Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/P89Q3EdDXCFkLdUu5HitM5RWJjc.roa
File: P89Q3EdDXCFkLdUu5HitM5RWJjc.roa (raw, json)
Hash identifier: JaK0JxZCJXjMC2GKTqdfe4NEHGoqg+6QlaJxyw+loQM=
Subject key identifier: 3F:CF:50:DC:47:43:5C:21:64:2D:D5:2E:E4:78:AD:33:94:56:26:37
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 0186742F877FEE22C9121C2F7583342B8082
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/P89Q3EdDXCFkLdUu5HitM5RWJjc.roa
Signing time: Tue 21 Feb 2023 13:35:17 +0000
ROA not before: Tue 21 Feb 2023 13:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1921
IP address blocks: 185.80.190.0/24 maxlen: 24
185.80.191.0/24 maxlen: 24
185.80.188.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:2f:87:7f:ee:22:c9:12:1c:2f:75:83:34:2b:80:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Feb 21 13:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fcf50dc47435c21642dd52ee478ad3394562637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:66:80:7e:80:0c:e2:af:dd:31:74:32:51:
f8:2c:32:aa:ef:6d:1c:c3:f4:0a:e7:e3:93:7d:14:
96:8b:ed:ef:ae:63:11:5c:4d:bc:52:8f:06:93:44:
66:c0:f4:5a:76:a8:b1:07:01:4b:af:94:79:e9:9a:
34:51:6e:66:bc:10:28:31:80:78:5b:8d:e3:c7:7c:
b2:01:a4:f6:bc:f6:18:2c:a5:73:5c:51:b0:70:34:
9a:a4:01:0c:ab:8c:72:98:d0:ab:cb:0b:61:0c:a3:
ab:d9:a2:26:2c:7d:36:67:e8:7a:96:f3:0e:c9:ce:
3c:58:da:2b:89:cc:84:c4:1b:24:15:7a:20:85:2b:
a5:32:c6:2a:ed:60:cb:b8:af:10:c5:23:31:0c:a7:
78:60:1a:34:e3:50:41:3d:cd:48:87:5b:db:a9:66:
dc:b3:fe:fa:29:8e:ef:87:c7:c7:f9:2a:20:bb:1c:
ac:e6:3a:f0:3e:7c:32:ef:8a:64:d1:08:fd:f0:bf:
e6:ad:47:aa:d2:73:32:b5:c7:92:44:5d:5b:4f:6b:
03:18:f3:fe:d7:2c:56:b1:b2:1e:aa:6e:98:c6:11:
96:b1:51:a5:ae:ad:c4:b4:b4:2b:76:c4:bf:c7:c8:
fc:34:d8:f8:13:c2:19:10:7b:9b:2d:c0:57:a7:98:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:50:DC:47:43:5C:21:64:2D:D5:2E:E4:78:AD:33:94:56:26:37
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/P89Q3EdDXCFkLdUu5HitM5RWJjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
6e:eb:34:ef:d3:1b:87:17:e6:ea:34:a9:67:8c:47:3d:ed:86:
94:59:31:04:16:56:64:8e:93:0b:af:d0:d6:64:a4:75:79:35:
fc:25:23:9c:c3:29:75:38:de:65:b9:cd:65:c3:c0:01:ce:6b:
ce:76:19:70:2e:ed:8a:c0:b2:5c:fe:ff:ba:f4:1c:9f:ec:b3:
de:16:47:7f:af:22:fc:24:3c:81:e5:f6:1e:b3:cb:73:c4:15:
21:ec:c3:80:24:e9:ee:8a:cf:9e:63:61:f1:d8:28:fe:dc:49:
fc:83:3c:c5:7d:61:0f:7a:d1:43:70:63:21:5b:22:b7:75:1f:
28:26:f8:0e:5c:8f:7b:f9:14:a2:3a:f4:1e:89:1a:0c:88:d2:
81:c7:fe:86:1d:b7:1e:70:7d:9f:91:50:ca:60:c8:d0:ca:b6:
2d:25:42:8e:09:76:c9:c3:c2:db:f1:b7:5a:10:30:76:a8:5b:
04:2f:7c:96:b6:d9:1a:ac:75:8d:f7:40:95:f5:89:57:9a:50:
4c:80:fe:b0:68:9d:4a:55:68:b8:c3:3e:91:98:e4:e2:bf:5d:
0c:af:b1:1b:28:ac:96:ec:1f:da:82:be:0b:2d:31:fe:4c:57:
55:8f:e0:84:86:70:cc:45:20:8f:df:29:3a:03:78:8f:00:2c:
e1:b8:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:11 2024 by rpki-client on console-fra.rpki-client.org