9:0C:20:A6:29:7E:9E:E8:12:E5:67:D3:B5
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 01856E0AE53991612736A1A7AE0792C8A3FB
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/MDrGodIgn9kMIKYpfp7oEuVn07U.roa
Signing time: Sun 01 Jan 2023 15:54:45 +0000
ROA not before: Sun 01 Jan 2023 15:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20815
IP address blocks: 80.64.32.0/20 maxlen: 24
2a00:5c00::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:e5:39:91:61:27:36:a1:a7:ae:07:92:c8:a3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Jan 1 15:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=303ac6a1d2209fd90c20a6297e9ee812e567d3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:63:4b:cf:2e:75:ef:f0:3e:f6:10:77:9c:
2e:37:a0:bd:86:61:a2:78:25:8b:04:19:52:59:81:
c0:6e:15:37:6c:70:8e:a6:8c:02:38:d7:17:13:32:
ba:0b:82:ad:3e:bf:74:d2:39:50:5b:e1:72:91:b9:
ea:4e:50:76:1c:d2:81:21:40:c5:a6:a2:f0:e3:57:
d7:23:ef:47:fb:28:20:cd:a6:e9:dd:f0:34:1e:08:
b4:8c:32:54:5e:ce:de:67:2e:1a:a5:72:0b:10:c3:
61:be:c2:42:f3:b4:59:74:95:24:dc:87:7a:a7:6d:
41:80:37:16:33:bb:73:eb:f1:dc:15:63:49:1d:fb:
51:e8:34:77:65:bc:d7:38:1a:b3:7f:48:f6:b6:b5:
48:cb:b9:da:f3:d9:66:1c:1a:85:ad:8e:3c:47:dc:
1a:0e:1f:e1:31:6f:fd:51:eb:c6:0b:e4:c9:5d:48:
c8:4e:d3:89:75:e4:2d:1e:55:20:92:ac:3a:2c:3f:
70:c8:30:33:e8:b7:7e:1d:d7:99:3d:4c:28:f2:38:
24:f5:9b:40:99:52:f7:12:ca:cb:64:05:54:c4:18:
d3:24:92:fc:05:4a:f6:66:02:cc:d1:fe:14:f3:81:
7d:fa:70:14:a2:4e:e4:0a:4e:21:7c:f6:dd:33:1d:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3A:C6:A1:D2:20:9F:D9:0C:20:A6:29:7E:9E:E8:12:E5:67:D3:B5
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/MDrGodIgn9kMIKYpfp7oEuVn07U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.32.0/20
IPv6:
2a00:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
30:3d:b1:eb:48:10:47:71:91:10:a4:06:7f:fb:05:27:23:c8:
34:9d:ed:90:bc:ad:d8:11:80:83:a7:ed:a6:af:7e:3c:9f:dc:
3d:f2:68:05:9b:31:b9:ea:c5:00:45:dd:ef:d9:e3:9d:06:37:
8f:36:95:ba:11:9b:ad:41:e9:77:47:b5:cb:71:1e:c3:ee:55:
7c:e4:fb:18:41:ec:92:55:1a:78:d5:58:00:af:1d:f2:b7:47:
cd:5a:ac:16:5a:64:c3:21:de:b9:d8:22:17:7f:ce:6d:da:91:
f2:46:5e:1c:1f:b0:8d:9b:c7:8e:39:90:54:9f:25:e8:d5:23:
63:85:34:20:c3:24:82:5a:6c:14:bf:f3:f6:5c:44:46:c0:dd:
ad:08:07:91:f8:21:8a:dc:cc:ea:ab:18:ed:89:63:8d:0e:91:
c4:48:02:6c:ba:8c:d6:22:83:3c:45:6b:a7:61:02:c3:e5:ef:
ca:ef:81:69:fd:83:70:27:42:d8:18:b4:dd:b5:54:f4:f5:a6:
a2:27:5f:a8:a0:3b:c3:bd:ab:67:69:d7:46:b7:54:44:1b:99:
b2:f4:71:e0:c1:5a:02:69:86:f2:fc:ce:53:c4:f4:05:62:49:
f7:16:21:b5:77:da:f2:6b:20:d2:0e:8c:78:bb:5c:53:c2:c6:
fc:a2:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org