Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dv-AN4r91cGfYSyCy_A5Tar9ezI.roa
File: dv-AN4r91cGfYSyCy_A5Tar9ezI.roa (raw, json)
Hash identifier: aEj9EclTsdYDamiDAwyVHcmL7mMDp6n/p+TunNvS9g0=
Subject key identifier: 76:FF:80:37:8A:FD:D5:C1:9F:61:2C:82:CB:F0:39:4D:AA:FD:7B:32
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F150BEE32FC0238FD213F5336D6B842
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dv-AN4r91cGfYSyCy_A5Tar9ezI.roa
Signing time: Sun 01 Jan 2023 20:45:28 +0000
ROA not before: Sun 01 Jan 2023 20:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205001
IP address blocks: 80.96.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:0b:ee:32:fc:02:38:fd:21:3f:53:36:d6:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ff80378afdd5c19f612c82cbf0394daafd7b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:fb:67:72:de:d7:de:17:3b:23:2b:4b:d3:
e3:07:c1:00:1f:23:15:b3:3a:c2:56:ef:07:7a:f7:
fd:ab:c8:15:f0:99:b0:bf:58:60:d9:2a:00:48:1c:
1a:ad:6e:a7:2a:07:7b:5e:c4:65:d2:64:49:c8:84:
9d:08:3a:ce:fd:ca:e4:89:9f:d6:52:79:cb:cb:71:
14:05:07:78:81:cf:fe:ea:6c:0d:24:18:bf:06:93:
f0:38:86:46:2c:7f:18:44:53:74:e4:66:02:77:ab:
2d:40:f6:f7:e6:ea:5a:db:b4:08:62:1f:37:97:7a:
1e:2f:08:67:c2:e2:ab:98:6f:59:79:08:e8:a2:61:
b6:04:c6:a1:0b:0e:74:c9:32:c6:5f:be:5b:ef:29:
d4:9b:74:01:fa:b0:a6:5c:ae:28:2e:96:61:ea:b4:
f4:98:1f:cb:ca:6c:d7:12:6f:fb:01:98:a1:7f:96:
be:e0:4f:b0:b2:3b:92:d8:9d:de:44:58:f5:d1:b8:
7b:bf:47:69:65:26:91:fc:3b:46:42:51:10:9e:08:
b6:5a:30:e0:3b:7e:49:25:0a:f2:a1:0f:79:ca:57:
8f:db:68:61:6c:b7:ce:a2:ec:43:9f:85:82:2f:96:
13:27:4b:d6:18:6d:5a:5c:02:81:c1:9b:6d:c2:3b:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:80:37:8A:FD:D5:C1:9F:61:2C:82:CB:F0:39:4D:AA:FD:7B:32
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dv-AN4r91cGfYSyCy_A5Tar9ezI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.41.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ae:04:22:97:dc:81:42:29:b5:bf:f1:48:5c:62:80:01:00:
b6:96:5a:c2:e6:60:25:ac:34:14:0d:f9:eb:da:34:2c:a5:f9:
7d:6e:66:34:75:6f:66:65:fe:df:3c:1c:d7:64:2a:40:9b:7a:
1a:bb:aa:f4:f1:4b:8d:45:04:4b:76:bc:02:dc:de:2d:97:8a:
5d:75:82:64:50:25:61:86:0b:a5:03:17:83:ef:68:81:90:b5:
7d:dc:ee:5f:00:b1:bd:36:ca:3a:de:4e:2a:e8:0c:b5:e4:86:
4c:25:2e:97:86:e8:f9:92:e2:a0:d2:a9:82:7b:5b:03:ad:2a:
9b:96:16:b6:db:fa:89:ab:83:c8:10:a0:aa:f0:16:93:c1:3a:
99:66:92:95:b6:67:cc:26:56:fd:81:e0:05:d4:34:69:c7:2e:
18:9b:d1:70:fe:7b:c7:de:7e:95:d1:e2:c0:8e:6a:80:85:16:
f2:e2:89:41:6c:88:9b:50:c3:2b:c4:94:16:0e:95:6a:07:22:
6a:41:73:67:f0:98:43:07:ca:08:ee:c2:3d:78:8a:ff:33:91:
7c:6f:d9:15:94:b7:c6:77:3f:71:26:9a:ab:be:92:a4:7f:b7:
b7:46:34:00:79:71:ea:b6:26:5a:a2:20:95:da:5b:63:10:e5:
01:2e:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org