Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Fc1tW1P2v4dbwKy-MUQanvPQWDQ.roa
File: Fc1tW1P2v4dbwKy-MUQanvPQWDQ.roa (raw, json)
Hash identifier: +dTQDn2cEPiUrrOSekRTAozyBQBjFu3pmp/3+UW/+u0=
Subject key identifier: 15:CD:6D:5B:53:F6:BF:87:5B:C0:AC:BE:31:44:1A:9E:F3:D0:58:34
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0191700468777BAA227279E80FBFB8F8C5A4
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Fc1tW1P2v4dbwKy-MUQanvPQWDQ.roa
Signing time: Tue 20 Aug 2024 13:40:22 +0000
ROA not before: Tue 20 Aug 2024 13:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 80.94.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 13:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:04:68:77:7b:aa:22:72:79:e8:0f:bf:b8:f8:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Aug 20 13:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15cd6d5b53f6bf875bc0acbe31441a9ef3d05834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:f1:66:31:a9:87:29:aa:ce:95:af:0d:f8:
18:c1:b9:d7:5e:dd:b0:fa:9a:fa:7a:a8:0e:7c:af:
01:42:b0:ac:7b:d2:62:00:06:5e:f6:49:03:ea:62:
9d:3c:d1:b0:5f:01:69:93:36:d5:b4:b9:a6:8c:ec:
70:c7:7d:e0:37:72:9e:9e:cc:df:c1:b9:64:8d:23:
53:06:8b:bd:33:ab:d2:f3:d6:89:05:9f:1f:fc:80:
a3:b3:74:a5:8b:9e:46:7c:74:83:36:23:02:4d:ef:
a0:93:c3:94:38:16:83:69:43:7d:52:47:fe:92:a0:
e8:3a:b2:02:59:6d:30:25:0a:38:04:f1:fd:8c:e6:
42:10:b8:6f:6f:57:51:fa:07:5d:09:d4:fb:67:c3:
25:38:b6:58:85:61:5a:e8:1f:9a:6c:07:1a:88:94:
67:99:23:95:9d:89:29:58:4c:a7:15:ef:fe:e9:a2:
66:c3:b5:44:68:88:eb:d9:16:c5:ec:21:7f:66:12:
49:93:8d:c2:ab:24:f1:d1:df:38:cc:10:d6:3f:72:
47:46:83:ce:c7:af:e4:d2:8b:22:0f:bf:52:f2:b4:
7a:62:3e:bc:f8:a1:65:9e:d5:36:82:11:05:f8:37:
2b:63:23:d6:c6:3f:35:3e:d4:65:81:f1:ad:68:d4:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:6D:5B:53:F6:BF:87:5B:C0:AC:BE:31:44:1A:9E:F3:D0:58:34
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/Fc1tW1P2v4dbwKy-MUQanvPQWDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b3:73:9a:0a:d7:42:1a:3f:68:1b:e0:ba:46:14:e4:55:55:
4a:95:66:29:4e:30:71:1e:a8:fd:ab:3a:4c:69:5f:7e:00:00:
29:fd:1d:4f:11:31:e2:77:41:60:95:14:f8:1d:a2:d2:63:3a:
d8:91:66:a5:a8:c3:be:f1:83:20:25:8e:c5:60:fe:5d:75:d4:
91:08:9e:be:06:79:e0:05:d8:da:09:43:25:ae:4a:e9:1a:70:
65:53:ca:fc:13:bb:76:bb:53:2d:74:d6:86:f1:33:28:61:23:
fb:31:71:06:62:28:96:9c:a5:7b:5d:50:44:f4:a0:d1:77:a7:
cf:3e:d7:2b:50:ba:35:ce:51:75:eb:10:9a:c5:f3:b4:91:35:
27:55:de:52:42:31:ab:62:6a:ee:89:41:21:b9:70:da:8d:74:
d5:7a:97:f4:ba:93:84:32:24:83:57:1b:19:bb:0a:d8:93:31:
e6:24:18:b4:3e:0e:44:69:99:46:ea:02:65:c2:5b:80:34:24:
67:89:6e:d2:4c:16:ca:ac:80:ef:af:ae:b0:fe:80:b4:cc:3d:
ff:2a:3c:aa:aa:9b:67:bd:be:5a:b9:13:7d:3d:32:df:b6:e0:
30:e0:d9:e2:9f:fd:a1:62:a8:5c:3e:f6:85:c1:92:d7:40:f2:
e6:76:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:39 2025 by rpki-client