Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/3rZdwboJvCZOQX-hhSkRFD2CvUk.roa
File: 3rZdwboJvCZOQX-hhSkRFD2CvUk.roa (raw, json)
Hash identifier: wCQUVM0uCK8EKSdvBq/Pajq7fJmGa8bSHWRuP6ORvLk=
Subject key identifier: DE:B6:5D:C1:BA:09:BC:26:4E:41:7F:A1:85:29:11:14:3D:82:BD:49
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 01857267CFB0E9436A86B33EDFE5D4499659
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/3rZdwboJvCZOQX-hhSkRFD2CvUk.roa
Signing time: Mon 02 Jan 2023 12:14:44 +0000
ROA not before: Mon 02 Jan 2023 12:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6855
IP address blocks: 89.24.56.0/21 maxlen: 21
193.86.32.0/19 maxlen: 19
78.80.96.0/21 maxlen: 21
78.80.104.0/21 maxlen: 21
78.80.112.0/21 maxlen: 21
78.80.120.0/21 maxlen: 21
89.24.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:67:cf:b0:e9:43:6a:86:b3:3e:df:e5:d4:49:96:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Jan 2 12:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deb65dc1ba09bc264e417fa1852911143d82bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d6:d2:d5:13:26:30:9b:7e:34:43:e7:4f:34:
b6:64:e0:41:66:7e:98:ff:d7:b9:7e:d8:89:60:74:
b5:f7:73:6b:0a:de:ab:3e:34:74:85:04:d1:a5:78:
53:73:db:81:a0:02:32:dc:9d:a6:ea:35:36:8c:ba:
ca:30:48:10:6b:b2:e0:de:68:77:0b:a8:87:06:7d:
71:cb:c9:ed:36:b5:31:71:c2:2b:27:fe:80:c4:8d:
4a:14:aa:56:2a:d9:9d:09:ab:dd:0c:03:e5:04:4f:
de:f9:bb:78:10:14:56:25:2b:2a:fa:66:06:be:73:
ee:30:e8:4f:b4:ae:83:32:6d:0c:70:c9:9d:f1:1b:
e3:0c:89:c0:20:df:27:5f:44:41:d8:3b:e4:d4:3d:
21:e8:ea:f2:b3:b0:a4:b9:4d:af:44:3e:60:63:f2:
4a:54:ca:2f:e4:29:04:44:cf:8c:e4:77:20:c1:71:
e1:60:e1:f0:d3:41:26:6d:6d:10:d3:cd:58:dd:81:
b0:8f:23:25:a5:28:84:68:4f:cd:d4:0e:ba:38:18:
6d:5a:a3:b4:bf:bf:5b:59:cf:e9:58:58:c7:9b:57:
25:83:97:d0:48:d0:4d:c8:1f:ff:e8:be:0e:db:1d:
87:96:58:74:37:7f:e6:ea:9c:22:31:fb:15:7a:e8:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B6:5D:C1:BA:09:BC:26:4E:41:7F:A1:85:29:11:14:3D:82:BD:49
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/3rZdwboJvCZOQX-hhSkRFD2CvUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.80.96.0/19
89.24.48.0/20
193.86.32.0/19
Signature Algorithm: sha256WithRSAEncryption
12:d9:43:ca:cf:28:27:c2:f6:61:23:d9:07:1f:28:07:8e:10:
f8:98:4c:34:69:f6:d8:aa:f5:23:77:9e:a5:c8:93:56:f8:4d:
a3:db:2f:6a:80:87:af:44:4b:a9:7c:ec:bb:17:87:60:7e:d5:
a3:49:e3:03:45:cc:9a:a8:f7:53:f6:ad:a1:b6:2c:9d:de:68:
4d:60:64:dd:f1:61:31:4f:a9:b7:c2:82:76:2a:ad:1f:5b:62:
b5:d1:d6:7e:f2:04:9e:44:d7:6b:95:6c:df:68:bc:37:51:a9:
49:db:ed:69:aa:c0:a1:39:75:71:e8:36:ee:b9:69:fc:6b:14:
39:f8:b9:89:61:df:91:c0:9a:b5:28:aa:0d:68:8f:d0:d4:b8:
4b:4d:e3:34:04:f8:62:d4:05:7f:29:93:92:bc:f2:b8:1f:c6:
f8:14:19:60:c0:53:c8:38:fa:12:0d:15:f7:d9:33:cf:71:4b:
ba:42:25:a4:2e:01:46:6b:25:52:ea:77:99:13:48:8b:98:99:
73:89:27:78:4a:f8:92:05:6c:5c:c9:13:ca:33:2f:72:01:37:
20:3f:8d:f0:84:0f:31:d5:80:1b:ef:ac:be:26:a2:f8:c0:5c:
6a:16:c9:9e:d0:2d:47:c4:ac:fe:d0:25:1c:3e:8f:d0:3c:e9:
be:e9:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:24 2023 by rpki-client on console-fra.rpki-client.org