Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/dbmLAWCKVES08v6i8Q4zhFYC44Y.roa
File: dbmLAWCKVES08v6i8Q4zhFYC44Y.roa (raw, json)
Hash identifier: gGseyTSqGBzHGGaznEssYZeSb8zoqtC77mKm5xrc/g8=
Subject key identifier: 75:B9:8B:01:60:8A:54:44:B4:F2:FE:A2:F1:0E:33:84:56:02:E3:86
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 01856D93D1AC06DDA3BB1026B49E8853EF37
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/dbmLAWCKVES08v6i8Q4zhFYC44Y.roa
Signing time: Sun 01 Jan 2023 13:44:41 +0000
ROA not before: Sun 01 Jan 2023 13:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43645
IP address blocks: 185.80.252.0/22 maxlen: 22
185.80.255.0/24 maxlen: 24
2a05:8380::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d1:ac:06:dd:a3:bb:10:26:b4:9e:88:53:ef:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Jan 1 13:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75b98b01608a5444b4f2fea2f10e33845602e386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:53:07:65:bd:dc:98:55:7e:7e:8d:36:25:
69:65:80:40:42:d5:05:14:b5:4b:08:d9:07:28:bd:
4a:b7:26:1d:c8:c4:62:05:b8:ae:ab:5d:ed:f6:67:
14:be:3f:ff:79:bf:a1:90:96:02:38:e5:4a:e6:70:
7b:a3:e2:d3:bf:64:be:75:e4:76:a9:29:1a:90:90:
73:95:19:6a:0e:03:2d:b3:85:e9:ca:e2:6c:8c:37:
ed:59:21:04:65:7f:67:c9:76:f6:0f:d6:c8:77:75:
3b:e4:fb:9e:71:9e:d3:a7:12:3d:29:75:44:61:7c:
1b:cc:e5:6b:e0:5b:24:de:42:92:86:d8:55:a5:e9:
7a:af:6c:72:d5:91:94:63:2a:59:2c:c1:61:4b:ce:
e4:58:54:91:51:39:72:b4:c2:17:62:66:49:22:9a:
86:4b:c4:05:db:d2:a0:89:ef:7b:ea:c2:30:c0:35:
88:c9:4d:93:c0:ca:76:c0:fd:e1:46:85:2a:76:21:
11:e4:08:cb:dc:1b:09:97:2b:61:d6:68:f2:b0:ed:
86:d4:a7:48:7b:2d:9f:97:84:92:09:04:42:55:7d:
3d:aa:18:fb:dd:6b:7c:27:cd:4c:41:8d:d5:46:6e:
05:38:a0:4d:c0:ab:fd:67:70:4c:e6:a3:89:d8:d9:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:8B:01:60:8A:54:44:B4:F2:FE:A2:F1:0E:33:84:56:02:E3:86
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/dbmLAWCKVES08v6i8Q4zhFYC44Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.252.0/22
IPv6:
2a05:8380::/29
Signature Algorithm: sha256WithRSAEncryption
3d:36:cf:0e:75:1f:81:f5:2f:47:da:38:a3:6f:7c:49:3a:e6:
4c:d6:76:05:bc:9a:60:5c:c4:a9:a6:89:08:70:46:2a:4b:23:
11:c6:9f:e5:4a:5a:9f:90:67:1b:4e:b5:b8:a9:4b:e6:b9:a6:
11:19:34:52:a4:b7:83:00:ed:15:a1:27:fe:76:36:a0:c8:5e:
49:30:df:40:99:27:c1:b1:29:1e:7e:15:44:f6:59:21:54:e5:
2d:44:86:fe:74:fd:66:c9:d0:69:b9:3d:04:4d:e0:03:a4:1d:
83:21:ed:5e:2c:76:67:e1:28:20:d9:00:63:e0:ef:df:e5:d7:
78:30:ca:b7:b2:56:cc:4b:ad:72:30:11:40:8c:0a:6c:66:9c:
1f:a2:bf:bf:53:b1:b5:00:0b:42:e0:31:76:61:00:7b:4a:34:
b4:5f:97:ef:1c:96:19:b0:92:ec:5f:94:ed:ee:57:ff:39:c8:
f3:73:ff:08:b3:72:df:e9:2f:98:fe:6c:54:15:9b:f7:9a:77:
66:a0:e4:3d:39:5b:e1:ad:67:39:ec:39:32:02:23:cb:15:90:
cd:e2:22:db:e2:39:86:dd:cd:5b:20:e4:83:9a:86:c7:bc:2e:
57:c2:8c:53:d3:12:e4:0c:50:8a:cc:f2:3d:d5:5a:07:58:bf:
01:6a:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:46 2024 by rpki-client on console-fra.rpki-client.org