Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_WueJGrpdVGJqUSkJc8TGcSCrXo.roa
File: _WueJGrpdVGJqUSkJc8TGcSCrXo.roa (raw, json)
Hash identifier: mzPjIMPb3ql4cpWntNm4d7nxN3hylnaxlTlUc6C37uk=
Subject key identifier: FD:6B:9E:24:6A:E9:75:51:89:A9:44:A4:25:CF:13:19:C4:82:AD:7A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEB64E68219E3FC088DB01DBFB6EF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_WueJGrpdVGJqUSkJc8TGcSCrXo.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48931
IP address blocks: 80.96.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:eb:64:e6:82:19:e3:fc:08:8d:b0:1d:bf:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd6b9e246ae9755189a944a425cf1319c482ad7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:99:76:08:d1:0a:a2:cc:62:96:92:cc:26:
d6:49:ac:53:0e:76:e6:62:67:bf:db:e0:a9:a2:e1:
91:67:d2:b9:d5:5d:03:fb:52:bf:33:5b:f2:5b:ab:
cd:37:ae:90:20:5c:eb:6c:a4:ce:9c:4c:1f:ba:8f:
76:d7:e6:f0:10:f3:4d:93:01:b4:40:33:21:0f:20:
00:a2:ed:ff:d0:a7:0f:4f:50:be:5b:74:06:39:ea:
a3:83:cc:55:af:2d:bf:88:77:d7:3a:34:12:59:ae:
36:a2:8a:3b:8f:23:6f:86:6e:ac:e1:2e:f9:8a:f8:
7b:be:27:54:3a:33:91:75:84:ca:f1:2e:b7:ed:fb:
3e:6e:da:46:ef:ac:d7:ef:e6:7a:46:47:e4:5f:6b:
d1:c1:4b:48:3b:09:3c:34:1c:c9:ee:2e:17:45:37:
43:19:c7:12:92:1b:1e:8d:be:4f:0d:26:a2:f5:61:
2a:19:8c:bb:d9:98:90:f3:2a:54:be:86:17:48:c9:
fc:63:79:2a:99:81:b8:03:f4:cf:5d:eb:a5:52:33:
7f:3a:21:e1:94:1c:31:e2:39:a7:77:f6:4c:f7:e7:
d1:6b:51:62:a4:fb:7b:e0:7a:91:6e:40:34:a3:0b:
37:25:d6:48:ff:ae:98:ec:ab:34:e6:d8:91:3a:52:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:9E:24:6A:E9:75:51:89:A9:44:A4:25:CF:13:19:C4:82:AD:7A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_WueJGrpdVGJqUSkJc8TGcSCrXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:67:7b:0c:78:61:aa:7e:62:b5:b3:fe:db:e8:53:6b:5d:ef:
35:68:70:b9:f9:94:a5:78:b9:45:99:88:8c:e8:3e:27:91:a0:
ca:02:03:4c:72:53:eb:f5:7d:78:36:3d:f1:e1:3a:76:f0:65:
59:42:0d:ca:d5:20:20:42:f2:6c:1c:a4:77:47:51:8c:ff:87:
7b:98:16:75:dd:43:3d:4e:1d:65:f9:5c:3e:5b:08:7b:b3:15:
29:c0:ff:27:f9:e1:af:a9:3e:e1:40:f4:4d:88:70:aa:21:22:
bb:a5:54:9a:98:4d:f6:d9:56:8d:92:cc:3d:d4:3b:e4:0e:13:
06:13:4b:75:9f:82:0a:8c:c7:52:b9:74:d3:b8:a1:c9:03:3c:
fe:39:af:5b:31:c1:a3:07:8b:65:e2:bd:e0:d8:24:b1:30:25:
e1:b9:1e:b6:30:9f:c5:f7:a7:44:b6:83:49:8c:8a:83:44:83:
ed:93:6d:56:53:5e:b0:aa:d9:10:2c:e2:68:3a:c2:1c:ef:1e:
ce:ce:b5:49:e7:4e:17:44:48:32:c5:58:92:ce:44:75:48:d2:
c5:53:f3:8c:ec:91:76:ee:01:87:49:64:9d:c9:61:a9:ed:5d:
a7:a6:d6:f1:d4:52:26:e0:de:e4:60:c2:26:5f:e0:04:e7:c0:
e7:0b:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:33 2025 by rpki-client