Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/R-33jpZTxVMvFke3ChwpSto5jwI.roa
File: R-33jpZTxVMvFke3ChwpSto5jwI.roa (raw, json)
Hash identifier: weCD/SwWHo9GQk6VdxAI6JrAJY0apxh8QFWpvuO4k2I=
Subject key identifier: 47:ED:F7:8E:96:53:C5:53:2F:16:47:B7:0A:1C:29:4A:DA:39:8F:02
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A76413DBC32F9417F86EBE86A0F12
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/R-33jpZTxVMvFke3ChwpSto5jwI.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 185.80.196.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
146.19.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 03:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:76:41:3d:bc:32:f9:41:7f:86:eb:e8:6a:0f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47edf78e9653c5532f1647b70a1c294ada398f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:7f:00:a6:ff:e4:6e:a8:f8:5a:02:48:06:
34:c7:a7:92:8e:9c:26:df:8d:36:b0:42:fa:ec:75:
7f:48:80:ab:46:ab:05:15:e2:dc:8d:30:fd:61:85:
5e:5b:a8:98:13:76:82:3d:2d:a0:a0:ff:02:93:1a:
92:6b:03:ab:6f:09:16:88:35:06:3b:a6:b6:64:73:
b6:af:05:9e:de:2d:5c:4b:df:10:43:c7:72:d1:b3:
b4:0a:8c:f6:dc:ad:61:36:d5:60:d2:01:ea:95:61:
2e:6a:9d:ed:d4:67:05:c9:e8:ac:90:69:c8:ea:ae:
cf:ac:a3:13:a0:eb:be:ce:6b:c8:4c:7b:11:bd:be:
e3:e1:39:8f:d7:1e:76:4a:78:93:e2:c9:d0:bd:03:
73:cc:13:15:17:e2:9a:1a:ae:e0:a2:f5:36:75:e2:
3f:ac:0c:5c:11:a5:09:f1:d4:d7:99:00:68:ca:2c:
0c:22:1b:84:4e:59:4f:1f:f8:fa:25:93:9c:bb:20:
0a:28:90:c9:ff:45:05:1a:37:ad:6c:91:5d:be:3d:
11:fd:92:42:5c:bb:ae:e1:93:3b:55:51:d4:cb:e4:
4a:e7:64:be:7b:92:b2:fa:66:1c:01:8d:d3:40:d5:
9f:c8:83:41:d0:4d:be:cc:fd:92:22:33:0b:94:15:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:ED:F7:8E:96:53:C5:53:2F:16:47:B7:0A:1C:29:4A:DA:39:8F:02
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/R-33jpZTxVMvFke3ChwpSto5jwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.13.0/24
146.19.135.0/24
185.80.196.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:89:b4:fc:87:07:13:97:dd:70:8e:30:31:1f:c7:09:e8:60:
2b:69:9c:0d:28:e8:c2:34:d9:ea:a8:5d:cb:fa:e1:4f:ab:d2:
73:70:61:09:6f:72:ea:1d:d2:20:1c:c3:38:7f:48:82:be:c1:
67:a7:e7:87:ed:3d:57:a8:9a:c8:da:e7:83:fc:35:ad:63:4e:
40:02:ee:d9:1f:f5:53:67:a5:bf:83:0d:4d:d5:c2:26:f9:d3:
24:40:7f:f8:7c:00:0b:4d:8b:41:93:38:c7:8d:41:2e:e5:bb:
2a:b3:fe:93:fb:d0:9b:5e:94:0a:63:99:3e:cb:3b:8a:27:6a:
14:37:d6:a3:30:0f:4d:82:37:02:86:8f:9f:61:ef:d3:a2:69:
fd:ca:4e:58:41:c3:bd:4a:b2:d9:ed:bd:08:35:15:44:a5:bf:
76:f0:f5:14:3e:df:b2:c4:06:2e:c0:3c:63:0f:00:7e:1b:cf:
62:66:4d:01:de:23:33:de:ca:14:9d:d0:3a:50:3a:83:d5:0b:
20:5e:c4:cc:1a:6b:b6:c6:21:d0:0b:05:69:03:7d:e5:46:ed:
b2:05:01:cf:cf:37:46:64:22:51:48:79:2a:ff:c8:ac:96:a4:
31:18:4a:b2:38:58:d4:2b:24:de:63:4b:e0:65:a0:b3:17:b8:
c1:2f:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 04:20:00 2024 by rpki-client on console-ams.rpki-client.org