Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sAxJPrdnioMy9R4O7FX6qcti0p8.roa
File: sAxJPrdnioMy9R4O7FX6qcti0p8.roa (raw, json)
Hash identifier: Mrk5cw8OEHw3SsFzwJpwO2bNqlBlbvbRxQQ0MTamJRE=
Subject key identifier: B0:0C:49:3E:B7:67:8A:83:32:F5:1E:0E:EC:55:FA:A9:CB:62:D2:9F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F8212CB35BF4D6A259A402D67456
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sAxJPrdnioMy9R4O7FX6qcti0p8.roa
Signing time: Sun 01 Jan 2023 20:45:23 +0000
ROA not before: Sun 01 Jan 2023 20:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35711
IP address blocks: 80.96.14.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f8:21:2c:b3:5b:f4:d6:a2:59:a4:02:d6:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b00c493eb7678a8332f51e0eec55faa9cb62d29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:be:4a:49:35:de:04:92:6b:5c:c5:77:71:
3b:41:17:94:6d:b0:cf:d4:0b:fc:2c:9a:b1:90:53:
79:0d:a4:82:0a:32:1c:07:04:48:4b:e1:e5:f6:16:
60:c8:f9:13:dd:9d:9d:08:8d:c8:49:4f:51:81:fb:
38:99:f0:a8:30:72:13:f8:d5:ec:e9:8d:35:98:bf:
4d:8c:5d:f5:b3:31:5e:be:58:35:84:0b:98:f5:3b:
e5:ef:20:70:fb:13:d5:95:e1:fe:ae:12:49:17:63:
0d:0c:83:88:7e:8c:8d:b3:cf:de:e0:6e:98:e4:34:
9f:b1:89:7d:2b:ae:03:65:d4:62:7c:47:c0:2d:68:
46:3c:e0:67:73:15:4b:11:94:18:2c:bf:96:96:71:
b1:ce:71:a1:4e:a6:7d:38:7a:ae:fb:19:89:fd:c9:
d7:b9:cf:06:e9:a5:2c:48:20:e9:02:06:ea:e6:1d:
5f:2d:34:57:84:cd:d6:21:57:28:78:5a:46:cc:c4:
d7:60:d7:51:1d:72:76:0a:4c:44:f6:b8:7b:53:5d:
44:c1:7f:78:2d:6b:6a:cd:ad:1f:c8:a6:f3:21:d0:
fa:3b:2e:af:f7:c6:a2:34:04:3c:44:23:b1:04:c0:
8b:a6:cf:42:b5:7b:2d:ea:f4:51:2d:5b:15:86:b0:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:49:3E:B7:67:8A:83:32:F5:1E:0E:EC:55:FA:A9:CB:62:D2:9F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/sAxJPrdnioMy9R4O7FX6qcti0p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.14.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:35:08:51:bf:e9:00:06:0c:db:eb:9d:37:de:89:0d:36:e3:
ae:b5:6a:15:99:81:3a:72:5a:8e:cc:73:e3:d1:61:a4:74:c7:
e2:31:88:bb:3c:16:05:14:28:4a:9d:f7:3c:7d:0b:2f:a0:f6:
f4:b6:98:3d:d8:94:e5:3c:91:71:9e:b9:57:02:79:8a:d7:2f:
3a:5d:7e:e1:03:cc:28:1e:48:57:80:db:ef:fb:e0:2e:46:f4:
63:bf:37:0f:48:28:d7:bc:82:2a:46:8d:de:c9:52:31:e1:73:
4d:27:bc:28:5f:1e:c2:5a:73:3b:0b:9a:8f:d1:23:10:39:de:
a7:49:1a:e2:6c:3c:b5:b3:fa:dd:6f:fd:e6:2a:7a:49:08:b1:
5b:d0:15:81:44:c9:74:57:c9:4f:19:94:c0:d6:76:35:3a:ba:
5f:05:dc:42:95:8f:9e:3b:26:1a:17:95:ae:30:9a:57:d5:0e:
60:f7:5f:a8:ea:c2:10:0a:db:11:91:c7:08:1f:6f:74:cb:2e:
49:2b:49:bf:88:b2:a1:6f:a5:b0:b1:7d:d2:62:68:d5:26:4c:
9d:28:f2:50:18:72:73:40:ed:f5:0d:5d:a1:bc:5e:86:a7:f9:
62:49:96:c0:74:3b:2e:f8:8f:40:0a:2c:16:d1:c2:00:98:8f:
3e:84:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org