Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N4JbFm3oDmZ4WiW1SyGRKdDut_8.roa
File: N4JbFm3oDmZ4WiW1SyGRKdDut_8.roa (raw, json)
Hash identifier: m6nd8ae8YK7/a7WojDk1k8zZZiP9WamAWDJWhHJ/SA8=
Subject key identifier: 37:82:5B:16:6D:E8:0E:66:78:5A:25:B5:4B:21:91:29:D0:EE:B7:FF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018DF50910E9FD461324EC4423E5C8F4EAC2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N4JbFm3oDmZ4WiW1SyGRKdDut_8.roa
Signing time: Thu 29 Feb 2024 13:23:48 +0000
ROA not before: Thu 29 Feb 2024 13:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61002
IP address blocks: 80.96.107.0/24 maxlen: 24
80.97.54.0/23 maxlen: 23
217.156.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 14 Apr 2024 11:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:09:10:e9:fd:46:13:24:ec:44:23:e5:c8:f4:ea:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 29 13:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37825b166de80e66785a25b54b219129d0eeb7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:b6:33:37:da:9a:f4:1b:84:3e:3b:a7:0c:
65:6b:19:78:4d:7a:89:7b:c7:ca:f2:7b:75:b6:df:
28:a1:40:7c:08:60:cb:fc:6e:07:89:3d:91:27:c8:
aa:da:02:81:9d:19:7c:be:a0:54:6e:d9:5f:b8:30:
af:d9:71:b5:15:4e:e9:5d:50:b0:11:ed:e5:6c:a6:
ad:20:9b:86:9b:57:a3:64:e2:62:48:2f:91:ab:58:
1e:5b:69:6b:19:d1:94:7d:44:aa:22:d9:b6:1a:41:
19:9b:93:a6:58:8e:f5:6b:44:31:82:fe:2c:6d:b9:
c2:3b:af:34:d6:31:02:a6:e5:c9:07:93:e9:b3:01:
d1:88:ca:3b:08:0f:e2:90:b8:f8:8d:88:63:45:49:
2c:e0:4a:43:e4:be:15:ee:81:8e:10:38:e0:aa:c3:
78:e4:24:13:e7:72:2b:19:8d:4d:b6:d4:95:1f:05:
84:a5:02:2b:fc:ab:54:14:2f:68:05:03:11:af:a1:
cb:ff:c2:d3:53:75:24:35:ef:df:c1:2c:30:0e:b8:
15:ff:03:61:2b:48:01:5a:9a:a0:f6:e6:8b:c1:43:
f5:70:de:da:85:e3:49:bd:28:59:63:f9:ac:06:32:
cb:2a:26:c2:d5:a5:4c:5d:b2:57:c5:e1:c9:44:06:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:82:5B:16:6D:E8:0E:66:78:5A:25:B5:4B:21:91:29:D0:EE:B7:FF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N4JbFm3oDmZ4WiW1SyGRKdDut_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.107.0/24
80.97.54.0/23
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:82:2e:b9:2e:ec:e7:7c:d7:7b:a1:1a:a7:e3:d3:0a:e8:80:
14:26:8e:25:4c:d7:80:22:32:ca:63:59:38:8c:ee:96:19:0b:
bd:28:9c:94:c1:f8:ec:90:84:ce:ef:32:11:86:58:50:3d:39:
2d:37:76:e9:62:0c:b2:68:db:e6:a1:12:6e:56:64:f8:05:04:
09:2b:c2:c7:da:26:cc:08:7a:0c:f5:06:ac:c5:a1:66:a1:5d:
e0:93:fc:b4:33:f3:cf:c0:31:da:ed:b2:5a:63:ba:94:a2:05:
35:1c:15:6d:ff:a8:d9:36:6c:2f:ee:3f:4e:d7:ae:95:54:4b:
6f:5f:38:29:d2:c9:54:84:ea:a6:6d:9a:1b:8b:d3:81:e0:dd:
f0:df:ee:a9:aa:86:f7:0a:d8:e9:c5:05:a4:2c:89:06:9f:8b:
25:17:b1:b9:ba:08:13:3f:49:99:06:8e:fc:3e:33:99:9c:27:
4e:59:73:49:bb:4e:5c:e7:5d:4f:95:af:76:eb:4c:db:4d:c7:
8a:eb:89:77:bd:3f:30:91:c6:f7:a8:c4:68:52:4b:77:93:df:
d7:d0:1a:01:cb:73:ca:25:bf:7d:02:f9:0a:b0:a1:f7:52:1e:
76:11:3a:b4:8c:da:59:27:29:5f:c0:8e:53:d2:2f:42:25:b6:
27:db:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 14:33:48 2024 by rpki-client on console-fra.rpki-client.org