Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-4qldbGp5QS-rPoPCTTcqI_vEHk.roa
File: 1-4qldbGp5QS-rPoPCTTcqI_vEHk.roa (raw, json)
Hash identifier: 43D02kqpgnNJ3o4aPFDL279QYJH0XuZj16O/tCbo+08=
Subject key identifier: FB:8A:A5:75:B1:A9:E5:04:BE:AC:FA:0F:09:34:DC:A8:8F:EF:10:79
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F151390065486D59D9720403FFC37AC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-4qldbGp5QS-rPoPCTTcqI_vEHk.roa
Signing time: Sun 01 Jan 2023 20:45:30 +0000
ROA not before: Sun 01 Jan 2023 20:45:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 80.96.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 06:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:13:90:06:54:86:d5:9d:97:20:40:3f:fc:37:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb8aa575b1a9e504beacfa0f0934dca88fef1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fb:1d:9d:fd:5f:49:78:d5:5b:72:d5:5b:42:
a8:95:a6:8e:f5:b4:64:ef:0e:54:c4:9d:1f:b5:80:
cb:9e:db:05:4c:bd:51:8d:a0:50:63:12:b0:e6:67:
12:b1:da:72:be:ba:b6:c0:ab:fe:d6:78:38:36:03:
a2:d4:83:5f:09:6e:d2:7c:8c:6d:c1:60:f9:2e:3f:
07:ec:67:55:3a:0d:d5:ec:5a:4d:2f:5d:36:a7:6c:
e2:73:4c:c2:53:30:6b:d3:0d:1d:48:3d:41:94:30:
11:f8:04:23:63:43:82:16:d8:82:cb:ec:16:25:72:
81:74:e7:ef:3e:df:87:1c:32:b6:3f:7c:2a:bf:bf:
f9:97:38:ed:18:a4:68:93:28:c4:23:fb:e6:33:5f:
9b:94:04:7e:75:43:4d:c3:b2:48:5b:49:33:35:39:
c4:bf:4b:71:f7:c5:25:23:3e:4a:1e:68:ed:08:63:
f2:c8:73:72:d3:e8:7e:8f:ef:67:ea:bc:b0:78:6e:
20:6f:36:68:00:31:fe:26:45:22:72:97:21:eb:0d:
b4:30:38:bf:ca:2b:19:c3:e5:a7:c2:03:aa:07:48:
98:fc:bb:92:e7:63:1c:79:49:cb:14:de:46:95:df:
73:f5:98:81:7e:6c:43:46:fd:00:7b:49:9f:06:d2:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:A5:75:B1:A9:E5:04:BE:AC:FA:0F:09:34:DC:A8:8F:EF:10:79
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-4qldbGp5QS-rPoPCTTcqI_vEHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.10.0/24
Signature Algorithm: sha256WithRSAEncryption
02:64:59:e0:8b:8d:d5:6c:cd:a4:15:93:01:4f:fc:ca:3c:c5:
a7:68:ad:de:78:01:c3:e5:93:17:6e:6d:b5:98:4a:c2:b6:c8:
02:bd:9d:14:75:da:27:2b:70:be:75:16:fc:6e:ea:03:19:0d:
df:41:fd:b7:a8:9d:ec:42:c9:52:2d:6c:31:19:fe:cf:be:bc:
4c:00:30:8d:6e:24:89:0a:ce:09:d8:0e:80:db:08:19:7d:55:
15:1b:b8:69:b4:78:fb:d5:00:11:24:a2:f1:66:0a:2f:74:55:
d2:d7:65:3a:cf:f2:b5:9a:61:c2:44:83:e3:7b:ae:40:8a:46:
ef:9b:86:5b:c2:75:07:ad:87:11:b0:10:43:15:e2:a3:55:2f:
7d:70:6d:ec:ff:c4:8b:40:a0:82:d9:15:59:f5:a0:11:ad:cc:
bc:f2:5e:4c:17:2a:8c:43:1d:3a:94:be:70:8b:b0:40:80:87:
f4:63:2a:d9:0b:27:88:42:76:a3:29:12:4b:d4:f3:7d:f9:d5:
f4:2c:2b:76:bf:bf:f1:40:2e:12:91:ec:6f:40:ff:15:38:93:
ef:e8:7f:12:f7:16:44:c9:4b:89:f8:bf:19:cf:ec:d7:05:a7:
f3:2e:97:4c:2e:f0:39:a4:cc:60:8f:e4:73:5f:38:05:49:c3:
c5:c2:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org