Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/sP8AfFhHgTTnmg3VTZT3mrxacp0.roa
File: sP8AfFhHgTTnmg3VTZT3mrxacp0.roa (raw, json)
Hash identifier: g8f+aRThkGKLxRBLBjDllL9iMKGlfZPl0wWKyQTG91s=
Subject key identifier: B0:FF:00:7C:58:47:81:34:E7:9A:0D:D5:4D:94:F7:9A:BC:5A:72:9D
Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial: 018625A58380DC40DF5ACD2A5D7A2FF838B7
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/sP8AfFhHgTTnmg3VTZT3mrxacp0.roa
Signing time: Mon 06 Feb 2023 07:34:09 +0000
ROA not before: Mon 06 Feb 2023 07:34:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35074
IP address blocks: 80.89.176.0/24 maxlen: 24
80.89.177.0/24 maxlen: 24
80.89.178.0/24 maxlen: 24
80.89.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:a5:83:80:dc:40:df:5a:cd:2a:5d:7a:2f:f8:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Validity
Not Before: Feb 6 07:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0ff007c58478134e79a0dd54d94f79abc5a729d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:7f:c3:db:13:5a:b3:af:89:47:06:5d:99:
34:46:23:e5:bc:b3:f2:3e:e4:5c:d5:0b:3c:86:e2:
b3:34:46:26:6a:09:25:a6:6c:62:e1:d7:ce:ea:23:
d8:1d:9d:44:e5:e7:58:68:56:b6:fe:64:1e:ae:2d:
1b:0f:15:8f:a6:be:3a:51:59:60:66:1a:60:78:ec:
55:07:a2:d3:57:3a:ea:ac:f6:f3:68:fc:30:68:6d:
10:1f:7d:0a:5c:80:2e:9c:c7:1a:5f:86:f5:41:2b:
4c:ba:d1:5d:1f:93:cb:3b:42:20:ba:ca:6b:7c:3e:
66:b0:29:9e:76:81:24:f3:2e:19:a8:96:a1:ba:b5:
99:da:db:b5:f8:af:79:e9:a7:da:cf:c6:5f:ca:fd:
d3:98:07:c4:99:c8:4b:aa:ab:73:dd:01:48:c5:46:
c0:45:e6:f3:a7:ec:c6:ed:c2:f2:cb:ea:bb:ef:9e:
fb:09:da:7f:7a:27:1b:09:00:23:56:cf:c9:65:bf:
98:3e:bd:aa:7a:00:39:fe:bc:6d:85:e7:ab:3a:15:
f6:d9:04:c8:a0:93:77:84:be:0c:9a:6a:6c:92:25:
cb:e0:0c:81:1e:cc:da:9d:5d:a8:12:d4:ac:79:ee:
d2:ed:00:d4:08:19:c3:91:64:f1:dc:70:09:5e:6c:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:00:7C:58:47:81:34:E7:9A:0D:D5:4D:94:F7:9A:BC:5A:72:9D
X509v3 Authority Key Identifier:
keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/sP8AfFhHgTTnmg3VTZT3mrxacp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/22
Signature Algorithm: sha256WithRSAEncryption
81:9c:1a:ef:c3:df:5f:5f:29:4f:1f:1b:6e:d4:6b:c4:e3:f1:
68:43:e6:bd:dd:84:66:5b:0d:a0:5b:1b:5b:e7:24:12:de:99:
79:e4:cd:6c:9e:60:84:2d:7a:ec:41:1a:87:58:ee:d1:3e:6a:
41:10:bf:15:35:9a:2c:3b:81:73:cb:ac:a4:68:60:e0:33:5c:
39:a0:4f:30:02:6f:79:a4:a6:6c:64:25:b8:13:b3:c9:19:e4:
a6:59:69:96:a4:2d:f9:28:af:cd:4e:b7:44:94:cc:35:08:91:
4d:bd:a4:5f:90:1d:1c:bd:7b:65:e8:17:7d:5d:bc:23:9b:42:
bf:a2:16:84:a2:07:b5:4c:27:af:be:0a:b1:30:b0:3d:58:21:
f8:13:eb:32:84:0f:92:54:66:78:50:2a:20:93:11:e3:36:b3:
69:9b:b9:d7:4c:c0:dc:3f:c2:aa:c6:69:6c:2f:3f:7f:1f:73:
14:ad:31:db:9a:71:07:e7:3b:f7:7b:bb:2e:45:fc:68:c9:fa:
fb:17:65:c9:86:25:30:be:66:e4:c8:9c:0a:e7:d4:48:5e:71:
49:95:55:37:8b:1f:7f:ae:50:63:9c:04:bd:84:59:e2:12:77:
c6:ec:0f:4a:45:bd:56:c6:42:4e:d2:b0:67:2c:76:05:bc:e4:
53:ba:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:52 2024 by rpki-client on console-fra.rpki-client.org