Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/R1PlHgAOE_dylERJPcH799-_M2k.roa
File: R1PlHgAOE_dylERJPcH799-_M2k.roa (raw, json)
Hash identifier: pQK5sGNy4QBp3+/NeFSsY33pTxmXnkThNbZdWplVNJo=
Subject key identifier: 47:53:E5:1E:00:0E:13:F7:72:94:44:49:3D:C1:FB:F7:DF:BF:33:69
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018CC2DB016C80997E1FE05D2B6A087D41E3
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/R1PlHgAOE_dylERJPcH799-_M2k.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48806
IP address blocks: 80.94.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 14:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:01:6c:80:99:7e:1f:e0:5d:2b:6a:08:7d:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4753e51e000e13f7729444493dc1fbf7dfbf3369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:0d:a8:21:a2:b4:de:1b:a3:cf:06:c3:8c:
f8:a0:5f:ec:d6:53:4b:31:ef:cd:b3:d6:f0:c1:ac:
00:e3:d6:a2:db:b4:5c:69:d6:f0:35:f4:e3:4a:e0:
7f:39:d1:e6:87:89:25:94:72:10:ff:24:8b:98:e7:
b2:9c:bf:d9:d7:2f:61:af:19:9e:19:9b:ae:4d:6c:
6a:c9:22:8c:61:7d:a2:e8:c2:23:b9:28:a4:b0:99:
ec:a4:06:0b:c1:e6:8b:92:1a:78:c3:db:9d:49:19:
17:43:f3:2d:04:5d:e8:cc:aa:66:55:a4:46:64:68:
a1:af:90:70:a6:c4:1d:1f:99:c3:6d:cf:d7:1b:1c:
49:be:ef:28:c6:e2:29:28:59:da:87:a4:d4:34:40:
0c:38:cd:8c:0e:bd:dc:4a:f7:38:87:ed:3a:f6:be:
78:1d:c3:17:df:18:19:9e:58:b8:fb:02:c0:e1:23:
19:da:3a:db:f8:31:7f:d4:b8:d7:78:b5:69:b6:8a:
b8:23:d8:bd:a9:a5:37:b8:32:9b:5a:63:24:6a:f9:
b9:87:47:0c:83:36:07:13:0f:1e:b5:0a:ac:f6:33:
10:5b:ef:b5:be:bd:14:4a:8b:d9:fa:bc:9d:7c:70:
3e:f9:99:0b:ec:dd:ee:3a:15:34:9a:42:b0:c7:80:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:E5:1E:00:0E:13:F7:72:94:44:49:3D:C1:FB:F7:DF:BF:33:69
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/R1PlHgAOE_dylERJPcH799-_M2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.89.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d6:9f:5d:1a:c7:15:5b:b9:df:07:d1:86:3c:b0:7f:5b:fc:
ad:1c:30:94:a8:3e:e6:a7:b7:ba:cb:ca:7a:c2:a4:e6:84:37:
80:93:96:af:8c:eb:94:d8:30:69:a6:f5:c6:17:eb:04:30:2d:
f1:30:2b:68:bb:2c:ff:c0:c4:1c:bc:02:d8:e2:38:6e:25:62:
ce:bc:0f:e2:d8:2e:2d:4e:9b:1d:25:f4:e9:99:e8:ef:40:99:
cf:74:16:f3:5f:21:0c:80:b9:b8:2c:c6:92:9d:0e:b9:63:54:
0b:85:60:6d:fe:43:4c:8d:90:4f:16:d7:85:7d:9a:92:7a:b3:
da:d0:95:c0:42:f6:3d:db:84:8d:ff:11:fe:44:fa:77:7b:19:
7e:30:c6:93:56:24:57:6b:0d:20:a7:18:74:a9:d9:67:79:6d:
ca:d9:83:9d:0a:3b:4a:08:36:c4:49:21:14:65:64:8a:62:ef:
df:11:73:a2:38:28:0e:48:3e:ff:0c:99:24:16:b7:50:6a:7b:
c1:d3:ad:cd:e7:da:4c:69:18:26:ea:41:63:1b:ac:05:6f:92:
84:ba:2f:85:de:84:b9:4d:51:5c:9c:a0:b0:09:3a:31:8b:2f:
7b:6f:c0:5c:0f:77:a6:39:aa:15:51:63:d8:90:aa:01:c6:b5:
ba:8d:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:20:41 2024 by rpki-client on console-ams.rpki-client.org