Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4BZNPSHowPoW3BYDoO1VLyvsn-Q.roa
File: 4BZNPSHowPoW3BYDoO1VLyvsn-Q.roa (raw, json)
Hash identifier: Oqo0ASo5eINR8V2yBfuVnupvaogoaGylpy7Lx81XZzI=
Subject key identifier: E0:16:4D:3D:21:E8:C0:FA:16:DC:16:03:A0:ED:55:2F:2B:EC:9F:E4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AFC432756BB342916838089DBF2E3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4BZNPSHowPoW3BYDoO1VLyvsn-Q.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215945
IP address blocks: 81.180.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fc:43:27:56:bb:34:29:16:83:80:89:db:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0164d3d21e8c0fa16dc1603a0ed552f2bec9fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:0d:2b:5b:97:e8:3c:40:42:af:eb:e2:c8:
61:e6:10:5d:23:53:fa:dd:6d:65:e6:ac:80:d6:70:
ee:b8:0c:21:2e:a4:05:32:b5:3e:05:20:1c:a3:d1:
2c:3c:8d:13:29:27:eb:04:e2:76:ed:43:eb:6a:ac:
71:4a:c0:08:de:c2:f1:c1:33:63:07:8e:ff:fd:c9:
98:bc:b2:9e:b2:7f:3a:3b:d8:32:fb:a6:ec:eb:c6:
15:36:32:f0:9e:3b:50:22:6a:6b:c7:7e:85:94:40:
51:1c:e5:aa:12:21:17:98:ea:a3:fd:da:b2:05:bb:
da:ef:59:d6:7a:0a:ab:45:02:f4:36:84:f5:8a:6e:
b5:76:8e:1e:7b:3a:dc:36:7d:9d:16:5a:56:5f:df:
be:25:be:f1:40:41:e9:d7:f9:54:11:ad:e9:9f:06:
77:f1:11:f5:78:42:b1:91:5b:c4:59:96:5b:30:da:
fd:6a:47:5c:77:f6:0e:3b:0a:ba:c0:80:27:e5:a0:
a2:9d:a3:52:14:8f:1b:7f:a6:6a:6b:d3:a8:d9:75:
b6:06:bc:27:62:91:35:b1:19:b0:12:73:ea:c2:0f:
67:2d:e4:59:50:8e:26:5e:63:2f:c2:d4:84:07:51:
6b:2d:d9:1f:54:1b:64:0f:a7:5f:8f:85:40:93:d3:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:4D:3D:21:E8:C0:FA:16:DC:16:03:A0:ED:55:2F:2B:EC:9F:E4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4BZNPSHowPoW3BYDoO1VLyvsn-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.96.0/23
Signature Algorithm: sha256WithRSAEncryption
84:e4:db:d2:a4:63:10:41:22:ea:0e:f0:1c:b5:9b:07:cb:ba:
dc:38:bc:b3:ed:1b:4d:01:e9:e4:5e:6d:bd:05:0f:b9:79:05:
c8:92:bc:f4:cb:41:cd:4a:77:80:1e:81:b1:aa:70:77:ee:47:
0c:73:16:aa:64:ca:2c:49:eb:e5:1e:7d:04:5d:f8:bc:6f:a1:
0f:13:4d:fb:bf:27:dd:24:c8:9f:a6:84:a4:a5:37:75:d8:86:
da:44:cd:4c:88:b5:58:5c:72:49:dc:a5:6d:27:02:29:73:8e:
33:a8:59:07:55:c0:be:7f:2e:0e:a9:bd:4d:98:8d:01:1a:82:
59:db:c7:a0:3d:f2:ef:dc:64:88:49:ad:1f:3a:cf:3d:a1:d4:
b0:8b:39:7b:97:c7:af:c0:0f:d7:8b:9b:82:cb:dc:dc:dc:40:
69:86:a5:84:fa:fd:67:cc:22:82:59:56:19:62:19:8f:e4:f3:
1f:c0:f6:26:f0:5d:3e:5e:93:06:dc:6f:3f:9d:a8:86:26:7d:
43:15:11:2d:b7:5a:39:8b:01:0b:eb:e6:1d:f5:92:4e:e0:cc:
dd:fe:84:29:04:56:7d:27:8a:36:e7:9b:d4:c8:07:7a:59:06:
e6:e5:41:95:01:d9:82:cf:82:7d:16:21:ee:6d:c8:4b:dc:f1:
44:93:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:00 2025 by rpki-client