Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f3A66UOvgQsOnUKn_ydpwD86z_k.roa
File: f3A66UOvgQsOnUKn_ydpwD86z_k.roa (raw, json)
Hash identifier: XfHynLaAIC2ZJkB3ylVcisiQpAOyJVIEixSaaC5ju50=
Subject key identifier: 7F:70:3A:E9:43:AF:81:0B:0E:9D:42:A7:FF:27:69:C0:3F:3A:CF:F9
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14FFE61727D28DD8377D2BE274CFB8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f3A66UOvgQsOnUKn_ydpwD86z_k.roa
Signing time: Sun 01 Jan 2023 20:45:25 +0000
ROA not before: Sun 01 Jan 2023 20:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49852
IP address blocks: 85.121.150.0/24 maxlen: 24
80.96.30.0/23 maxlen: 23
85.121.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ff:e6:17:27:d2:8d:d8:37:7d:2b:e2:74:cf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f703ae943af810b0e9d42a7ff2769c03f3acff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:ca:5e:8c:d3:50:50:8a:89:c9:43:59:8a:
64:a7:b0:c5:6f:d1:73:49:e3:18:03:2f:d8:a1:31:
5d:e9:e8:8e:5e:3e:67:cf:ae:75:45:2c:65:ea:66:
9c:d7:04:f2:17:b8:df:8b:6e:8b:3f:3f:88:84:ae:
c4:14:3e:e3:cb:bd:43:1f:21:49:28:34:43:c7:29:
2e:11:bb:59:83:d6:89:d3:ed:15:f9:21:68:c4:7f:
0a:17:41:79:5e:b1:63:2b:66:8b:f2:bd:c3:bb:e2:
d6:86:32:18:33:8b:ad:e1:20:32:cd:9d:49:92:fe:
7f:1e:c5:41:21:3a:bf:44:b5:bb:6c:98:d6:08:37:
cf:5b:55:9b:8a:56:c1:4c:52:b7:9f:1b:72:d2:bf:
f4:62:71:b2:f3:fd:85:c5:98:c0:96:87:ac:f9:17:
37:cc:03:fc:11:38:60:4f:e6:39:ce:e2:85:d8:1c:
89:f7:09:eb:cb:ba:a2:5c:ce:b7:f1:44:12:f2:35:
da:d9:8d:2f:6a:38:36:0b:c2:5f:1f:16:db:74:e8:
3f:af:11:74:c5:ea:4c:20:24:c2:e4:e3:69:40:0e:
92:e0:90:0d:9a:ae:09:e7:2c:b0:5c:3d:73:b2:ab:
00:65:dc:70:79:07:c4:af:1a:d3:fb:58:8b:91:4e:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:3A:E9:43:AF:81:0B:0E:9D:42:A7:FF:27:69:C0:3F:3A:CF:F9
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f3A66UOvgQsOnUKn_ydpwD86z_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.30.0/23
85.121.150.0/24
85.121.218.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b3:08:2f:c9:f0:aa:00:d0:b1:67:22:89:4d:7e:b5:3f:4b:
f7:0a:f5:e2:3f:c4:6f:23:c0:3a:29:ce:6e:d5:04:d7:54:f0:
58:de:ad:1d:b4:17:d7:01:60:c2:32:64:22:d3:9b:07:39:7e:
13:c1:83:46:09:30:98:bb:e8:21:3f:cd:36:f1:81:c0:a3:8a:
81:a6:c8:4e:27:3c:a5:7b:5d:63:51:8b:6a:78:f6:ab:87:7a:
1b:ad:0c:2e:c0:30:66:81:06:04:e9:aa:2f:f0:aa:1b:72:65:
66:04:c4:e4:56:c2:6d:1d:be:33:7b:59:8a:9d:ca:04:cb:1e:
bb:ed:25:ee:9a:20:d6:9b:58:01:86:1e:f0:18:3e:4b:f7:ac:
dd:4c:76:db:90:19:6a:07:45:9b:4e:c0:52:b2:c3:15:b7:b0:
08:d4:dc:c2:a9:c7:59:f0:f6:9d:bc:36:2a:2d:00:bb:9e:7a:
a6:7d:b1:6b:99:27:47:f7:af:cb:67:d0:f0:39:b4:99:90:a3:
97:83:2a:8a:33:d9:ca:aa:4e:1a:cc:52:6f:e9:c1:a2:31:db:
88:9f:3b:37:61:f1:ed:09:70:9d:97:57:5e:48:37:87:62:5e:
5d:a1:5b:82:72:4f:47:b3:a9:11:ae:d1:8b:ee:4b:0a:bf:57:
25:33:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org