Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/SUVH3ahdTWCgOVLgFkD1fxY44Zs.roa
File: SUVH3ahdTWCgOVLgFkD1fxY44Zs.roa (raw, json)
Hash identifier: BbRtdanepmvYKzXXu+F9FTj+EC9nvzRp9XDorxOUHqI=
Subject key identifier: 49:45:47:DD:A8:5D:4D:60:A0:39:52:E0:16:40:F5:7F:16:38:E1:9B
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 0188592794357BBA4FA37A1546BD13B2B6C0
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/SUVH3ahdTWCgOVLgFkD1fxY44Zs.roa
Signing time: Fri 26 May 2023 17:42:26 +0000
ROA not before: Fri 26 May 2023 17:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203751
IP address blocks: 80.80.82.0/23 maxlen: 24
185.124.140.0/22 maxlen: 24
185.124.141.0/24 maxlen: 24
185.132.184.0/23 maxlen: 24
2a06:ab80::/29 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:27:94:35:7b:ba:4f:a3:7a:15:46:bd:13:b2:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: May 26 17:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=494547dda85d4d60a03952e01640f57f1638e19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:ae:1b:59:24:79:77:fa:53:a4:74:e7:6c:
b6:2b:47:a1:5c:4b:c5:ad:2b:fa:27:3d:e1:b0:28:
a9:b2:1e:5f:01:db:4a:fb:78:9d:e7:49:b1:4c:7a:
80:21:58:5f:2e:f7:2f:60:67:4c:ee:8c:48:52:48:
43:a9:f1:4c:4e:3c:63:23:af:9f:d1:f4:af:2e:57:
cf:f6:35:0a:27:0f:4a:34:f7:c8:87:ca:3a:49:cc:
2b:40:72:13:8a:a6:8a:a7:ee:26:a7:f4:f7:89:cf:
7c:a9:af:e5:ab:76:0f:d9:f9:42:22:27:4c:0c:7b:
ec:ae:09:4c:17:1e:81:0b:ac:2a:3c:51:eb:63:4c:
79:d1:a7:5b:1a:b6:f8:bf:41:ef:fb:89:c8:31:75:
27:fc:a2:73:58:04:f5:2e:8f:36:61:b1:2e:e9:cd:
53:23:0a:df:0c:d3:cb:f3:76:da:17:84:84:95:b0:
43:4b:35:27:9a:37:3d:e4:fb:60:44:f1:14:aa:4d:
c2:c9:37:d2:4e:21:41:49:78:53:06:3b:97:5e:4f:
18:bd:7a:8e:ec:fe:2b:db:45:bc:65:73:e4:0a:10:
60:d3:e7:2e:4b:54:ec:91:3e:d6:fb:fb:e1:71:b3:
84:c6:6d:ac:78:e5:36:ec:8e:54:29:52:41:e6:df:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:47:DD:A8:5D:4D:60:A0:39:52:E0:16:40:F5:7F:16:38:E1:9B
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/SUVH3ahdTWCgOVLgFkD1fxY44Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.82.0/23
185.124.140.0/22
185.132.184.0/23
IPv6:
2a06:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
60:17:61:00:85:f5:76:ae:ab:20:ca:be:d1:f4:80:2d:cc:9c:
04:1b:53:df:b2:d9:72:d7:e0:f1:49:c2:8a:84:27:e8:51:86:
77:5e:cb:8c:26:72:ab:e9:92:1e:61:04:79:70:b0:58:bc:4d:
99:42:3f:38:44:b6:a3:0b:8a:ac:d3:cb:41:5c:58:7d:d4:84:
8e:6c:bf:13:c6:af:ff:ff:b8:cb:07:49:94:86:0d:19:a5:b8:
23:83:66:f9:a0:ab:50:22:10:7b:d2:c9:b5:92:75:5f:a3:03:
a9:59:cc:b0:75:77:1c:87:50:dd:fe:20:ba:7b:5a:bd:f8:d3:
9f:a0:57:3a:d1:8d:9d:49:8a:76:78:fc:ed:d7:20:73:72:dd:
92:0a:f8:1b:1e:38:04:59:6a:3d:d4:bd:6b:3e:fe:5f:82:17:
6e:b0:7b:19:d7:86:6c:2e:35:0b:4e:66:8d:a4:03:07:20:82:
59:97:0f:f0:c7:98:b0:bf:37:55:ac:97:13:cd:ce:b3:03:e2:
cb:06:04:90:ed:15:83:54:e8:d2:f6:52:5a:26:5a:b2:55:67:
da:02:ca:23:37:1e:6f:4a:09:f9:d3:48:1b:02:db:d8:37:a0:
0b:47:f4:a4:c3:79:4d:2c:01:1e:e4:b1:56:9d:ec:77:95:7f:
bf:a2:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:05 2024 by rpki-client on console-fra.rpki-client.org