Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DsRPUgg-huqiyETfF94_R69GYfY.roa
File: DsRPUgg-huqiyETfF94_R69GYfY.roa (raw, json)
Hash identifier: OSzHFoxQhOL4qUc3gNipBmtdJ3IrDYVKWwloWpNwTXg=
Subject key identifier: 0E:C4:4F:52:08:3E:86:EA:A2:C8:44:DF:17:DE:3F:47:AF:46:61:F6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14FF834537BA1F3696AF6E089F7D13
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DsRPUgg-huqiyETfF94_R69GYfY.roa
Signing time: Sun 01 Jan 2023 20:45:25 +0000
ROA not before: Sun 01 Jan 2023 20:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48931
IP address blocks: 80.96.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ff:83:45:37:ba:1f:36:96:af:6e:08:9f:7d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec44f52083e86eaa2c844df17de3f47af4661f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:79:b0:03:18:50:3e:e3:99:45:a6:8d:38:
21:b3:11:22:29:b3:89:72:08:03:84:87:fc:a1:20:
12:18:d4:20:1e:d6:e5:53:02:b9:05:b3:25:87:1d:
93:63:5e:7a:15:a2:72:41:6d:20:06:d2:22:4f:58:
12:a7:15:97:ca:f8:0c:2f:de:91:14:ad:e1:a5:fd:
ef:25:ed:d9:a2:5e:2e:b1:dc:94:28:2a:5e:47:24:
e4:78:d7:b4:46:35:d4:f4:a6:eb:3a:0f:14:e8:15:
6d:1e:37:d3:14:6f:f4:f8:02:fe:f9:68:a6:e3:8a:
b6:13:bb:e6:97:47:96:3c:45:f8:50:59:cb:5c:f3:
d6:c7:1f:b5:a7:f0:5d:88:e7:50:12:a1:f7:d3:3c:
68:52:1d:5f:c7:80:56:b0:65:b7:80:13:c5:d5:25:
d4:a6:b6:02:a0:63:6e:11:80:36:5b:a4:6b:a9:ee:
87:4b:30:47:dc:13:31:bb:2e:d5:51:27:39:25:6c:
ea:d1:45:a4:a7:06:98:50:9a:d1:8d:9b:e5:f1:e3:
2c:d3:43:ce:db:d6:8c:3a:6f:8e:cf:a7:2f:ad:c1:
75:a6:43:d5:18:aa:84:1f:17:97:a0:fe:68:35:84:
93:e7:da:02:d7:ce:4d:f0:62:db:9a:7e:72:1b:b1:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C4:4F:52:08:3E:86:EA:A2:C8:44:DF:17:DE:3F:47:AF:46:61:F6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DsRPUgg-huqiyETfF94_R69GYfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ec:a8:cd:39:95:11:cc:3c:83:8e:b5:a0:20:52:1b:25:09:
35:ac:72:3e:5a:4a:fc:9d:1b:04:22:4f:58:93:98:3d:c6:cf:
12:95:ae:90:39:92:90:07:de:19:11:00:7d:b2:e5:2f:51:41:
5f:d5:c3:27:46:2e:a8:e4:de:8a:a4:01:17:cd:7d:cc:95:a8:
ad:54:c7:11:24:9d:b8:b0:46:57:38:17:c7:42:4f:50:8c:77:
50:db:3d:b0:80:64:54:a0:7d:22:2d:0d:08:ff:80:9b:03:3f:
6b:c4:6d:83:d5:85:b8:e6:eb:d5:35:15:26:7c:55:2b:56:59:
e0:b3:49:ad:d1:31:85:8f:e1:53:c4:e4:a6:cc:99:37:58:36:
1c:1e:35:45:79:0a:26:ca:e1:98:b2:2d:93:3d:cd:cc:33:70:
54:60:c2:ab:f8:99:d5:ab:34:d1:a3:01:f4:8f:42:ca:2e:b5:
bc:d8:56:78:0b:7d:e7:5e:2c:ed:aa:40:db:f1:08:68:24:f6:
bf:5a:73:9b:8d:8d:53:25:70:5f:55:df:6c:11:0a:68:83:50:
23:5d:dd:2a:b9:73:c2:e1:b6:d5:2d:25:0d:a9:5c:a4:98:3d:
59:11:1c:1d:38:90:d6:d6:3b:d2:84:8c:15:b7:1f:62:b4:a6:
f7:68:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org