Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/F6LohCBfiLBY_Yhya-audo3tItc.roa
File: F6LohCBfiLBY_Yhya-audo3tItc.roa (raw, json)
Hash identifier: uM/eFDFkUhEboCCgA2Y9T5yDpYi5rwKndPou8rA4G08=
Subject key identifier: 17:A2:E8:84:20:5F:88:B0:58:FD:88:72:6B:E6:AE:76:8D:ED:22:D7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64ADFEF48B9AB69FF0C5D2A364D246B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/F6LohCBfiLBY_Yhya-audo3tItc.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31017
IP address blocks: 80.97.125.0/24 maxlen: 24
193.231.242.0/24 maxlen: 24
217.156.76.0/24 maxlen: 24
193.226.60.0/24 maxlen: 24
85.120.34.0/24 maxlen: 24
193.226.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:df:ef:48:b9:ab:69:ff:0c:5d:2a:36:4d:24:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17a2e884205f88b058fd88726be6ae768ded22d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:e9:5a:90:ae:4c:38:5e:f2:72:b6:12:fd:
a8:98:11:f2:ef:3b:2b:f1:8b:02:06:e8:17:6a:33:
19:69:c2:5a:c4:98:0b:06:94:11:3b:65:25:75:1d:
09:53:9d:55:b9:89:90:25:6e:12:3a:31:97:5f:f9:
79:61:d1:15:ab:e8:43:70:4f:50:b4:01:2c:fe:ec:
3b:00:84:02:c2:dc:e1:2e:49:b3:56:af:9a:b9:56:
c6:a0:68:b2:f5:41:a0:d2:c5:4d:0b:d6:5f:fb:80:
70:20:13:22:a9:c9:d9:b6:dd:ed:80:79:47:61:c5:
72:72:2f:be:65:4f:8c:f6:1a:36:70:be:ec:f0:15:
28:c2:5a:24:be:32:9c:5f:1e:12:af:8c:fc:0e:04:
11:60:e4:29:2a:27:a5:cf:d3:07:42:39:71:90:e3:
d6:fb:1e:62:7d:61:8c:a5:7e:c5:f9:44:0c:6d:9c:
85:5c:dc:03:fb:69:48:eb:54:d8:e3:43:8a:e3:a3:
cf:2c:30:21:a3:df:9a:f3:1f:d5:2d:f4:13:61:f4:
56:dd:78:26:a0:56:aa:d8:f1:2d:69:be:58:b7:3f:
83:3d:04:cc:6c:c5:4e:3d:70:41:59:a7:98:67:c4:
7e:23:11:fd:3d:98:ae:01:ae:e3:9f:c6:5f:69:7d:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:E8:84:20:5F:88:B0:58:FD:88:72:6B:E6:AE:76:8D:ED:22:D7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/F6LohCBfiLBY_Yhya-audo3tItc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.125.0/24
85.120.34.0/24
193.226.60.0/24
193.226.63.0/24
193.231.242.0/24
217.156.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:68:f6:cc:d8:d2:7f:92:42:cf:f8:c3:39:3c:63:e3:a6:6c:
8a:b4:70:31:29:f6:21:7d:fb:4b:e2:2a:4b:5f:26:89:d2:62:
97:48:b6:22:3d:1a:6d:83:26:5d:14:1c:d9:2b:46:dd:b1:04:
2e:0c:50:2d:f7:60:83:4e:c2:5b:50:70:a2:b4:c6:bb:31:a9:
a6:d0:0a:b8:f5:7c:20:e3:36:7f:e1:3a:28:24:3d:08:29:68:
3e:a3:79:83:32:b6:89:30:69:89:91:af:52:ed:84:45:c2:17:
0e:1d:95:94:7c:6b:f4:d3:a1:6e:c4:9f:7a:ab:e1:72:c7:22:
36:f9:bf:0c:90:ba:91:2d:90:8b:56:06:eb:ee:c5:2f:d0:03:
36:47:37:cc:43:d1:d6:7d:49:7b:4b:a0:70:66:38:0c:22:9c:
cb:46:e3:67:50:67:cb:0c:27:1a:61:2b:36:3c:ec:4a:7d:0a:
47:d9:88:bc:a3:b5:bc:2e:41:6d:ca:45:70:ff:31:6d:1f:74:
bc:44:2d:a5:9a:84:6f:4c:7f:d7:5b:39:0c:af:73:d7:d7:03:
b4:ad:1a:86:65:d9:c5:8c:f8:64:fe:3b:b4:14:da:92:be:65:
78:f2:1d:05:ed:c2:86:26:8c:40:34:3b:83:ba:15:31:ee:5f:
2d:2d:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:44 2025 by rpki-client