Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/hMi_9Piy7btNqxZCOHhbMIFSuPw.roa
File: hMi_9Piy7btNqxZCOHhbMIFSuPw.roa (raw, json)
Hash identifier: dfdrYLs6Or21iZ6s+fl6BD/ixtNmStTPjDq9Kzuj98M=
Subject key identifier: 84:C8:BF:F4:F8:B2:ED:BB:4D:AB:16:42:38:78:5B:30:81:52:B8:FC
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 0192E2A119556A3C43AC44B6789375A7C581
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/hMi_9Piy7btNqxZCOHhbMIFSuPw.roa
Signing time: Thu 31 Oct 2024 12:51:01 +0000
ROA not before: Thu 31 Oct 2024 12:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30910
IP address blocks: 80.64.16.0/22 maxlen: 22
80.64.20.0/23 maxlen: 23
185.39.16.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 10 Nov 2024 16:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:a1:19:55:6a:3c:43:ac:44:b6:78:93:75:a7:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Oct 31 12:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84c8bff4f8b2edbb4dab164238785b308152b8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:bf:9b:18:bf:85:9c:f1:43:71:8f:60:ff:
94:4f:a8:c4:da:3c:7a:cf:fa:d0:7f:f2:bc:b0:83:
17:09:1c:cf:ba:b4:55:22:5d:03:cc:ec:e9:d8:fd:
a9:09:3e:6f:7c:bc:1e:a4:16:a5:27:35:29:0f:ff:
2e:b8:37:62:98:d2:3c:dc:b7:ea:fb:47:9d:72:4d:
e7:8d:fd:2a:c5:4e:95:15:d5:d8:10:5e:e9:5c:da:
8c:4e:05:a6:60:4d:49:2e:86:fb:42:1b:d2:e0:2d:
28:e9:34:01:be:42:2b:80:90:a9:0b:3b:3b:c0:9a:
e5:37:52:70:25:1f:14:cf:e1:0e:ee:ae:df:5a:31:
b8:b8:2d:22:19:30:8f:a6:43:c0:26:d0:c3:31:af:
ad:16:c0:26:d7:5c:a1:9d:11:7c:b7:d3:e3:80:1d:
0a:b7:55:cd:91:a4:8d:ca:e3:78:28:62:0d:fd:28:
68:41:1c:ea:64:60:d9:6c:23:be:8f:8f:be:05:93:
a3:7e:52:f6:a9:c6:e1:60:23:ec:fb:8b:dc:32:13:
e1:28:f7:24:58:b9:d9:d1:43:e5:fd:e1:6e:96:ed:
d9:8b:92:78:be:a7:8b:eb:63:22:46:73:6d:96:eb:
c7:51:06:f0:a3:e4:be:83:61:96:c6:e0:eb:ad:6f:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:BF:F4:F8:B2:ED:BB:4D:AB:16:42:38:78:5B:30:81:52:B8:FC
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/hMi_9Piy7btNqxZCOHhbMIFSuPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.16.0-80.64.21.255
185.39.16.0/23
Signature Algorithm: sha256WithRSAEncryption
84:e7:f0:29:f4:f9:d4:58:c5:d1:f8:a2:a3:28:b1:75:24:be:
3d:24:31:d3:29:71:2c:7f:dc:08:77:71:ed:bf:1c:6f:93:21:
1d:17:b8:1f:f4:5e:43:57:6a:b9:5e:bc:f3:64:e5:48:25:c3:
0d:01:29:64:1f:40:de:b4:73:97:77:9c:9f:77:26:9b:84:f0:
d3:97:36:aa:c0:8b:bb:d7:ff:d0:f8:e1:0a:f6:6f:15:ae:81:
ed:71:43:04:e4:6e:b6:47:04:e9:ae:6d:df:4a:c3:13:80:c5:
b4:56:4e:65:de:91:64:b4:86:a7:6c:4a:4d:4e:44:60:53:d1:
ef:fd:21:f0:43:9f:7c:e5:17:3f:9e:20:3f:91:42:4f:ab:7c:
b3:a4:c1:fa:2f:ca:56:b6:e2:6f:26:c3:4b:4e:0d:83:7e:24:
90:a1:28:8b:ed:da:c1:34:9c:2f:60:16:e8:6b:d1:a4:bd:a4:
cb:11:f3:01:07:0f:5a:46:ba:44:49:ed:88:00:1c:35:24:92:
ea:27:29:4f:0d:2d:a5:1f:aa:c0:ca:7f:e8:d7:9f:a8:35:96:
3a:48:88:07:1c:f3:68:e0:3e:7f:14:07:63:92:95:fb:30:11:
07:a8:de:4e:63:4d:ac:0b:e3:41:6e:77:97:a1:3c:06:88:4b:
34:07:09:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 10 19:36:41 2024 by rpki-client on console-ams.rpki-client.org