Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/S7oSfvdsJNhbheYOhvYG87Q-NUg.roa
File: S7oSfvdsJNhbheYOhvYG87Q-NUg.roa (raw, json)
Hash identifier: 5nq9drczFGkKPBw3/qW0YmolH+xz98JSpimlW9ihuWU=
Subject key identifier: 4B:BA:12:7E:F7:6C:24:D8:5B:85:E6:0E:86:F6:06:F3:B4:3E:35:48
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019169A31B7AE3CAA4963F5F63EC54829957
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/S7oSfvdsJNhbheYOhvYG87Q-NUg.roa
Signing time: Mon 19 Aug 2024 07:56:22 +0000
ROA not before: Mon 19 Aug 2024 07:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8808
IP address blocks: 80.95.21.0/24 maxlen: 24
93.175.244.0/24 maxlen: 24
93.175.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 06:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:a3:1b:7a:e3:ca:a4:96:3f:5f:63:ec:54:82:99:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Aug 19 07:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bba127ef76c24d85b85e60e86f606f3b43e3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:d6:d5:f5:7b:dc:05:1c:bc:9a:66:57:f0:
fb:01:87:b2:ce:f0:c2:5e:62:97:1a:9a:af:d6:ee:
34:f2:56:e8:96:4f:ee:77:51:08:be:0c:d4:c2:7f:
a5:1b:8d:cd:06:58:c2:87:97:93:77:f8:25:a6:a3:
72:62:6f:03:af:30:dd:64:6e:0f:5b:64:5d:8f:fe:
86:f4:d0:be:f9:ec:e2:c1:81:43:d7:cf:9b:ef:4c:
65:ef:28:df:63:c0:e1:a2:ac:74:c4:ca:e1:0e:6a:
fb:66:1f:ba:12:ee:35:df:9b:fa:af:c3:6f:64:bb:
8f:d8:75:29:d5:4d:bb:7a:b4:85:7d:b4:cd:23:4e:
b9:36:9d:07:0d:28:d7:61:37:6d:de:98:ab:11:0b:
90:c2:1e:91:0f:b7:4e:b9:16:58:ba:b7:4b:2e:95:
70:a9:fa:03:e1:13:92:5b:9e:0d:83:d6:61:b0:99:
7e:3c:80:42:b4:06:11:7f:9e:9d:c8:f7:ad:26:3c:
25:8f:98:15:10:32:8d:19:96:0c:d3:e7:2d:d0:01:
f9:1a:6f:bc:c1:bc:1a:3b:fb:f5:e7:f5:c0:14:92:
aa:32:6a:5a:2e:02:0b:84:82:7c:e6:9b:ae:43:68:
09:d9:b6:1c:1d:a3:19:3e:0b:cd:c3:1d:ae:f9:21:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:12:7E:F7:6C:24:D8:5B:85:E6:0E:86:F6:06:F3:B4:3E:35:48
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/S7oSfvdsJNhbheYOhvYG87Q-NUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.21.0/24
93.175.244.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:ff:26:c9:72:09:5c:ca:ca:34:23:17:0d:2b:83:7a:d6:d9:
bb:51:d8:56:b3:12:0a:4d:62:ac:f6:a1:ec:9c:73:36:ce:3b:
23:dc:b4:40:c1:15:c9:d0:91:72:e4:11:dd:19:ab:fe:e7:61:
67:94:20:1a:bc:31:2e:63:e4:3b:8e:ff:e4:2e:39:63:90:4d:
90:6f:99:33:59:75:88:8d:2a:98:0a:b2:c8:51:57:4e:95:34:
18:87:61:5e:96:b8:ab:f9:77:3d:15:b6:53:a9:31:8a:28:08:
7b:d0:56:c8:e5:fa:b7:a9:91:a8:cc:99:36:95:79:8f:e8:6e:
6d:58:96:51:92:4e:a6:80:36:69:58:7a:71:ac:78:ff:59:22:
2a:1f:ab:72:29:fb:c4:85:9e:1f:3b:81:16:8d:f4:f9:fe:97:
b4:c4:e3:e9:32:8b:4a:63:d6:8f:1e:15:00:44:89:f3:2d:18:
5e:25:8f:9b:8a:a5:27:1f:bf:71:c9:fa:60:d9:f7:b2:44:d9:
77:00:80:76:0c:6e:82:d5:b3:08:7f:e4:87:75:bb:df:81:98:
ad:73:32:61:a4:73:5c:19:f9:c2:5d:ea:6e:34:18:29:19:7b:
98:0a:06:b7:06:60:44:45:51:b8:74:08:29:04:46:42:cb:c5:
32:07:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 07:44:11 2024 by rpki-client on console-fra.rpki-client.org