Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/yHubS8ampqj_Efp5YabjoYNmj58.roa
File: yHubS8ampqj_Efp5YabjoYNmj58.roa (raw, json)
Hash identifier: 0P8d6pNppFxPam7hfkpculRNkAp+XlECK56rtIZAMBw=
Subject key identifier: C8:7B:9B:4B:C6:A6:A6:A8:FF:11:FA:79:61:A6:E3:A1:83:66:8F:9F
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 01856F0B587E2C87AC4C9C851EFC1F860401
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/yHubS8ampqj_Efp5YabjoYNmj58.roa
Signing time: Sun 01 Jan 2023 20:34:52 +0000
ROA not before: Sun 01 Jan 2023 20:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39153
IP address blocks: 80.248.80.0/20 maxlen: 20
80.253.16.0/20 maxlen: 20
109.71.192.0/21 maxlen: 21
2a00:5d00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:58:7e:2c:87:ac:4c:9c:85:1e:fc:1f:86:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Jan 1 20:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c87b9b4bc6a6a6a8ff11fa7961a6e3a183668f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:5f:38:84:c4:3e:24:bc:a4:36:53:ad:83:
03:18:54:fd:62:21:9f:7f:32:f6:c6:fc:11:c5:a6:
ba:aa:49:d1:8e:72:42:a6:42:f1:af:1e:32:68:cb:
9e:b3:b6:89:46:ed:7e:74:6a:36:35:07:9c:0a:08:
3c:a4:8b:70:e5:4e:6c:dc:d6:ff:b4:d1:7b:f3:60:
6e:66:89:80:94:58:bd:b5:f2:22:b1:a0:a6:ec:80:
ed:0e:0c:d7:db:05:21:a3:04:21:62:07:15:bc:50:
7f:28:88:2c:24:d8:94:cf:c7:b1:9a:46:2a:d2:13:
76:56:53:68:36:1e:66:23:21:83:ee:c6:15:23:3a:
68:eb:a4:8c:10:4d:f2:88:29:4f:fb:ec:aa:a4:8e:
13:7c:30:6a:17:7d:fd:9f:1c:6c:4d:60:78:91:33:
f9:fd:c0:91:49:34:aa:41:c7:7d:d9:d3:a9:21:de:
0a:e0:bd:67:25:65:ec:d0:85:f5:24:ca:39:1e:87:
0f:74:df:28:4a:96:3a:c9:5e:e6:67:0d:cf:db:3c:
38:b6:88:a8:be:de:f5:97:fc:0d:50:78:8d:e7:1b:
d4:9d:04:6d:19:02:f3:d0:32:31:7b:f6:16:b5:74:
1b:18:7d:63:0c:25:d3:cd:69:04:11:85:b2:bf:69:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:9B:4B:C6:A6:A6:A8:FF:11:FA:79:61:A6:E3:A1:83:66:8F:9F
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/yHubS8ampqj_Efp5YabjoYNmj58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.80.0/20
80.253.16.0/20
109.71.192.0/21
IPv6:
2a00:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
9b:91:32:d1:21:76:07:ec:9b:7f:10:a8:c8:8b:79:64:d9:d3:
53:3d:9e:39:5d:6d:63:0c:36:bd:09:4c:dc:a7:d4:59:75:72:
e2:c8:e4:00:e2:14:1c:65:a5:e1:a3:65:e8:e2:0c:c6:d2:ac:
64:16:1e:ba:f5:c4:07:cb:d7:be:60:67:7a:ac:c7:25:1e:c0:
b9:bb:85:23:9f:9c:db:0f:2f:e7:7e:53:b6:f5:56:55:57:07:
6e:0a:bb:a2:75:85:8d:82:99:f8:69:b5:2f:d8:5c:55:23:cf:
d9:e2:b9:0a:c5:31:9b:34:42:f3:84:05:d5:5d:24:58:e0:56:
d4:b7:95:44:90:18:4d:8d:e0:f4:29:15:93:42:be:70:72:e6:
1d:4a:1d:08:a7:96:dc:a4:1b:8f:dd:4d:64:37:88:f3:2f:56:
30:b6:07:a8:d0:ff:7a:93:a8:f2:b0:d8:ea:38:19:0f:fc:e2:
9d:28:ce:6a:c2:7c:8d:aa:53:5f:3c:9e:12:61:84:7f:7c:c6:
6c:de:75:25:b7:09:7c:0e:b5:17:e5:83:6b:1b:ee:54:32:eb:
10:e9:96:d6:85:05:83:cf:80:6a:94:ec:2f:2c:65:29:52:6b:
50:52:c2:a7:85:07:b4:94:63:0c:6a:47:ea:09:fd:f5:42:48:
ab:10:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:26 2024 by rpki-client on console-ams.rpki-client.org