Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/v3UXfOyhek4woK7a1-zyGZL_o9k.roa
File: v3UXfOyhek4woK7a1-zyGZL_o9k.roa (raw, json)
Hash identifier: 6n78aXYd/xKLv4yYVFai9RsckJOLNsYWSKAf6BGPB38=
Subject key identifier: BF:75:17:7C:EC:A1:7A:4E:30:A0:AE:DA:D7:EC:F2:19:92:FF:A3:D9
Certificate issuer: /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial: 01856CB83E555D2D20F1289F3CA72360E524
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/v3UXfOyhek4woK7a1-zyGZL_o9k.roa
Signing time: Sun 01 Jan 2023 09:44:52 +0000
ROA not before: Sun 01 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39392
IP address blocks: 185.80.30.0/24 maxlen: 24
2a10:3900::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:3e:55:5d:2d:20:f1:28:9f:3c:a7:23:60:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Validity
Not Before: Jan 1 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf75177ceca17a4e30a0aedad7ecf21992ffa3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:13:02:a5:c3:14:8e:45:2a:ac:70:f0:74:
7b:da:50:44:d0:d3:70:73:ff:48:89:35:77:9f:7b:
c8:25:e6:be:15:3e:b4:9a:ed:e7:87:2b:54:22:53:
dc:f4:aa:f9:d3:45:44:cc:69:e0:57:f6:97:ee:2e:
3f:5e:e7:f1:e0:7a:bc:fe:52:21:67:68:a6:7e:2f:
38:15:78:c0:b2:e5:da:38:53:17:4a:4d:ae:16:78:
9a:33:16:15:4f:9a:c3:5d:36:3d:7e:d5:ec:9a:9b:
0b:ae:dc:9e:a5:bf:24:95:16:92:55:1c:20:6b:f7:
d9:b8:23:cf:ea:24:f9:b1:a9:f3:c1:50:61:3c:83:
79:a5:c9:e8:ce:2a:7b:a8:d7:0f:7b:dc:43:50:ad:
f4:d1:a0:39:de:d7:b6:9a:1f:da:47:0d:d1:93:49:
2b:00:a6:f8:f7:59:99:1b:61:fb:b0:71:69:7a:c4:
b7:6b:22:38:05:8e:c9:2c:04:5a:aa:5f:36:0c:a4:
1d:25:be:1c:5f:52:74:eb:bf:66:54:65:9d:0f:5c:
43:ad:73:79:c8:fa:9a:b2:de:1b:aa:9e:59:03:38:
47:07:3d:39:ec:fc:86:e0:61:77:c3:c9:62:b1:56:
94:08:77:b2:c5:26:d0:b6:40:e2:71:b2:91:ef:65:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:17:7C:EC:A1:7A:4E:30:A0:AE:DA:D7:EC:F2:19:92:FF:A3:D9
X509v3 Authority Key Identifier:
keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/v3UXfOyhek4woK7a1-zyGZL_o9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.30.0/24
IPv6:
2a10:3900::/48
Signature Algorithm: sha256WithRSAEncryption
0d:d0:c9:66:7e:3f:ee:f9:a2:da:e7:e2:b1:ea:57:5b:b8:7b:
c5:86:28:90:c8:de:bd:64:c7:fa:0e:50:de:1b:bf:25:8e:e4:
17:ab:c4:be:ad:40:86:9a:84:40:ac:e1:20:7c:e0:0d:b5:ea:
84:4a:d9:9f:3f:64:1f:0e:67:69:13:53:09:8a:95:5d:0a:2f:
55:82:af:7a:79:f2:71:20:a5:1e:42:c9:3a:a9:79:08:31:53:
40:b8:6e:57:37:25:0f:89:2a:3f:fd:b7:3d:94:87:f1:96:cd:
c8:2c:c6:48:28:6b:e0:15:de:13:98:6a:88:c1:54:6e:69:5b:
57:be:82:ec:44:68:74:2e:e9:4d:21:10:6a:c5:35:e6:a6:2d:
a9:f0:f8:47:c8:0c:6c:7c:d1:f4:f6:5b:ab:86:0f:8e:99:0c:
e1:87:42:a0:4f:7b:d3:67:a2:8c:13:ee:19:12:17:7d:17:da:
26:9d:42:e5:20:b5:f1:7d:dd:48:ea:1e:84:1f:d0:8e:5f:a4:
a2:c9:87:ed:7e:b8:63:66:c1:3c:31:56:28:2c:dc:cf:66:a3:
5e:46:21:4c:bc:fc:89:5a:85:86:e4:75:1c:03:39:b5:8e:ed:
35:f7:89:cf:06:1c:6c:35:25:08:ce:ae:a8:56:e5:d7:cd:e7:
c7:bd:c8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:00 2024 by rpki-client on console-fra.rpki-client.org