Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/YHXdjdDIoFGgMyocjSw29TzBFyU.roa
File: YHXdjdDIoFGgMyocjSw29TzBFyU.roa (raw, json)
Hash identifier: bUmDyinZGlia4vAH32w8jOHhIqjanouqr4Z5JB+/ai4=
Subject key identifier: 60:75:DD:8D:D0:C8:A0:51:A0:33:2A:1C:8D:2C:36:F5:3C:C1:17:25
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 018BFCC57819410FB9AA5C5F6C8539288F51
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/YHXdjdDIoFGgMyocjSw29TzBFyU.roa
Signing time: Thu 23 Nov 2023 15:21:21 +0000
ROA not before: Thu 23 Nov 2023 15:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 80.90.188.0/22 maxlen: 24
185.125.200.0/22 maxlen: 24
95.140.146.0/23 maxlen: 24
95.140.152.0/21 maxlen: 24
80.90.178.0/24 maxlen: 24
80.90.179.0/24 maxlen: 24
80.90.180.0/22 maxlen: 24
80.90.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:c5:78:19:41:0f:b9:aa:5c:5f:6c:85:39:28:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Nov 23 15:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6075dd8dd0c8a051a0332a1c8d2c36f53cc11725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:b8:2c:03:2a:0d:44:7e:6b:a4:b7:ba:ce:
6c:52:a9:d0:a1:be:04:6f:d7:5f:be:9c:9e:ad:8f:
76:5a:8c:ee:6c:28:aa:e7:94:30:07:51:7b:f9:be:
a1:d1:33:34:54:24:8a:00:01:fe:49:02:72:5f:46:
a2:c7:bc:04:59:05:7c:dd:73:a6:2a:ec:64:ad:58:
a9:b6:67:74:0f:20:54:ca:ef:81:2f:ac:11:a2:12:
96:7e:0d:61:c6:78:4f:bc:83:d3:b0:a7:64:d3:af:
02:de:51:c0:3e:ae:42:df:97:23:b3:a9:57:fe:3a:
ea:98:9b:e1:14:44:26:2b:f2:6f:33:ad:45:d6:8e:
6e:24:9a:2e:3e:7b:dd:d0:46:30:4b:46:57:3b:f4:
7e:36:7a:98:1e:9e:bd:69:00:9b:87:4e:c6:ec:37:
09:4e:b9:7e:2e:2a:0b:1c:9c:42:6f:72:18:72:1e:
a4:9c:3c:f8:5e:65:65:0f:7f:b2:8d:cc:ed:71:90:
11:e3:c1:73:2f:04:b3:e4:90:80:1c:07:82:72:75:
81:99:33:c7:ec:0b:30:af:30:6d:fc:52:4a:bd:19:
80:33:1b:05:54:4b:85:81:90:5b:a8:5f:9e:06:fd:
e9:ae:e9:3e:3c:f7:53:4b:c7:a9:e9:0c:a7:4b:cb:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:75:DD:8D:D0:C8:A0:51:A0:33:2A:1C:8D:2C:36:F5:3C:C1:17:25
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/YHXdjdDIoFGgMyocjSw29TzBFyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.178.0-80.90.191.255
95.140.146.0/23
95.140.152.0/21
185.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
84:e1:75:d4:b0:70:44:2e:6c:38:b4:e4:ec:27:52:05:fe:0e:
b7:fc:44:f8:00:56:77:dd:cf:75:e7:51:e2:21:86:bf:d7:00:
fc:16:d8:0f:c6:79:60:3b:4b:f2:58:eb:14:34:21:2a:14:29:
91:b8:c8:17:56:08:f7:16:b5:0b:7e:94:b7:4f:cb:76:f7:ac:
33:2c:f4:37:ae:d9:cb:44:12:34:49:bc:b8:d9:ec:23:0a:c4:
be:3e:4d:eb:89:39:bd:1c:12:f8:f2:8a:c7:8d:ad:55:40:03:
eb:f9:2f:d1:f1:e6:95:bf:fc:eb:94:5c:fe:f8:d4:39:3d:fc:
ee:02:83:bb:d4:e9:2b:de:3f:fd:09:94:dd:4e:4b:13:50:3e:
59:b6:a9:e5:83:95:4b:86:ee:8f:9b:4f:0c:83:9c:cc:a9:2a:
6b:43:71:c9:a7:f7:47:9d:88:f8:d9:f6:18:a7:b8:66:c5:2a:
8d:22:95:60:96:30:d4:9e:98:ec:64:7d:d3:27:c7:27:86:24:
4c:d2:17:20:50:14:16:04:0b:90:a8:fd:52:59:ac:9b:87:62:
36:f9:58:ed:4e:e8:51:50:ed:1f:cc:20:54:6a:f8:63:2e:be:
08:43:18:8b:2e:97:21:c7:00:a4:ee:93:b7:d4:65:f5:68:e7:
1c:38:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:40 2024 by rpki-client on console-ams.rpki-client.org