Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zM8-q8RoOEQY3zB3suFwafd64k8.roa
File: zM8-q8RoOEQY3zB3suFwafd64k8.roa (raw, json)
Hash identifier: A1Gn5hu6vOkJb/S32Z5hyszqEDp8drYrnWaW08Ow3KE=
Subject key identifier: CC:CF:3E:AB:C4:68:38:44:18:DF:30:77:B2:E1:70:69:F7:7A:E2:4F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AE92CF094F0E497E5E2806364ADB9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zM8-q8RoOEQY3zB3suFwafd64k8.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47388
IP address blocks: 80.96.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 17:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e9:2c:f0:94:f0:e4:97:e5:e2:80:63:64:ad:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cccf3eabc468384418df3077b2e17069f77ae24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:e2:68:86:8b:d5:c0:84:84:22:8c:60:f9:
e3:a5:eb:bb:86:87:20:94:5d:b2:ec:fa:f0:ef:30:
41:b0:a3:04:69:81:0d:e5:33:46:8f:8e:a7:9e:1f:
b2:b9:0b:a8:ff:21:83:d9:bd:99:d6:5a:fc:ea:b3:
07:d2:ea:09:fe:64:fe:3b:35:ca:05:02:84:14:e4:
05:af:e1:eb:21:7a:5d:8d:78:34:83:7d:74:76:90:
10:47:b9:91:b7:52:23:19:3a:7b:f6:7b:d4:62:25:
64:0d:1c:67:2b:2f:f9:05:9a:96:a7:e3:85:03:66:
2d:fd:e6:2e:e2:6d:2f:4e:83:92:77:44:7d:56:c1:
10:89:58:a9:40:aa:07:5c:be:8b:80:32:a8:e1:be:
5d:87:b9:90:89:f5:27:ec:9e:06:9b:2e:ca:56:e5:
03:a1:f4:8c:fa:7a:b3:6d:91:ba:ae:10:e3:72:fb:
bf:85:12:5f:f9:f2:a0:d3:4f:12:6a:cc:21:be:8e:
43:d6:4f:7f:fc:c8:8f:2a:99:f4:f5:76:08:4f:d6:
35:c7:04:a8:b9:05:29:93:d3:79:1c:5e:0e:ee:3f:
bd:b5:8b:1d:0e:81:5a:84:f3:07:dd:dd:00:b6:69:
65:b4:27:04:57:79:3a:ec:9b:a8:b1:83:af:02:a1:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:3E:AB:C4:68:38:44:18:DF:30:77:B2:E1:70:69:F7:7A:E2:4F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zM8-q8RoOEQY3zB3suFwafd64k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.217.0/24
Signature Algorithm: sha256WithRSAEncryption
56:10:fe:8b:52:7b:3c:8e:72:e4:b3:d6:dc:ef:07:b9:4e:f4:
0e:26:18:9f:41:58:71:4e:09:4f:6b:b6:86:6a:95:33:09:0d:
6b:bd:07:6a:48:12:ab:5f:67:63:ce:74:d6:55:a0:99:a3:e4:
6a:6e:45:71:51:7a:7f:f3:53:7e:9b:66:c2:ed:f1:44:79:35:
bb:cc:60:67:4c:e1:1d:7a:99:26:f0:9f:f6:7e:8b:17:2d:26:
f8:7d:50:1d:c4:87:38:2d:f2:bf:d9:fa:8e:3c:1e:f1:9c:6b:
6b:ee:39:be:fe:81:47:75:42:db:26:b3:dc:7b:6a:f4:51:84:
17:42:6a:84:dd:d9:4d:dd:23:f1:0b:9c:93:59:78:bb:ce:04:
2f:f4:86:c7:96:f2:8e:51:8c:c3:27:9d:5c:e6:4c:de:86:c4:
4e:46:a2:dc:fd:31:ee:c1:9c:f1:9f:e9:30:ee:56:9e:12:0c:
65:3f:b4:3d:6b:c6:22:52:8a:0b:21:d6:52:7f:47:cd:95:f9:
6a:cb:71:0f:24:00:91:ed:d2:49:de:24:8e:15:93:aa:67:d6:
92:56:9d:96:6b:4a:b8:3e:35:25:d4:1b:c1:2b:6e:71:5a:83:
f9:d3:20:b1:46:d7:71:26:de:2a:b0:eb:7e:55:27:b5:99:fe:
02:a0:15:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 20:00:59 2024 by rpki-client on console-ams.rpki-client.org