Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rSLKA6096nuvikDkRZEqzHMDk1Y.roa
File: rSLKA6096nuvikDkRZEqzHMDk1Y.roa (raw, json)
Hash identifier: 33Mc7XAXPjbn1XmNtZWf7Rq94G0Bcv6WlrSa3LJ7P20=
Subject key identifier: AD:22:CA:03:AD:3D:EA:7B:AF:8A:40:E4:45:91:2A:CC:73:03:93:56
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F3E385E7F659EF4E06DEDAA42FFD
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rSLKA6096nuvikDkRZEqzHMDk1Y.roa
Signing time: Sun 01 Jan 2023 20:45:22 +0000
ROA not before: Sun 01 Jan 2023 20:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28727
IP address blocks: 80.96.175.0/24 maxlen: 24
80.96.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f3:e3:85:e7:f6:59:ef:4e:06:de:da:a4:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad22ca03ad3dea7baf8a40e445912acc73039356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:1b:0f:66:5d:37:67:58:93:92:06:7d:9f:
6e:a9:a3:54:79:81:0c:2f:1c:c8:bf:41:32:ec:36:
d6:a1:82:32:52:a8:b9:f9:b2:f0:74:a0:81:2e:e9:
cb:d7:f9:f5:09:6c:82:3a:58:41:ac:90:40:40:0f:
eb:79:1b:2a:ab:22:94:9b:45:57:8b:61:9e:e4:bb:
21:fe:c4:76:d7:a9:f5:95:d1:0f:d4:00:d3:ac:d4:
c6:3d:f2:e3:08:96:fd:fb:1d:1a:ae:6d:7a:8e:65:
b6:ed:ac:96:49:fd:64:9f:7f:b2:40:62:eb:41:95:
2b:f2:9e:bc:e5:62:99:8e:f7:a0:7c:02:23:51:62:
44:f5:ff:4a:f6:2a:2e:1b:51:ec:f5:74:03:fa:2e:
73:38:28:4e:fc:28:6a:86:62:0c:ad:68:57:2d:d7:
10:8b:ee:ce:5f:9b:e9:ef:e3:5a:74:56:d4:70:16:
1c:de:40:40:ce:1a:fc:44:e5:3c:58:16:8f:8d:9f:
5c:72:ff:8d:ab:cb:f0:ac:68:e0:e3:7b:60:ed:90:
cc:ce:95:e4:6f:b2:97:f3:eb:ed:8d:68:dd:ad:de:
84:1c:05:06:b8:cd:d3:f0:74:de:f2:9a:4a:24:a9:
c4:3b:ed:fd:46:56:55:88:70:48:ea:ac:a4:4a:44:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:CA:03:AD:3D:EA:7B:AF:8A:40:E4:45:91:2A:CC:73:03:93:56
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rSLKA6096nuvikDkRZEqzHMDk1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.153.0/24
80.96.175.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8b:54:72:b4:ed:8c:6c:4b:67:63:87:66:8a:e4:1a:0f:8a:
58:67:99:ee:4c:1b:30:40:69:80:ec:0d:2c:07:4b:95:62:9e:
a6:e3:d5:72:52:25:59:91:a7:a7:53:e1:97:f3:27:7b:7e:eb:
f2:24:d7:56:dd:75:c4:64:cb:11:04:87:de:c9:0b:3e:08:93:
bc:f1:2a:fa:f2:2a:3e:52:e2:1b:7d:bb:6c:ab:41:f4:1a:e0:
04:f2:1b:8d:7f:d2:27:99:28:77:50:3e:d3:60:5d:2b:e8:b5:
60:f8:99:82:f8:eb:b4:02:72:5d:7f:d5:16:8c:59:d4:72:e0:
95:83:b2:4d:1a:0a:45:c5:1e:2a:02:80:5c:c1:94:e9:e1:e6:
e1:5e:3c:f5:00:2d:65:2a:39:5c:5e:bd:0a:2a:e0:0a:cf:36:
d2:20:6b:05:66:62:ee:f3:3c:49:f4:70:1e:29:7b:c1:c2:d1:
91:fe:cd:02:ce:2f:7a:cf:c8:77:e6:d0:cd:12:33:88:db:70:
33:b5:86:65:dc:c0:c6:7b:8a:db:32:af:01:e3:e0:5c:7a:fa:
5f:38:6e:ce:a4:1e:55:3b:e1:64:90:86:d4:5d:da:c1:a0:4a:
66:16:fa:3d:bd:da:00:21:6d:a9:ac:92:b4:45:c5:c5:42:52:
b2:9f:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org