Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/RIAbT0aRnyCHGIQDno0BZaqzyKc.roa
File: RIAbT0aRnyCHGIQDno0BZaqzyKc.roa (raw, json)
Hash identifier: w3waYkrrqOikI+2KaPSDXxfopdrsIhJyjh8voiSk5r8=
Subject key identifier: 44:80:1B:4F:46:91:9F:20:87:18:84:03:9E:8D:01:65:AA:B3:C8:A7
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DCD2FF01CD8F46762B130C7266BC3
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/RIAbT0aRnyCHGIQDno0BZaqzyKc.roa
Signing time: Sun 01 Jan 2023 22:04:56 +0000
ROA not before: Sun 01 Jan 2023 22:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51187
IP address blocks: 80.120.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cd:2f:f0:1c:d8:f4:67:62:b1:30:c7:26:6b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44801b4f46919f20871884039e8d0165aab3c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:87:a4:2c:2e:70:08:b3:38:80:1f:92:43:
08:15:5e:30:59:0c:8a:03:f3:ec:62:77:3f:6a:fd:
8f:eb:9e:73:0b:ee:a2:85:6e:8c:1f:e8:3f:6e:07:
a9:3f:1f:a2:65:4c:c7:a2:71:1f:1a:b5:36:7a:46:
4e:b7:7c:e8:6b:6a:86:bc:8d:26:46:90:c5:94:a8:
f6:5c:7e:e1:d4:19:50:f0:90:9c:7f:3f:b0:26:d8:
91:58:aa:70:05:ea:f9:a9:e8:3e:c2:fd:04:00:3e:
bf:ad:e4:60:7d:99:2b:27:e3:8d:00:da:1c:75:8b:
0f:c2:ae:c4:32:56:34:f1:dd:49:a0:2e:1e:74:7a:
65:96:31:0d:11:2c:75:1e:60:1f:c7:84:e6:f0:9a:
8d:c3:73:36:13:5b:03:e3:3c:9e:fc:80:59:43:60:
1b:5c:cd:da:ef:dd:2f:da:97:1c:fa:c0:63:50:a2:
ea:32:dc:68:8d:32:b3:75:ae:cf:84:cb:20:73:32:
bd:87:3f:97:82:43:ce:3d:d4:d6:64:24:a0:9c:6a:
cc:1c:89:55:f8:bd:62:af:6c:e0:ba:df:74:93:91:
04:d2:d0:90:08:55:b2:c2:4c:f6:cf:32:96:fb:c9:
c0:47:2d:3f:41:1a:fb:6d:88:ae:af:1a:1c:81:8d:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:1B:4F:46:91:9F:20:87:18:84:03:9E:8D:01:65:AA:B3:C8:A7
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/RIAbT0aRnyCHGIQDno0BZaqzyKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.18.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5b:27:9f:25:1a:d8:fd:9c:2b:70:10:21:ed:b2:a8:d6:75:
89:2e:43:e1:38:85:f8:69:e3:46:11:70:16:d8:31:d5:a8:2a:
be:16:1f:02:f1:a4:57:ad:f4:f5:36:6a:09:56:a0:5f:7d:a3:
38:f6:7e:f4:2a:1e:04:f3:70:e8:9f:80:b6:49:32:9b:64:ce:
3f:20:03:d7:21:55:54:42:68:98:b6:38:b7:69:8c:30:eb:51:
c8:dc:d5:40:e5:23:68:0f:a1:a0:14:f7:f3:fa:af:75:d0:44:
3e:d6:f2:19:c7:42:79:74:7b:b9:da:cc:6d:c5:f0:83:22:c1:
5f:56:fe:95:6f:c2:8d:f7:c5:73:b5:89:b2:83:14:14:39:98:
ff:40:9b:10:53:d9:e8:f7:38:5a:1b:11:c8:51:84:cc:76:6c:
0b:f0:59:d9:1e:97:a2:78:08:59:c8:9c:4d:73:59:a6:32:bc:
fe:91:97:2f:c1:73:8f:ce:b7:da:0e:7e:ba:8e:6e:81:0d:5d:
a1:ff:fa:c6:39:3d:b0:03:0e:53:5d:16:3b:c3:43:09:62:00:
4e:80:45:54:d0:cb:08:54:89:2d:31:81:d2:5a:d5:07:0a:85:
50:e4:3f:5b:b9:6e:45:bd:b1:cf:cb:5e:be:9c:4d:12:e6:9d:
03:34:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org