Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/3BIlKplkjIJ78KxPD4o9KnOt4xM.roa
File: 3BIlKplkjIJ78KxPD4o9KnOt4xM.roa (raw, json)
Hash identifier: AWTXNTfUP//9rF5LpDSlkXEWs5l7Kc5k8lHit8VlUHM=
Subject key identifier: DC:12:25:2A:99:64:8C:82:7B:F0:AC:4F:0F:8A:3D:2A:73:AD:E3:13
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 018CC3B73F0343A94B2B8910A5641C919473
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/3BIlKplkjIJ78KxPD4o9KnOt4xM.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199296
IP address blocks: 80.94.19.0/24 maxlen: 24
80.94.23.0/24 maxlen: 24
80.94.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 10:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3f:03:43:a9:4b:2b:89:10:a5:64:1c:91:94:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc12252a99648c827bf0ac4f0f8a3d2a73ade313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:3a:58:ba:cb:ff:de:3d:db:23:a2:bc:65:
7a:99:4c:27:a6:ad:60:a7:47:b4:1a:e9:24:9f:ab:
f0:01:d3:e0:92:f7:5f:43:94:a3:0b:00:e3:ba:c2:
c0:c7:e9:0d:e7:35:23:1c:58:67:ed:38:7f:c8:b4:
e6:c4:bf:8d:f8:ac:30:46:a9:79:73:e9:4c:8d:06:
98:5f:c9:dc:51:4d:32:84:52:bf:f2:4c:20:56:e0:
e1:13:f4:49:6e:84:e1:de:86:13:86:10:c9:b0:84:
30:c1:d1:92:a0:32:3d:8b:3c:50:dc:6a:68:69:a1:
a5:3c:cc:6a:de:a2:f0:11:29:a7:12:9a:07:44:39:
42:35:53:73:af:a3:21:f1:b7:cd:5a:29:64:1e:a2:
b1:1b:2d:5e:fe:42:c0:71:36:c1:70:5b:a2:08:c9:
16:0a:66:ad:1c:88:90:6c:07:9b:f1:58:24:3f:8f:
82:7b:e9:f4:2b:62:20:f6:71:bd:86:b8:93:2c:83:
28:7b:e0:e3:52:cf:5b:00:fc:2d:11:8f:aa:05:84:
87:70:76:f2:3d:f6:b4:c7:dd:38:0f:38:0b:6b:80:
01:75:b8:30:fe:b7:0f:18:45:65:8d:75:c3:ce:b4:
c9:3b:3b:58:46:d9:87:24:77:6e:1a:89:3e:8f:9c:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:12:25:2A:99:64:8C:82:7B:F0:AC:4F:0F:8A:3D:2A:73:AD:E3:13
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/3BIlKplkjIJ78KxPD4o9KnOt4xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.19.0/24
80.94.23.0-80.94.24.255
Signature Algorithm: sha256WithRSAEncryption
12:8c:a0:c2:11:90:ab:a6:61:31:df:34:90:2c:32:f5:0e:c6:
fa:c0:eb:15:0a:05:f2:b4:4e:bc:0e:fa:8c:19:27:74:59:a2:
54:84:51:c0:7c:65:47:f6:4d:50:6d:fc:51:f7:0b:db:97:8f:
7d:83:27:cd:32:ae:5d:c2:b2:74:8e:36:ae:94:31:05:1f:97:
a9:48:1a:31:76:0b:8b:a8:1d:b6:b5:59:2b:b3:76:f9:22:36:
29:f1:4c:d9:77:5f:3b:cc:bf:b1:bf:3e:23:53:62:ab:76:12:
b9:3e:82:a2:40:2b:0f:de:bd:47:66:bf:50:5e:52:b5:22:fa:
e0:a5:04:88:1d:1d:57:8e:6d:41:88:95:f0:f0:51:be:ac:69:
c6:83:6a:21:e0:e8:28:21:e7:ed:96:9c:68:55:88:76:2f:f0:
0d:0d:4a:7b:45:91:de:f6:f2:7e:3a:4b:54:72:da:38:35:28:
6d:0e:6a:5e:e5:7e:58:c9:63:dd:0b:53:56:d9:75:17:bc:df:
83:2e:61:66:60:4f:5e:cb:ea:da:24:ff:1c:b7:93:e3:73:43:
5f:78:a4:3a:cc:21:e0:07:ef:d9:d8:a5:28:ba:07:9c:34:19:
1b:58:bb:65:a3:57:35:b1:9d:80:22:1e:52:af:7d:80:31:a1:
e6:de:ad:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 12 14:08:55 2024 by rpki-client on console-fra.rpki-client.org