Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/S2noip6YhdXK7xWPsQI7g1rWNB4.roa
File: S2noip6YhdXK7xWPsQI7g1rWNB4.roa (raw, json)
Hash identifier: MSPFwMonDuwbdanp35SBcVcrmjzABQzT7AXAPv/c7Go=
Subject key identifier: 4B:69:E8:8A:9E:98:85:D5:CA:EF:15:8F:B1:02:3B:83:5A:D6:34:1E
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CBBEC2D88856E9C211DDD5E4B5D78
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/S2noip6YhdXK7xWPsQI7g1rWNB4.roa
Signing time: Mon 02 Jan 2023 16:24:46 +0000
ROA not before: Mon 02 Jan 2023 16:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394265
IP address blocks: 80.169.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:bb:ec:2d:88:85:6e:9c:21:1d:dd:5e:4b:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b69e88a9e9885d5caef158fb1023b835ad6341e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:a4:31:6e:fe:0f:e4:7b:88:17:4e:20:81:
05:89:18:33:f5:45:e3:a6:9a:45:7e:a1:94:37:48:
24:6a:c8:95:02:ea:d5:17:07:5a:33:65:4c:79:91:
f5:ba:82:7e:b1:56:80:ea:d2:dd:21:75:ba:c8:4f:
30:b2:d7:e4:9c:e7:b1:7b:a3:3e:51:b3:ec:12:79:
36:d3:39:9d:b1:3d:eb:d1:c7:44:fc:74:a3:17:cd:
42:57:39:3c:75:70:ef:bf:fa:a3:22:7a:49:c9:c8:
d1:8b:33:63:54:db:f6:c2:a4:c1:af:58:2e:05:83:
53:8a:84:42:fe:89:f7:28:a2:5c:c6:6b:f8:16:44:
f0:5f:d7:cc:c4:45:87:f9:13:f3:c3:c9:c6:0b:74:
d0:15:eb:f1:5e:8c:44:f4:39:05:c3:bf:90:8b:8d:
15:91:1a:1d:ac:57:80:36:c0:65:91:22:ff:07:24:
c9:86:58:72:71:7c:54:7f:e7:7e:3e:15:31:dd:90:
dd:80:dd:df:19:97:42:db:a6:fe:e8:66:b5:a4:88:
14:91:c5:ac:b8:ff:f3:14:8d:76:5d:c3:4b:54:26:
51:07:49:d7:4c:fb:40:8b:8c:75:1f:01:9c:5c:e9:
75:70:20:a0:dd:4d:5e:22:90:8d:53:88:65:d3:10:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:E8:8A:9E:98:85:D5:CA:EF:15:8F:B1:02:3B:83:5A:D6:34:1E
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/S2noip6YhdXK7xWPsQI7g1rWNB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.169.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c7:74:30:cf:1d:31:8d:68:0c:99:55:bf:10:66:16:9c:06:
04:e1:42:26:c0:fc:02:8a:08:67:a4:69:51:29:96:c4:36:ae:
e8:6f:f9:0f:ba:5e:21:f3:af:c9:fc:c7:df:8e:e8:d4:f5:8d:
89:0f:e3:4a:94:0e:5d:6b:4d:d0:89:3a:70:88:63:80:eb:34:
24:c8:c2:5a:84:18:ce:97:5c:c4:4d:9f:d4:33:48:1b:28:37:
1f:2d:a5:4f:f6:93:4a:03:a9:0b:f6:fc:5c:d0:d4:8e:fe:fc:
a4:6e:8d:09:f9:a7:66:82:0e:2f:67:ce:d7:99:92:c4:ac:cf:
e3:d8:3d:dc:fc:54:bf:64:21:15:83:81:ad:bc:1b:96:2d:21:
7c:e5:c1:06:a3:32:a4:aa:cb:d1:35:df:63:99:84:cc:6c:0e:
22:a4:c9:ec:15:fe:39:6a:e8:08:2c:9a:bd:9e:95:a3:9d:ee:
42:82:3a:77:90:d7:73:b5:f8:2d:27:71:2d:99:4b:5f:ba:6c:
ab:98:92:39:98:09:9c:56:4c:05:66:05:e5:e2:29:a4:21:49:
5e:70:f5:06:d5:a1:05:df:28:12:6b:83:e6:92:d9:d3:11:90:
bf:11:db:a7:fe:b1:e8:ec:ae:92:d0:6c:c2:90:ce:6f:a2:a0:
7b:a6:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:42 2024 by rpki-client on console-fra.rpki-client.org