Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/3HAHTGikSkZgD0u_YdIkfM6T6Kk.roa
File: 3HAHTGikSkZgD0u_YdIkfM6T6Kk.roa (raw, json)
Hash identifier: PxWWvy9Ch/6a1k2ucy+pQvxIHSEP3DxU1vrya0jqSdg=
Subject key identifier: DC:70:07:4C:68:A4:4A:46:60:0F:4B:BF:61:D2:24:7C:CE:93:E8:A9
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 018570304FBFD8EC8097494A8DD15FD2F15D
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/3HAHTGikSkZgD0u_YdIkfM6T6Kk.roa
Signing time: Mon 02 Jan 2023 01:54:52 +0000
ROA not before: Mon 02 Jan 2023 01:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8426
IP address blocks: 80.67.96.0/20 maxlen: 24
92.54.0.0/18 maxlen: 18
185.10.168.0/22 maxlen: 22
2a02:a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4f:bf:d8:ec:80:97:49:4a:8d:d1:5f:d2:f1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jan 2 01:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc70074c68a44a46600f4bbf61d2247cce93e8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:c5:56:92:e2:b3:18:85:51:71:2c:e0:ef:
08:05:db:2d:5c:78:0b:10:2c:04:34:67:bf:43:a4:
b4:a2:46:49:ba:58:51:aa:80:a2:0b:2d:b2:e7:69:
0d:a3:eb:fc:1f:56:18:ce:ca:5a:1b:4b:1d:f3:11:
92:07:29:5e:43:37:30:7b:6a:a9:64:77:99:26:91:
a4:d9:16:3b:5f:e8:3d:66:54:39:09:1b:a2:95:83:
2a:a6:1d:de:d2:30:23:8a:af:42:37:73:4b:6a:8b:
17:26:36:5d:9b:d9:fe:90:f4:33:34:32:a6:87:18:
42:ac:d5:29:1c:52:1d:86:7a:21:c9:37:5d:cc:96:
48:4c:e9:0c:09:a4:8f:3d:ba:5a:82:4d:8f:65:2b:
9a:7f:15:bf:cd:44:4e:52:e2:54:41:49:53:7b:d9:
7c:ad:3c:45:1a:41:bb:24:64:64:eb:88:b0:32:cf:
8d:f7:58:ed:55:7d:49:1c:f4:ea:cd:8f:59:04:19:
67:5a:50:8f:44:85:cb:9d:d0:60:e7:da:d5:4f:59:
68:3a:67:95:69:d1:7b:7d:a2:c8:72:02:e7:cf:ca:
82:b4:b6:a3:ed:3e:17:4e:fb:76:f3:bf:3b:c4:71:
18:06:56:b9:73:eb:d0:bf:6e:de:22:df:f6:ac:b2:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:07:4C:68:A4:4A:46:60:0F:4B:BF:61:D2:24:7C:CE:93:E8:A9
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/3HAHTGikSkZgD0u_YdIkfM6T6Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.96.0/20
92.54.0.0/18
185.10.168.0/22
IPv6:
2a02:a0::/32
Signature Algorithm: sha256WithRSAEncryption
71:f2:ee:cd:4f:0e:f9:c5:4b:17:5e:bf:05:bb:be:a5:c9:f4:
1d:f8:db:81:78:34:4f:96:40:5a:f7:49:a7:65:50:99:ff:32:
f1:c5:1a:1e:71:1b:31:68:cf:0c:33:c2:ae:1c:5f:ca:2c:b8:
c0:10:6e:7e:b2:56:cd:bf:00:65:d7:a4:22:e1:3e:81:7b:2c:
52:34:59:46:fc:eb:55:6f:1f:4a:d0:b9:85:63:3f:e4:0e:7f:
b0:68:90:53:da:fb:b4:c8:eb:76:3e:66:f4:1b:fd:41:18:f6:
db:34:06:d2:3a:96:d6:84:d8:fe:e0:50:29:e3:01:bf:40:df:
17:1b:69:2d:fa:db:e1:dd:c8:30:1e:6e:d5:40:48:14:b3:6a:
d9:9b:15:60:28:da:0d:73:20:7b:36:f9:46:e5:ed:91:e0:2d:
59:48:7c:29:6d:d9:f6:4b:4e:1d:26:c0:84:65:7c:70:32:7a:
1f:e9:bd:ff:6a:dd:a2:c1:72:4b:b9:29:92:48:35:1c:64:5a:
f5:c5:a7:d6:61:5c:d5:e7:cd:19:3d:76:9a:28:9f:e4:17:6e:
9f:ce:90:5a:2f:9c:02:30:de:ba:39:c4:4a:84:ef:f6:39:9b:
54:b8:95:61:95:4b:e8:26:7c:9c:bf:a9:b5:c8:79:ad:d0:8a:
fb:d3:dd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:53 2024 by rpki-client on console-fra.rpki-client.org