Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oBpyGvRhIqB2MyIYB_Pcx8liCTA.roa
File: oBpyGvRhIqB2MyIYB_Pcx8liCTA.roa (raw, json)
Hash identifier: DAY2xOg0LTtiqdPXfFOPnzsASnZBcPWYoZHkCjgbwmU=
Subject key identifier: A0:1A:72:1A:F4:61:22:A0:76:33:22:18:07:F3:DC:C7:C9:62:09:30
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193648F4152350F0C5D63B17DAF7E398BD6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oBpyGvRhIqB2MyIYB_Pcx8liCTA.roa
Signing time: Mon 25 Nov 2024 18:22:10 +0000
ROA not before: Mon 25 Nov 2024 18:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213323
IP address blocks: 80.96.48.0/23 maxlen: 23
81.181.232.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:8f:41:52:35:0f:0c:5d:63:b1:7d:af:7e:39:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 25 18:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a01a721af46122a07633221807f3dcc7c9620930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:4e:7d:bb:34:76:f9:f0:89:0b:55:2d:d6:
7e:f4:4b:99:2c:b3:b7:9d:06:51:27:15:95:41:a9:
ff:ca:94:c7:4e:70:4f:a6:b3:f8:e7:65:08:10:0f:
a7:75:d8:72:71:f1:2d:8b:fc:96:23:e8:ed:27:35:
12:1b:bd:bf:79:cc:92:aa:d4:42:ce:d8:9d:8a:b3:
92:ce:c2:11:27:43:8e:3e:92:ef:09:49:f1:8a:35:
a7:a0:ca:cb:e1:33:34:19:22:ad:81:51:03:55:bf:
82:60:df:85:d6:d8:34:2c:82:02:ad:bc:fb:ca:2a:
63:2d:fe:d2:44:16:0a:ab:ea:8e:76:fa:b0:5b:37:
b5:18:03:f4:77:bb:c0:52:7f:d0:c7:63:6b:89:97:
58:ff:a0:7b:6b:65:cb:f5:5b:7f:f0:a3:50:03:39:
97:35:f3:e0:9c:5a:ee:a1:5f:af:89:18:87:bc:8e:
af:cf:4b:ea:7b:dc:dc:15:ed:b7:58:53:c0:b2:3a:
73:80:a3:98:8d:82:30:81:f7:ab:17:00:84:0f:31:
05:7c:d9:0f:b0:73:44:97:9d:58:5e:f5:d9:a2:b6:
12:e9:d9:91:e2:5f:72:78:71:ec:1d:c5:32:d1:f3:
28:b9:2f:7e:db:c1:dc:3e:a3:49:ac:ea:b9:d8:02:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:72:1A:F4:61:22:A0:76:33:22:18:07:F3:DC:C7:C9:62:09:30
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oBpyGvRhIqB2MyIYB_Pcx8liCTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.48.0/23
81.181.232.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:f6:7a:20:d2:91:32:35:e8:bf:19:49:bf:23:ee:1c:61:3b:
b7:e9:f5:e4:0e:7c:26:36:9c:52:54:e5:71:85:d4:e4:a3:2a:
bc:dd:db:52:68:13:39:a9:59:fc:7f:f9:ff:96:9e:c3:e4:ff:
6e:e0:ea:2a:3f:c5:b9:53:57:35:09:b0:be:65:ff:e4:43:c9:
b1:2f:f7:c1:82:f1:78:0d:2c:37:86:c4:02:d7:ea:28:da:a5:
24:eb:93:02:8d:a2:05:07:4f:14:31:8c:8e:f0:0f:3f:fa:f6:
c6:67:82:02:a0:83:01:6e:56:6e:ed:7e:a9:15:dc:66:c8:fe:
5a:e7:b9:20:de:56:3c:f3:76:bf:be:e7:f4:84:b9:10:2f:82:
86:75:1c:1f:77:6b:8f:22:d4:f5:32:63:ed:e1:f2:dd:b8:53:
c4:37:ae:50:12:35:65:9f:bf:ec:90:35:e2:08:40:96:76:b6:
1f:71:3a:9a:c2:59:70:d6:13:0f:66:44:28:1a:b9:97:d8:da:
a6:4e:51:8e:02:bf:7b:fe:26:fa:bb:11:31:5a:c1:88:5b:c5:
1f:2d:78:52:89:92:e7:58:fe:6f:3a:f1:e0:6d:8f:79:ab:de:
cc:50:d0:00:1e:a3:18:dc:8e:b9:99:15:8b:9e:ff:79:2b:d9:
50:f3:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:09 2025 by rpki-client