Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/RPyyQfoCHkSThVEQaLgukAsKu-E.roa
File: RPyyQfoCHkSThVEQaLgukAsKu-E.roa (raw, json)
Hash identifier: qEMTlQmH1Nid/rMMrWeKaRbwthhK6xycvwT7HJsU/Es=
Subject key identifier: 44:FC:B2:41:FA:02:1E:44:93:85:51:10:68:B8:2E:90:0B:0A:BB:E1
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018736EC64349573CEC51641AA6D0F60A05D
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/RPyyQfoCHkSThVEQaLgukAsKu-E.roa
Signing time: Fri 31 Mar 2023 09:07:54 +0000
ROA not before: Fri 31 Mar 2023 09:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8808
IP address blocks: 80.95.21.0/24 maxlen: 24
93.175.244.0/24 maxlen: 24
93.175.245.0/24 maxlen: 24
93.152.234.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:ec:64:34:95:73:ce:c5:16:41:aa:6d:0f:60:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Mar 31 09:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44fcb241fa021e449385511068b82e900b0abbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:dd:ec:40:d1:73:82:de:79:1f:2b:1f:05:
fd:8d:4b:43:7d:0b:76:84:df:ef:eb:1f:74:09:3e:
ab:77:07:31:3d:cd:cf:0f:b1:f1:87:41:88:5d:c0:
64:72:7b:3e:b2:74:ec:2f:8a:8d:2d:6f:b8:6b:db:
a7:d2:c4:cf:96:0a:6b:ab:85:12:bb:61:f8:ee:33:
7c:ec:42:80:37:97:26:a1:90:40:e6:69:31:b4:99:
fa:6f:06:24:35:f2:db:fc:59:03:fa:8f:68:53:22:
2a:59:f2:3f:9e:58:45:c3:0c:5e:6a:e6:9a:e2:9d:
f0:37:f1:08:56:74:b3:c7:cb:6a:81:70:0e:8c:a0:
97:c7:08:71:b8:4f:2c:9d:6a:cd:e7:ab:a1:8a:14:
6a:96:bb:8c:e3:ff:b2:08:1e:d4:bf:5d:0e:1c:fd:
5b:46:9f:7e:99:50:4a:5c:ee:48:7e:0b:bd:67:26:
53:62:7a:26:8f:48:ac:a3:7a:bf:9e:21:7f:85:32:
69:fb:91:25:b9:75:02:52:7c:12:6e:51:db:d8:27:
12:d5:7d:9d:17:96:66:08:a8:ff:a3:34:1e:f6:f2:
e9:f3:1a:77:ac:9b:bf:7a:93:46:4d:4b:bb:f6:f5:
90:05:e7:69:34:6e:f5:16:be:02:18:eb:f9:28:e1:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FC:B2:41:FA:02:1E:44:93:85:51:10:68:B8:2E:90:0B:0A:BB:E1
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/RPyyQfoCHkSThVEQaLgukAsKu-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.21.0/24
93.152.234.0/23
93.175.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:14:0c:1d:cc:d8:de:d6:27:5f:c2:e1:2c:c4:ec:ca:36:5f:
3c:6d:dd:06:ce:80:64:65:63:07:35:03:db:ef:83:e4:4f:32:
a9:5f:40:d1:2e:6f:e3:63:0d:90:61:20:06:1b:47:f2:59:74:
c4:c6:be:57:d9:7c:cd:7d:e9:47:4b:32:61:80:26:de:5e:5e:
db:56:ea:35:95:76:af:1f:59:09:de:d1:1d:f4:df:3a:1a:f0:
00:40:9a:06:24:e2:02:9d:75:1a:ae:94:f5:b6:d6:d7:c0:82:
93:1f:57:f1:e9:df:20:26:5b:5e:f4:73:88:e4:c8:ca:70:eb:
5d:6d:03:28:15:f7:37:11:e6:91:0b:74:75:9a:6c:ab:c5:da:
d2:63:05:c9:2f:59:dd:37:6e:57:09:dd:4c:d9:d8:8e:29:32:
ed:d6:12:65:53:0b:95:60:c0:5a:af:da:0e:50:fb:82:45:5b:
d6:2b:60:13:b3:6d:83:e0:d0:8a:e1:0e:b5:e7:67:bf:10:cd:
55:0b:06:bb:4a:6b:7b:9b:8a:ff:2e:69:3f:47:9b:33:62:3e:
e9:0a:32:f0:88:7a:46:70:81:5c:a6:38:21:73:64:66:8b:0c:
b4:64:3a:e2:18:f5:fa:08:1f:f4:e0:c1:60:20:7b:54:38:ce:
52:de:fb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:29 2024 by rpki-client on console-fra.rpki-client.org