Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ERYMBIX4CnnQachDn5AytwW7RdU.roa
File: ERYMBIX4CnnQachDn5AytwW7RdU.roa (raw, json)
Hash identifier: pQqotxE8MnJtVLKnBfmyNraoOT/bzjOqZJYWzXMJTnQ=
Subject key identifier: 11:16:0C:04:85:F8:0A:79:D0:69:C8:43:9F:90:32:B7:05:BB:45:D5
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018BD28D70BBE68C1E5250C8A1E2B5CDE80A
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ERYMBIX4CnnQachDn5AytwW7RdU.roa
Signing time: Wed 15 Nov 2023 10:36:06 +0000
ROA not before: Wed 15 Nov 2023 10:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328126
IP address blocks: 80.15.255.0/24 maxlen: 32
80.15.254.0/24 maxlen: 32
90.84.148.0/24 maxlen: 32
90.84.153.0/24 maxlen: 32
80.15.243.0/24 maxlen: 32
80.15.244.0/24 maxlen: 32
80.15.245.0/24 maxlen: 32
80.15.246.0/24 maxlen: 32
80.15.242.0/24 maxlen: 32
80.15.247.0/24 maxlen: 32
80.15.251.0/24 maxlen: 32
80.15.248.0/24 maxlen: 32
80.15.252.0/24 maxlen: 32
80.15.249.0/24 maxlen: 32
80.15.253.0/24 maxlen: 32
80.15.250.0/24 maxlen: 32
2a01:c9c0:c008::/48 maxlen: 128
2a01:c9c0:c01e::/48 maxlen: 128
2a01:c9c0:c01c::/48 maxlen: 128
2a01:c9c0:c012::/48 maxlen: 128
2a01:c9c0:c000::/48 maxlen: 128
2a01:c9c0:c016::/48 maxlen: 128
2a01:c9c0:c014::/48 maxlen: 128
2a01:c9c0:c00a::/48 maxlen: 128
2a01:c9c0:c018::/48 maxlen: 128
2a01:c9c0:c00c::/48 maxlen: 128
2a01:c9c0:c002::/48 maxlen: 128
2a01:c9c0:c010::/48 maxlen: 128
2a01:c9c0:c006::/48 maxlen: 128
2a01:c9c0:c004::/48 maxlen: 128
2a01:c9c0:c01a::/48 maxlen: 128
Validation: Failed, certificate revoked on Wed 22 Nov 2023 07:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:8d:70:bb:e6:8c:1e:52:50:c8:a1:e2:b5:cd:e8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Nov 15 10:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11160c0485f80a79d069c8439f9032b705bb45d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:0d:e4:36:f6:02:27:23:42:b7:2d:8b:fa:
59:50:64:b8:c8:48:66:a3:07:4a:52:90:33:42:d1:
22:3c:c3:e9:79:33:3e:ff:10:d0:b1:8f:ff:dc:eb:
85:ba:84:e5:c3:72:6a:e9:5d:75:7b:26:fc:e3:80:
96:7f:e4:30:29:05:32:94:de:57:7a:e4:19:13:20:
79:05:1e:8f:89:5e:cd:b5:8c:2c:3a:07:cb:19:ae:
cb:0c:88:76:38:79:71:f6:4e:d2:37:8f:2e:57:61:
71:0f:0f:4a:4f:3f:9f:c0:e7:89:ab:36:af:d6:9c:
3f:40:3d:36:c4:01:73:cd:3c:57:d9:c3:65:3b:4e:
c5:ba:86:24:e1:27:55:31:18:64:be:a1:2f:2d:36:
40:74:59:fd:54:eb:3d:61:cd:db:9c:27:9a:76:a3:
a1:ae:0c:ac:7a:53:3f:75:d4:71:f0:45:0a:fb:61:
67:29:38:cf:ab:63:69:36:6b:7e:8e:9d:5a:3c:fd:
fb:8d:9b:a7:3d:dc:f2:49:ad:37:0f:8e:2b:5a:4d:
d9:e7:eb:61:a0:93:7b:e8:5e:be:0f:17:06:61:f3:
62:c3:35:69:25:59:e5:b8:fc:77:86:d8:00:92:06:
dc:da:71:5c:bf:13:29:16:e4:c8:9a:39:75:d3:4f:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:16:0C:04:85:F8:0A:79:D0:69:C8:43:9F:90:32:B7:05:BB:45:D5
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ERYMBIX4CnnQachDn5AytwW7RdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.15.242.0-80.15.255.255
90.84.148.0/24
90.84.153.0/24
IPv6:
2a01:c9c0:c000::/48
2a01:c9c0:c002::/48
2a01:c9c0:c004::/48
2a01:c9c0:c006::/48
2a01:c9c0:c008::/48
2a01:c9c0:c00a::/48
2a01:c9c0:c00c::/48
2a01:c9c0:c010::/48
2a01:c9c0:c012::/48
2a01:c9c0:c014::/48
2a01:c9c0:c016::/48
2a01:c9c0:c018::/48
2a01:c9c0:c01a::/48
2a01:c9c0:c01c::/48
2a01:c9c0:c01e::/48
Signature Algorithm: sha256WithRSAEncryption
1d:e0:39:27:50:fc:af:e7:00:e6:74:6a:06:e4:0e:5f:42:fb:
ca:c7:db:27:5b:c5:f3:84:e0:67:c7:e0:14:9b:8b:82:fd:92:
12:83:58:20:99:39:5c:01:2e:37:4f:d6:b1:60:f9:61:d7:59:
95:83:aa:4f:1d:11:36:85:c7:ec:62:e9:f9:c2:60:22:f7:f1:
07:97:61:3b:b3:c8:32:c6:6f:84:eb:ce:71:10:ff:1f:59:1a:
d0:f2:ff:f8:58:fc:89:06:7c:de:c2:9f:2f:2c:13:46:fe:5c:
d8:38:e8:ce:0f:cd:33:e4:09:a4:07:39:ac:c3:b3:a3:7e:0e:
1a:f2:a3:e6:47:72:1a:b6:bd:b4:5a:9c:eb:ff:e6:b6:52:55:
46:38:4f:61:a2:52:94:10:fd:51:ea:ea:8f:37:ed:3d:23:d8:
cd:79:ae:68:e2:b0:8b:c9:f1:7c:1c:71:ad:c2:e2:e7:74:61:
0b:d8:a5:82:5a:46:44:27:75:49:08:be:a9:82:8e:c1:40:31:
f5:85:ac:43:6a:9d:a8:8b:e3:21:5a:8e:38:95:b1:03:f0:4b:
2c:eb:53:1a:1c:e8:61:bf:19:be:23:3c:ee:58:c2:37:d4:90:
21:83:f6:20:56:10:b9:e8:d4:fc:38:25:02:2d:e6:d9:9f:fd:
23:3a:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org