Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/E8hGJj8B3shyNYKISNY1E30DdXg.roa
File: E8hGJj8B3shyNYKISNY1E30DdXg.roa (raw, json)
Hash identifier: xTm3TwYJfrapY24ougnR//MfFYNRv9hBswnjWXie0YY=
Subject key identifier: 13:C8:46:26:3F:01:DE:C8:72:35:82:88:48:D6:35:13:7D:03:75:78
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0192013AE0577C7EB91302668990DD419BA8
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/E8hGJj8B3shyNYKISNY1E30DdXg.roa
Signing time: Tue 17 Sep 2024 18:24:48 +0000
ROA not before: Tue 17 Sep 2024 18:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 80.244.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 20:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:01:3a:e0:57:7c:7e:b9:13:02:66:89:90:dd:41:9b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Sep 17 18:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13c846263f01dec87235828848d635137d037578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:31:51:91:c9:e0:a2:ee:ae:da:9b:42:b1:
11:72:22:50:e6:32:60:4f:66:bd:08:0e:ed:aa:73:
52:a5:e8:1a:2b:f3:b6:f4:7b:23:30:66:9e:4f:6d:
55:5e:95:2f:aa:e7:24:7e:71:ce:d1:d5:e3:86:18:
c9:da:91:ac:a5:df:3b:ef:ee:cd:3a:ff:de:8d:8e:
76:63:01:40:6d:92:23:16:09:00:f9:d3:fc:f7:23:
6d:f3:c5:e3:4e:3b:ee:63:95:58:a1:ae:37:ce:d0:
b2:8c:06:08:ff:27:af:ac:c3:70:7e:1f:90:b8:29:
16:db:17:f0:c2:a4:e8:19:4a:fc:62:a0:af:6b:25:
cf:cd:12:3d:39:b3:fa:3e:02:90:64:4f:5a:fc:0d:
1a:16:c0:a3:27:6b:f6:70:e2:4d:87:2f:aa:c0:aa:
a3:19:fd:6f:cd:5d:de:fa:35:43:01:9d:35:7f:57:
52:aa:31:b3:23:16:33:5f:f6:28:98:0f:92:be:7f:
2c:2a:f5:f2:af:10:8e:98:66:27:4c:e4:ec:04:d6:
bd:24:7d:b3:39:a3:fb:0e:0b:f8:e1:9a:45:b9:c7:
12:3f:de:82:07:0d:5c:fa:ee:8e:72:e3:01:05:17:
0c:a7:b5:79:e7:74:0f:9b:3e:a9:79:40:9f:97:d6:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:46:26:3F:01:DE:C8:72:35:82:88:48:D6:35:13:7D:03:75:78
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/E8hGJj8B3shyNYKISNY1E30DdXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.13.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9f:df:f7:9e:92:35:bd:f5:f8:bb:ac:4e:16:06:2d:8a:07:
8c:ce:ff:68:db:3a:bb:bc:dc:00:71:e3:d4:37:3c:df:37:8f:
68:7d:c6:85:dc:51:7a:e5:bb:61:8d:9e:f4:1a:4c:ea:28:a0:
7a:0a:24:c3:b2:28:94:3c:d5:0a:ce:5a:8a:9b:93:10:af:10:
d9:f7:92:ab:f6:7f:d7:cf:d7:15:06:d0:6b:df:64:28:e1:7a:
e4:24:1f:10:2d:32:8e:3c:2d:b7:dc:20:c9:0b:eb:60:e8:45:
4a:bc:41:ca:f8:93:17:e5:4f:86:ad:b0:49:c3:6c:de:45:e8:
a0:26:c2:73:b2:08:f9:89:08:be:a8:9b:84:5e:5b:0d:7b:62:
92:94:d9:5f:38:d0:7c:0f:8e:e8:4d:dc:e1:a0:d7:4b:88:3d:
ee:17:95:03:95:a7:9d:bf:ba:ac:f3:87:9c:1f:8a:23:bd:c0:
c9:cb:48:72:28:02:6c:33:3c:86:e3:46:d0:99:ba:05:30:48:
cd:bd:4f:2a:76:d4:eb:88:03:e8:cd:0a:70:b3:e7:a0:cc:b8:
90:34:c1:0c:6e:ed:ff:ed:62:a5:62:74:f0:e4:7b:7f:1e:a8:
43:91:f1:73:75:05:ab:e9:bb:42:54:f3:6f:d6:75:fa:dc:7a:
01:93:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:48:52 2025 by rpki-client