Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n_FNuuSwEBOqwVmAT7KfR0m0Dog.roa
File: n_FNuuSwEBOqwVmAT7KfR0m0Dog.roa (raw, json)
Hash identifier: zvCHoCNwbdlJqygCildxzET9P0V5SG4PFSz1yqgSVAc=
Subject key identifier: 9F:F1:4D:BA:E4:B0:10:13:AA:C1:59:80:4F:B2:9F:47:49:B4:0E:88
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01917170CA293EAFBE26CA0BF038134E7CD3
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n_FNuuSwEBOqwVmAT7KfR0m0Dog.roa
Signing time: Tue 20 Aug 2024 20:18:22 +0000
ROA not before: Tue 20 Aug 2024 20:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62447
IP address blocks: 80.64.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 14:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:70:ca:29:3e:af:be:26:ca:0b:f0:38:13:4e:7c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 20 20:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff14dbae4b01013aac159804fb29f4749b40e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:57:bd:8a:03:ac:bb:a4:88:5a:68:4f:d6:
22:a4:67:d7:15:10:63:c9:0b:b3:83:b0:46:6c:56:
ff:a0:65:17:f8:c0:6d:fe:fd:44:6c:fc:72:30:83:
8b:00:92:d7:84:c2:60:86:fa:10:71:a6:c9:70:e4:
12:00:1c:e0:9b:d6:72:dc:4d:38:79:21:15:af:da:
e7:2a:9e:31:c8:a5:ff:5c:5e:ba:73:b6:ae:d7:1a:
8b:03:84:f1:1d:ad:87:0d:4c:78:ac:12:8c:dc:cb:
aa:ce:ba:fb:72:3b:dc:76:15:14:f0:a5:ea:55:26:
51:5a:05:02:6f:51:65:28:d1:3f:75:dd:71:03:13:
36:46:c7:e4:f1:13:76:eb:7e:b0:d4:d2:c1:b0:7d:
ba:7f:f7:03:6c:7f:c6:d5:61:d7:a3:a4:8a:dd:51:
6d:05:d6:d2:53:7f:61:33:92:c7:6a:2d:91:98:a2:
19:77:90:b9:7e:22:f2:b0:ba:ad:4e:3e:ba:63:b1:
64:33:42:21:cc:1a:c0:d9:c4:25:ca:0d:bf:22:d4:
c5:5d:f6:3c:60:b9:09:92:e0:bf:c6:2d:e3:b6:3c:
9b:2e:5f:53:40:f8:c7:86:d7:87:75:60:f6:b7:b1:
3b:1d:41:45:e5:8a:d2:f7:34:44:df:0a:4a:4f:7e:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:4D:BA:E4:B0:10:13:AA:C1:59:80:4F:B2:9F:47:49:B4:0E:88
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/n_FNuuSwEBOqwVmAT7KfR0m0Dog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.25.0/24
Signature Algorithm: sha256WithRSAEncryption
11:34:e1:0a:fe:6c:07:1a:9d:63:a3:19:1a:0f:d8:65:8d:03:
47:83:c4:6b:d0:31:97:66:8c:eb:36:91:c3:49:e1:ed:ba:a7:
bc:49:96:09:79:31:a3:83:22:6e:3f:5e:af:c7:86:91:09:47:
0f:08:2a:5f:99:8d:79:b7:0d:9e:73:16:28:3b:6b:bc:a2:36:
15:bb:f7:ec:c6:61:9b:73:dc:16:0b:4c:4f:72:79:07:52:1a:
97:5b:e1:3e:93:97:70:74:a6:e7:cd:9c:78:4e:05:6b:b4:57:
db:6a:c5:4e:dc:7e:12:5e:dc:92:fc:f8:19:4b:30:d7:5b:fa:
c8:6f:3b:7a:da:4b:51:50:85:07:a2:6a:76:a3:87:66:82:0c:
f0:56:5a:d2:ab:27:5f:f6:47:63:5d:ba:b7:6c:01:66:3e:1c:
6d:a9:0a:80:66:ae:1c:73:da:18:18:8f:ec:99:a1:16:12:49:
59:bf:bd:ba:79:cb:a7:cb:dc:88:a8:46:10:f0:d3:4c:79:f0:
91:ca:91:b1:16:75:50:4b:53:c8:ed:e3:35:b4:f8:e8:c2:28:
63:65:fb:e2:47:e7:51:ba:cd:50:81:9f:4e:4b:36:d0:62:8e:
c9:79:99:09:6f:b4:96:9e:3f:cc:ea:50:03:c0:19:54:41:6e:
df:0e:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:13 2025 by rpki-client