Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rtHowfLRqKBSAXZJx2iEsNcl5CI.roa
File: rtHowfLRqKBSAXZJx2iEsNcl5CI.roa (raw, json)
Hash identifier: /KIZJi58BaABLLIB8M00g9OBm471l/hRepcgbFfszJ8=
Subject key identifier: AE:D1:E8:C1:F2:D1:A8:A0:52:01:76:49:C7:68:84:B0:D7:25:E4:22
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F15100B8EFA5BFC8F091BE6A8C834FF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rtHowfLRqKBSAXZJx2iEsNcl5CI.roa
Signing time: Sun 01 Jan 2023 20:45:29 +0000
ROA not before: Sun 01 Jan 2023 20:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209644
IP address blocks: 80.97.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:10:0b:8e:fa:5b:fc:8f:09:1b:e6:a8:c8:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aed1e8c1f2d1a8a052017649c76884b0d725e422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:44:9e:8d:af:8e:fb:e4:ee:40:9e:08:90:d7:
63:e1:7f:f8:0f:a8:a7:dc:95:39:a7:c7:5d:24:c3:
48:ce:d8:3c:e6:fc:ac:da:4a:ce:3b:7f:b3:d9:22:
8e:7b:ba:65:a5:d5:e1:54:fc:0c:24:a9:a2:ae:ce:
50:a3:ee:58:95:00:5b:ed:8f:a6:e4:e8:b6:b0:40:
1f:f4:10:64:73:b4:6d:cc:d4:08:fc:6b:4f:f9:c5:
98:2d:49:55:35:3f:20:0d:3d:1f:16:48:8c:16:9d:
dc:d2:3e:51:3e:2b:2f:36:66:2b:5d:4c:ca:36:00:
1b:89:03:7d:24:84:61:95:99:c0:fa:e9:dd:93:13:
ad:17:ad:aa:dc:09:c2:23:30:34:bf:39:c6:35:c9:
94:74:dc:1d:51:1f:82:8d:b7:f2:4a:c7:d0:39:15:
40:b4:40:78:df:f6:d6:36:ca:9d:34:1f:4f:40:27:
80:4f:13:5d:19:f1:40:3b:46:3f:57:56:b6:73:93:
bb:78:b0:0d:bd:51:83:82:62:12:49:04:bc:42:d8:
0e:75:04:d5:03:49:30:9c:02:02:bd:23:d7:4c:87:
2c:c2:59:94:8f:06:ac:6a:0f:25:54:bc:c6:5d:aa:
d9:73:0e:cb:2b:77:b0:a9:31:40:c7:ed:0e:f9:c6:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:E8:C1:F2:D1:A8:A0:52:01:76:49:C7:68:84:B0:D7:25:E4:22
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rtHowfLRqKBSAXZJx2iEsNcl5CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:82:e6:3e:67:de:4e:96:2b:de:c7:5d:73:55:bb:84:ad:a9:
42:98:01:f2:53:5c:fc:87:e0:65:77:e9:ed:64:c4:f7:22:60:
d3:44:84:aa:f1:23:ac:5f:ab:84:f4:59:0f:4a:07:27:e5:b8:
60:7a:d9:79:21:6e:79:f9:1d:76:2d:4d:9a:46:2d:e6:90:e9:
6e:a5:6f:22:7e:3a:83:5e:86:e8:08:53:ac:17:90:8d:11:bc:
27:a4:68:27:df:c9:1d:c7:fd:e2:38:13:17:ed:b7:5a:67:cc:
b8:95:47:9b:f9:d4:a5:a4:09:ba:a1:07:90:fc:0d:68:d2:c5:
d1:15:0e:5e:41:a7:ea:e5:c0:5b:4e:38:7f:64:04:db:e0:de:
47:91:00:7f:03:01:af:94:60:dc:97:42:d8:a9:8a:9d:87:4f:
5a:f2:ce:b3:62:b1:9e:c5:c1:34:ae:95:31:75:3a:e9:1d:6b:
ae:aa:03:23:b2:ef:77:53:aa:b4:d3:94:6a:b3:d3:12:c1:47:
d1:36:1e:44:6c:c2:a9:f4:5d:a0:73:e7:7a:6d:0d:5d:a0:99:
ab:87:d3:6a:fb:9d:c1:d3:25:16:58:d1:9f:3a:08:a7:77:40:
5a:5b:76:78:63:a7:6c:1f:47:c3:fb:b1:e1:a7:80:62:a0:db:
d5:82:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:49 2024 by rpki-client on console-ams.rpki-client.org