Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/93aVu1KMqqiJv2isMExmf80qtrY.roa
File: 93aVu1KMqqiJv2isMExmf80qtrY.roa (raw, json)
Hash identifier: qVXnGzl7e2JVFd3A3pBEyLF86r0/rnxO4AavHvADSoU=
Subject key identifier: F7:76:95:BB:52:8C:AA:A8:89:BF:68:AC:30:4C:66:7F:CD:2A:B6:B6
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 018570C2DA739F54EF12BA79E9234A5DE96B
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/93aVu1KMqqiJv2isMExmf80qtrY.roa
Signing time: Mon 02 Jan 2023 04:34:56 +0000
ROA not before: Mon 02 Jan 2023 04:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 80.69.0.0/19 maxlen: 19
89.187.96.0/19 maxlen: 19
195.234.244.0/22 maxlen: 24
37.46.0.0/21 maxlen: 21
185.2.164.0/22 maxlen: 22
2001:1a08::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Sep 2023 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:da:73:9f:54:ef:12:ba:79:e9:23:4a:5d:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Jan 2 04:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f77695bb528caaa889bf68ac304c667fcd2ab6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:7a:69:7a:3f:0a:6c:34:5d:b4:45:a9:44:
f4:c0:2b:11:2e:0b:b4:f7:16:b6:d1:a5:10:cc:bf:
ad:f5:8c:10:ac:e1:72:30:3e:c5:91:c5:2e:b1:eb:
90:45:0d:f8:7b:ad:dc:35:52:47:6e:1f:e0:7a:e5:
36:e8:15:d8:d6:ac:29:37:dc:1f:10:4f:77:e8:fe:
7b:9d:04:d1:a9:ab:97:1d:6a:19:1c:65:b5:5f:8b:
1b:f0:8d:cb:61:3a:d7:6f:45:7b:b3:73:b9:0e:d4:
4e:95:93:d7:e9:a0:87:46:e9:7d:31:1c:a0:f4:99:
bf:b0:41:d7:e9:4a:3d:0e:2c:c2:94:d3:44:2a:4f:
db:0e:70:a4:ea:54:7e:86:d1:71:5a:50:2b:a9:bd:
fd:f2:81:84:bd:b1:a7:56:62:77:35:88:8d:91:5d:
69:93:09:8c:6c:1c:3a:5b:2f:2f:53:2f:32:9e:f9:
dd:d0:74:b8:9e:6b:7b:3c:c4:26:87:4b:a0:6a:15:
c0:6c:af:37:ab:e0:a9:fc:b7:21:ea:9b:e8:2a:ad:
74:93:75:7b:3e:13:35:d3:f7:1f:d1:14:f6:34:9e:
4f:cd:25:c9:20:5b:39:8b:20:d7:a9:0d:e9:c3:6f:
2d:f1:e0:8f:f4:82:76:08:18:dd:74:1f:a3:be:7e:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:76:95:BB:52:8C:AA:A8:89:BF:68:AC:30:4C:66:7F:CD:2A:B6:B6
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/93aVu1KMqqiJv2isMExmf80qtrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.0.0/21
80.69.0.0/19
89.187.96.0/19
185.2.164.0/22
195.234.244.0/22
IPv6:
2001:1a08::/32
Signature Algorithm: sha256WithRSAEncryption
58:ee:c1:1e:12:76:a5:f6:f2:1d:f6:42:8e:73:68:69:a0:3c:
93:57:09:30:77:8a:4f:0c:8d:5f:56:ed:f3:d7:46:94:d5:57:
fd:1a:94:d2:f0:80:ca:cf:8f:f0:d0:05:ea:24:13:86:45:00:
ec:37:f5:c2:0b:9c:57:10:a6:1e:fb:43:67:76:a9:0a:0f:ad:
10:a1:72:2c:0d:7c:40:14:a4:e5:13:5f:97:1e:9c:84:7f:a7:
b6:6e:e0:66:8e:9b:57:9d:d7:e9:ae:a9:e7:ee:1e:37:3d:ea:
cb:77:30:0b:ae:1d:36:83:a4:1d:05:48:91:ad:86:f0:8a:63:
bf:b2:ad:7f:38:26:59:9d:73:4d:ea:a5:65:9e:c1:a7:89:ca:
56:0a:18:4b:b0:6a:47:3c:3d:eb:b4:22:de:04:08:d8:5d:bc:
1b:c0:07:c0:55:c2:95:b8:40:14:7e:a3:d7:8e:45:a2:12:94:
40:6c:ea:d7:a4:6f:93:1a:76:e3:67:d6:35:be:10:c8:b2:d3:
cb:5e:17:38:b6:94:88:a8:73:35:02:76:2c:7e:0e:df:96:57:
6e:8b:22:f0:98:85:bc:2f:9c:23:41:ec:6c:be:0a:8e:04:55:
d9:1a:3d:1e:14:0f:2d:3f:a5:d8:d7:d2:f2:e7:46:ef:9f:bf:
b0:fb:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:40 2024 by rpki-client on console-fra.rpki-client.org