Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/olYtiJvUKyYroXxQb-8ALN52YAs.roa
File: olYtiJvUKyYroXxQb-8ALN52YAs.roa (raw, json)
Hash identifier: YQDYo3bGGBwLG2CXIzQQ6+5UF5+xO4I0Lm9PRlAfMLQ=
Subject key identifier: A2:56:2D:88:9B:D4:2B:26:2B:A1:7C:50:6F:EF:00:2C:DE:76:60:0B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14E4A263357946BD2958179C457765
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/olYtiJvUKyYroXxQb-8ALN52YAs.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6718
IP address blocks: 80.97.49.0/24 maxlen: 24
85.120.222.0/23 maxlen: 24
80.96.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e4:a2:63:35:79:46:bd:29:58:17:9c:45:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2562d889bd42b262ba17c506fef002cde76600b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:14:e9:da:c6:c4:a9:5c:4c:31:67:04:68:
ed:02:fe:07:e4:50:8c:65:40:a5:d7:12:b5:fc:6b:
ce:35:8c:37:6f:8d:03:2c:0e:85:e3:4a:fc:dd:a7:
c0:bd:b3:d9:0f:3e:ac:b7:e4:26:43:b7:94:48:c9:
af:5b:b5:d7:14:ad:a8:40:e6:cd:b8:8e:22:4a:68:
a2:78:29:10:e9:a5:96:c0:51:87:fa:18:0c:2f:3f:
d7:1a:d9:7f:4d:4f:8d:4e:52:16:81:87:ec:45:f4:
a5:5c:9a:c9:a7:67:ba:47:f6:cd:c5:ac:04:15:59:
e1:8c:82:f2:f5:d1:99:fb:ef:73:e2:69:8b:a1:62:
4a:d8:af:1c:4a:74:23:bc:3f:0e:4e:fa:83:6a:44:
2a:e6:91:e6:dd:f1:72:85:ff:cc:61:cf:dd:d5:fb:
bb:5c:bc:bb:5e:2a:e6:85:2e:60:49:15:f1:fb:5c:
03:a5:1f:84:0f:34:d8:8c:2b:fb:47:6a:36:a5:27:
6f:04:7c:9d:79:f6:b1:ba:a0:3d:3c:f7:cc:aa:c7:
e1:9c:c7:fc:ec:a9:57:c9:94:6b:34:a8:ea:70:b8:
75:d3:6e:1a:ba:d4:b7:e1:5a:6e:04:b7:0a:79:40:
f6:a8:66:72:2b:9f:a7:ae:38:19:79:24:00:60:72:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:56:2D:88:9B:D4:2B:26:2B:A1:7C:50:6F:EF:00:2C:DE:76:60:0B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/olYtiJvUKyYroXxQb-8ALN52YAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.42.0/24
80.97.49.0/24
85.120.222.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:54:f1:9c:ca:04:dd:3f:e4:7a:a2:65:f1:3c:6a:28:8f:97:
d0:02:58:20:62:00:92:30:cb:f0:14:34:c5:7c:80:6b:a0:8c:
db:94:fe:1e:43:fc:f6:f7:c1:74:e2:5d:57:4e:d9:54:ae:66:
c9:6a:d3:0e:43:57:2b:d2:bc:3e:db:2c:1e:14:87:33:39:0f:
6a:25:e1:59:88:5d:84:84:55:99:40:f6:e2:15:8f:7d:e0:8d:
52:10:96:05:b0:0d:09:cf:94:70:d1:e0:ca:f9:7e:07:93:e8:
e5:68:17:8c:22:ef:e2:ef:d0:2f:47:a1:f1:58:c5:48:cf:8b:
53:f4:11:de:7a:bc:59:25:ec:1e:85:7e:c0:8a:c7:32:4c:51:
5a:2b:d7:76:ab:1c:5c:0c:9e:ab:60:dc:c6:78:ea:5f:76:4a:
0c:6b:ee:f8:58:c9:01:6e:45:d9:1c:51:33:53:6f:c7:ed:a1:
cb:63:f7:4d:47:0d:bd:68:e0:1d:53:20:f2:ee:4a:24:74:4f:
30:42:f9:4b:83:e0:bc:30:71:3e:a8:cf:f5:81:33:4f:9b:06:
c4:c9:5a:f4:88:cf:55:83:ed:73:ea:c8:64:7e:4b:cd:bc:4c:
2d:fd:28:58:61:bb:9d:08:95:ab:0a:37:34:31:d9:a1:a4:6f:
6d:db:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org