Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lSz8iNUR4BYHUzodWI4IKUjvB8M.roa
File: lSz8iNUR4BYHUzodWI4IKUjvB8M.roa (raw, json)
Hash identifier: 4Cb9ExDIbkdkmk24c5dYUzKPJi4zNmm8QhqOEuKww+0=
Subject key identifier: 95:2C:FC:88:D5:11:E0:16:07:53:3A:1D:58:8E:08:29:48:EF:07:C3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193AF43E7010FFA852ADFF6A89054CB041C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lSz8iNUR4BYHUzodWI4IKUjvB8M.roa
Signing time: Tue 10 Dec 2024 06:31:23 +0000
ROA not before: Tue 10 Dec 2024 06:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 80.96.70.0/23 maxlen: 24
217.156.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 09:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:43:e7:01:0f:fa:85:2a:df:f6:a8:90:54:cb:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 10 06:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=952cfc88d511e01607533a1d588e082948ef07c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3d:10:07:8b:a2:03:fb:20:18:db:8c:8e:ff:
5c:a5:c6:72:96:07:9d:65:a2:04:31:35:01:ad:08:
5f:9c:f1:1c:37:4f:92:24:2e:8c:29:95:96:41:18:
93:89:a9:e2:5a:0b:4e:a6:27:b2:0a:87:b3:4f:dd:
16:aa:79:24:f7:cd:05:56:d4:7f:34:cd:99:f9:9c:
8f:55:b6:19:73:72:d2:1c:8d:d6:4e:0c:e2:8c:7d:
6b:b3:9f:33:cd:cc:9f:fa:9d:f9:30:c1:df:cb:ce:
8b:a1:2e:4a:2e:ef:77:85:51:e7:2d:0a:4a:34:f9:
af:4a:1a:36:e3:03:5d:ea:4a:d6:09:6f:15:01:44:
92:39:13:ac:e7:b7:de:96:e0:4d:5c:22:e8:9b:a5:
f4:91:74:a7:c2:48:50:8a:0d:6a:f5:7d:2b:62:49:
62:1f:8d:53:ef:0f:df:09:2c:bc:77:78:68:a9:07:
4d:08:3c:b3:f8:63:1f:d3:bb:be:43:98:32:a1:99:
2a:48:55:b6:8f:cb:8a:fd:dc:6e:e7:4e:0e:db:ee:
85:1b:9d:96:0b:26:6c:b0:a4:e4:34:fa:72:9c:db:
18:4d:d6:ee:36:fd:85:33:eb:ba:58:88:83:dd:5e:
81:21:d3:3c:5f:a9:3f:53:eb:2e:4f:f2:53:43:07:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2C:FC:88:D5:11:E0:16:07:53:3A:1D:58:8E:08:29:48:EF:07:C3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lSz8iNUR4BYHUzodWI4IKUjvB8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.70.0/23
217.156.32.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8a:70:ba:de:1f:5c:4b:5b:68:86:8a:60:a1:2a:a3:3b:5c:
67:73:1b:5b:24:59:24:c8:1c:ec:c2:7a:e8:88:fb:57:91:d3:
94:ce:fe:72:15:69:aa:1d:f7:01:6f:0f:4f:af:32:9c:e4:3c:
b1:9f:a8:c6:97:ff:6d:ba:e2:19:67:30:32:fd:fe:69:21:31:
be:a7:7b:71:ee:03:3b:cb:9c:9d:f9:34:48:a5:c8:e8:5a:18:
68:ec:d9:41:42:c5:62:21:e9:c2:b1:8c:d7:9e:d9:f9:a0:63:
16:ca:37:cb:b6:e6:15:4f:e0:0b:b2:68:3c:d7:01:4e:03:6d:
1c:91:48:13:ce:0a:09:7b:83:e4:4b:29:8d:b5:a8:58:e7:b9:
f6:fd:11:0c:8b:c9:32:57:87:d2:b9:1f:bb:28:64:0e:66:13:
80:10:19:47:12:7a:ca:a0:0a:4a:b9:d8:ba:42:9e:2c:79:d7:
34:f1:4c:1c:62:dc:c2:02:07:6e:d0:b9:fd:af:34:4b:be:f8:
45:09:4c:26:65:5b:a4:de:b4:49:bf:8a:96:a9:ff:2f:e8:03:
e4:34:24:e9:e0:94:38:b1:1c:f9:39:98:57:6b:d2:14:4e:d0:
00:b3:65:53:c4:6e:dd:16:fa:4b:74:df:ef:44:bc:a0:e7:8b:
6c:3b:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:56 2025 by rpki-client