Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/SuRW5fZJnfIELf92J12jFIpiR6g.roa
File: SuRW5fZJnfIELf92J12jFIpiR6g.roa (raw, json)
Hash identifier: zz0PbXZ2RLbIoGU7uuh9lsXKXjYWKaZtpZPkteyAiqw=
Subject key identifier: 4A:E4:56:E5:F6:49:9D:F2:04:2D:FF:76:27:5D:A3:14:8A:62:47:A8
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0186E19953D1775ECDD33DCC76B65BADD43F
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/SuRW5fZJnfIELf92J12jFIpiR6g.roa
Signing time: Tue 14 Mar 2023 19:29:27 +0000
ROA not before: Tue 14 Mar 2023 19:29:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 80.90.188.0/22 maxlen: 24
80.90.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 17:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e1:99:53:d1:77:5e:cd:d3:3d:cc:76:b6:5b:ad:d4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 14 19:29:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ae456e5f6499df2042dff76275da3148a6247a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:fe:c0:ba:51:79:4d:c6:d7:cf:c1:de:55:
de:14:84:ef:7a:f8:68:68:45:a2:9f:78:67:77:1c:
12:b5:0a:51:1e:cc:97:85:46:5c:21:57:7a:00:1e:
6f:b4:83:75:f4:7b:25:88:1f:12:6b:45:63:c3:a5:
b6:ff:21:ea:cd:97:61:be:56:db:87:8f:6d:c8:67:
b2:4a:7b:6f:ae:c1:54:62:98:fb:9b:b8:6d:0c:c3:
5e:eb:2f:b5:a0:b4:7e:8b:ea:94:be:a6:69:4e:f3:
35:c9:b4:3d:d6:dc:5e:ea:0f:57:fe:f2:d2:e6:55:
21:42:cc:32:35:1c:8b:f1:21:66:0d:59:db:e2:59:
9b:55:b1:69:22:40:be:08:bf:2d:d3:cb:92:5d:d7:
ee:b5:b2:f4:0e:65:d4:d3:32:e3:15:bd:6d:76:8b:
39:6f:62:8a:00:4c:f8:df:f0:6e:94:b0:c5:1c:29:
ea:7d:fc:c4:5d:eb:c3:5c:33:e5:3e:86:d4:ac:c2:
7f:89:35:2d:ed:5a:4c:84:24:e8:07:eb:f0:30:68:
7f:69:47:bd:1f:a9:0f:af:d4:8d:b1:5b:c2:c2:c1:
87:ca:fd:56:51:ed:7e:9d:c5:1a:72:8e:e7:1d:fc:
3f:90:26:c8:69:7c:f0:56:da:ad:af:31:d1:5b:25:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E4:56:E5:F6:49:9D:F2:04:2D:FF:76:27:5D:A3:14:8A:62:47:A8
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/SuRW5fZJnfIELf92J12jFIpiR6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.184.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:66:94:04:88:a8:7c:ea:29:e4:cb:a0:d3:c5:2a:7c:e7:5c:
eb:3b:31:ea:67:48:63:90:60:15:83:5d:f5:da:c0:07:ff:f5:
0e:29:0d:c7:80:81:e2:c6:08:e9:bb:9e:67:29:34:78:9b:ba:
d8:aa:2d:ea:b6:4a:57:53:04:65:d2:b1:7a:f9:16:9c:38:e2:
32:62:f7:9d:59:50:36:95:03:9f:33:96:61:91:5b:c1:e4:26:
35:a3:44:38:84:34:c4:a9:14:72:23:ea:1c:6b:d8:ac:65:d4:
7a:c2:bc:2d:3d:49:80:70:db:55:b6:ad:61:3f:a2:23:5d:03:
29:3f:6c:86:6b:40:ff:ca:03:be:d9:da:14:f0:51:41:9f:38:
b3:9c:d2:25:50:e7:c0:4c:62:29:25:27:37:a3:e4:f3:38:c8:
a8:47:c2:18:a4:d8:1e:07:09:59:ee:1a:5c:ea:7f:b0:42:1a:
01:6e:00:ac:7a:48:78:d8:ba:1e:aa:aa:3a:e1:ed:2a:81:4d:
54:a8:52:d1:0b:e0:bc:1c:d0:49:56:a0:84:27:91:7a:c9:8e:
29:d6:e9:f3:28:0a:3b:d7:50:1c:a0:7b:12:33:f4:a4:17:74:
95:ce:76:b5:07:05:a1:81:5c:50:6e:98:22:cb:30:39:e5:53:
9a:f5:83:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbhmVPRd17N0z3MdrZbrdQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2
N2VmMTMwHhcNMjMwMzE0MTkyOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWU0NTZlNWY2NDk5ZGYyMDQyZGZmNzYyNzVkYTMxNDhhNjI0N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ7+wLpReU3G18/B3lXeFITvevho
aEWin3hndxwStQpRHsyXhUZcIVd6AB5vtIN19HsliB8Sa0Vjw6W2/yHqzZdhvlbb
h49tyGeySntvrsFUYpj7m7htDMNe6y+1oLR+i+qUvqZpTvM1ybQ91txe6g9X/vLS
5lUhQswyNRyL8SFmDVnb4lmbVbFpIkC+CL8t08uSXdfutbL0DmXU0zLjFb1tdos5
b2KKAEz43/BulLDFHCnqffzEXevDXDPlPobUrMJ/iTUt7VpMhCToB+vwMGh/aUe9
H6kPr9SNsVvCwsGHyv1WUe1+ncUaco7nHfw/kCbIaXzwVtqtrzHRWyVedwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErkVuX2SZ3yBC3/diddoxSKYkeoMB8GA1UdIwQY
MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt
YjI1MDk5N2ZjNzVkLzEvU3VSVzVmWkpuZklFTGY5MkoxMmpGSXBpUjZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk
LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUFq4MA0G
CSqGSIb3DQEBCwUAA4IBAQAaZpQEiKh86inky6DTxSp851zrOzHqZ0hjkGAVg131
2sAH//UOKQ3HgIHixgjpu55nKTR4m7rYqi3qtkpXUwRl0rF6+RacOOIyYvedWVA2
lQOfM5ZhkVvB5CY1o0Q4hDTEqRRyI+oca9isZdR6wrwtPUmAcNtVtq1hP6IjXQMp
P2yGa0D/ygO+2doU8FFBnziznNIlUOfATGIpJSc3o+TzOMioR8IYpNgeBwlZ7hpc
6n+wQhoBbgCsekh42Loeqqo64e0qgU1UqFLRC+C8HNBJVqCEJ5F6yY4p1unzKAo7
11AcoHsSM/SkF3SVzna1BwWhgVxQbpgiyzA55VOa9YNf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org