Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7n2P9hCkFeqgq_kwPnvQYZgnZgU.roa
File: 7n2P9hCkFeqgq_kwPnvQYZgnZgU.roa (raw, json)
Hash identifier: JoNQo9e9oEQaKK4QGjUxh2WU5W+D8wsJaxqT2/PaTn8=
Subject key identifier: EE:7D:8F:F6:10:A4:15:EA:A0:AB:F9:30:3E:7B:D0:61:98:27:66:05
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193BF7826B501D22207FD76269D37F67D24
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7n2P9hCkFeqgq_kwPnvQYZgnZgU.roa
Signing time: Fri 13 Dec 2024 10:02:22 +0000
ROA not before: Fri 13 Dec 2024 10:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 80.96.18.0/23 maxlen: 23
80.96.70.0/23 maxlen: 24
80.96.100.0/23 maxlen: 23
81.180.108.0/23 maxlen: 23
81.181.162.0/23 maxlen: 23
85.122.60.0/23 maxlen: 23
217.156.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:78:26:b5:01:d2:22:07:fd:76:26:9d:37:f6:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 13 10:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee7d8ff610a415eaa0abf9303e7bd06198276605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:37:e6:a0:cc:f8:21:27:09:3e:e1:8c:c9:
aa:c4:48:51:a9:8a:02:c9:4c:fe:77:9a:ca:b7:7a:
ce:bb:c6:bc:c8:c8:52:35:7d:0c:3e:63:10:9e:b6:
1b:53:12:de:98:25:2f:e9:64:7b:66:b1:f1:85:c0:
98:48:19:ea:30:ab:bb:30:e1:13:b2:ca:e5:4b:df:
4d:50:d1:22:e5:4f:7e:15:e3:e2:d7:b0:eb:94:65:
84:16:a1:0e:4c:15:86:ec:25:29:9f:a9:a9:3a:e2:
f9:fd:da:70:e9:ac:eb:76:dd:02:bc:fc:e9:97:09:
a1:62:e1:84:ce:e1:64:cf:3a:92:ef:24:07:c7:89:
24:77:04:b1:df:ea:40:60:45:89:f1:75:c4:66:c4:
17:87:14:d2:3a:50:9d:73:43:24:c6:0d:7f:03:ac:
25:10:17:c3:85:c2:3f:66:82:04:fb:2b:38:a2:f9:
47:25:0d:df:38:d0:1f:2e:29:0a:00:19:6d:c4:62:
be:85:3c:9a:42:b6:4e:2f:b0:dd:29:01:af:f3:4f:
af:39:33:b5:8d:e4:fc:b7:c8:12:0f:f9:3f:e8:41:
89:d0:f4:ba:4e:42:b1:37:09:4b:e8:60:40:c5:9a:
be:7b:af:f0:b0:4e:e2:18:75:96:12:b9:11:d0:0c:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:8F:F6:10:A4:15:EA:A0:AB:F9:30:3E:7B:D0:61:98:27:66:05
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7n2P9hCkFeqgq_kwPnvQYZgnZgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.18.0/23
80.96.70.0/23
80.96.100.0/23
81.180.108.0/23
81.181.162.0/23
85.122.60.0/23
217.156.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f2:77:eb:22:26:77:20:29:29:84:84:c7:7b:72:3d:40:7c:
49:10:5c:7a:06:14:88:c9:fe:c2:54:05:c4:ee:aa:f1:5f:b2:
07:19:f5:f8:9c:51:46:73:e5:76:dd:58:7a:44:61:e1:27:56:
f4:40:ad:c0:22:0f:cd:db:03:7f:6a:f7:56:e8:48:89:a1:7b:
6d:35:5b:a0:00:88:62:9e:40:f7:86:25:0b:6d:bf:00:f5:3d:
87:9c:97:2a:8b:c1:91:9a:bc:95:38:d2:11:32:d2:ad:4d:f6:
e2:cf:7c:17:8f:08:04:ef:4e:bf:0d:b1:23:c8:7e:c4:4e:62:
78:62:7b:2e:a4:ff:d9:d7:d1:31:46:f1:ab:b8:53:1c:12:f1:
a4:04:88:a8:95:6f:81:90:99:2f:72:f6:a8:32:b9:70:71:e5:
94:a3:4b:c8:f0:ec:8c:9c:83:a2:c9:da:84:5d:08:c6:20:d7:
f5:3c:1a:aa:35:4b:d3:15:be:f4:46:8c:38:9e:df:8b:e6:85:
e9:fa:de:09:f4:32:a9:6b:63:17:5e:89:06:e8:e5:07:c9:70:
6d:9a:a9:d4:47:cd:98:db:71:ae:e0:4a:0f:3f:11:1a:b7:f0:
a4:5e:b1:48:51:40:2e:37:54:93:ce:e1:69:69:ed:e2:a8:64:
81:9c:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:04:01 2025 by rpki-client