Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/m6MXjcHcgMM7CIAO7pkHzacNyBU.roa
File: m6MXjcHcgMM7CIAO7pkHzacNyBU.roa (raw, json)
Hash identifier: SWc1VjlkW2MQxn0zzxKUub+OeLk0SKfUUIxQ9Btz3Bo=
Subject key identifier: 9B:A3:17:8D:C1:DC:80:C3:3B:08:80:0E:EE:99:07:CD:A7:0D:C8:15
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 0192B9BF06C988AF1777E8FEAE5A78CA0608
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/m6MXjcHcgMM7CIAO7pkHzacNyBU.roa
Signing time: Wed 23 Oct 2024 14:19:16 +0000
ROA not before: Wed 23 Oct 2024 14:19:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 80.211.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 11:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:bf:06:c9:88:af:17:77:e8:fe:ae:5a:78:ca:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Oct 23 14:19:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba3178dc1dc80c33b08800eee9907cda70dc815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:f6:da:a6:4f:b2:09:05:96:fd:83:1a:62:
84:73:8b:d4:43:05:17:c3:1f:fd:99:d7:07:5f:a5:
3c:0a:05:95:ac:bc:4f:cd:3a:16:39:ed:f2:66:dc:
01:ed:47:9b:fd:91:fd:e1:5e:21:f8:86:6b:2a:2c:
dd:ed:b7:3f:82:d8:59:cc:7a:06:c8:1e:60:03:25:
f1:f8:fc:55:0e:d2:a9:7e:98:4d:ec:97:f8:1c:94:
d0:25:66:86:53:6c:22:dd:6c:8e:e1:43:7d:fc:fa:
9e:c2:2f:dd:0a:df:8a:e5:0a:b5:bd:05:38:b8:86:
8f:9f:fc:14:d5:e8:89:38:84:1f:ad:d2:a1:db:36:
0d:37:6e:a6:01:7c:09:dd:cb:d3:e3:ab:01:08:10:
78:bc:4b:fe:85:43:0a:83:1c:09:ba:8d:71:93:0c:
73:71:38:31:b0:68:a7:fa:7e:06:32:dc:b9:cf:09:
30:1c:1b:a2:6f:58:cf:20:db:35:d1:a9:c7:d1:4d:
e8:2e:fd:62:5d:a2:b9:ee:ac:26:3a:9a:7b:15:3b:
09:9c:bf:24:68:d1:06:f4:a0:19:d4:21:4a:02:01:
02:1e:ae:f0:0e:d8:1e:e8:e8:80:a1:07:fd:45:5f:
fd:82:7a:bb:0c:cb:a7:e3:d4:7c:4e:6e:fa:00:e5:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:17:8D:C1:DC:80:C3:3B:08:80:0E:EE:99:07:CD:A7:0D:C8:15
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/m6MXjcHcgMM7CIAO7pkHzacNyBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.211.126.0/24
Signature Algorithm: sha256WithRSAEncryption
13:08:bb:7d:fa:ce:82:7d:96:0c:1c:1e:1f:bc:cc:d9:36:0c:
b1:12:8c:6e:12:e7:a3:0f:be:ce:f1:4b:78:32:43:2e:03:4f:
d7:7f:c0:05:f9:b6:8a:0a:f5:e0:6d:e2:50:89:bf:94:f2:ff:
a0:ca:6e:d4:17:df:5a:09:52:d0:32:ec:8e:22:28:d5:e6:30:
01:8d:97:90:55:6a:c4:82:0e:50:db:05:90:93:2e:74:16:62:
52:0f:34:f4:8d:84:e3:b7:9e:4c:c4:aa:50:8e:6a:94:85:0c:
f6:d3:a8:40:f3:bb:10:26:9f:cc:02:4e:87:fb:44:c0:60:b3:
f3:e4:ce:95:3d:11:0c:23:0c:0c:51:dd:e1:15:05:4c:08:8c:
e9:01:ca:92:55:45:3e:3e:56:84:0a:6b:71:bf:b1:cb:b1:38:
ac:7f:bf:b2:6b:e5:9a:6a:c7:4e:e2:34:03:bb:38:e4:c1:20:
c5:af:10:51:e2:a3:5d:75:e1:4e:ff:16:8d:17:17:fa:9d:69:
dc:00:e9:71:6f:b7:8b:7d:fd:ba:ba:b1:7d:0b:ea:61:d1:44:
15:e0:11:30:1b:bc:ce:2d:d4:50:0b:37:15:e7:d4:8d:b3:57:
a2:20:3c:49:2a:a5:ac:63:b6:c9:22:c8:a8:4f:e0:11:d7:15:
4a:73:bc:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK5vwbJiK8Xd+j+rlp4ygYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjQxMDIzMTQxOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmEzMTc4ZGMxZGM4MGMzM2IwODgwMGVlZTk5MDdjZGE3MGRjODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qz22qZPsgkFlv2DGmKEc4vUQwUX
wx/9mdcHX6U8CgWVrLxPzToWOe3yZtwB7Ueb/ZH94V4h+IZrKizd7bc/gthZzHoG
yB5gAyXx+PxVDtKpfphN7Jf4HJTQJWaGU2wi3WyO4UN9/Pqewi/dCt+K5Qq1vQU4
uIaPn/wU1eiJOIQfrdKh2zYNN26mAXwJ3cvT46sBCBB4vEv+hUMKgxwJuo1xkwxz
cTgxsGin+n4GMty5zwkwHBuib1jPINs10anH0U3oLv1iXaK57qwmOpp7FTsJnL8k
aNEG9KAZ1CFKAgECHq7wDtge6OiAoQf9RV/9gnq7DMun49R8Tm76AOW4FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJujF43B3IDDOwiADu6ZB82nDcgVMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvbTZNWGpjSGNnTU03Q0lBTzdwa0h6YWNOeUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUNN+MA0G
CSqGSIb3DQEBCwUAA4IBAQATCLt9+s6CfZYMHB4fvMzZNgyxEoxuEuejD77O8Ut4
MkMuA0/Xf8AF+baKCvXgbeJQib+U8v+gym7UF99aCVLQMuyOIijV5jABjZeQVWrE
gg5Q2wWQky50FmJSDzT0jYTjt55MxKpQjmqUhQz206hA87sQJp/MAk6H+0TAYLPz
5M6VPREMIwwMUd3hFQVMCIzpAcqSVUU+PlaECmtxv7HLsTisf7+ya+WaasdO4jQD
uzjkwSDFrxBR4qNddeFO/xaNFxf6nWncAOlxb7eLff26urF9C+ph0UQV4BEwG7zO
LdRQCzcV59SNs1eiIDxJKqWsY7bJIsioT+AR1xVKc7yK
-----END CERTIFICATE-----
Generated at Wed Oct 30 13:28:29 2024 by rpki-client on console-ams.rpki-client.org