Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/97vY39xCZQx9_iSgKuPbTPEinLo.roa
File: 97vY39xCZQx9_iSgKuPbTPEinLo.roa (raw, json)
Hash identifier: EmbnikSBObXuf1zfuuu1IZ1xQbYySzmQKECM37qZkr8=
Subject key identifier: F7:BB:D8:DF:DC:42:65:0C:7D:FE:24:A0:2A:E3:DB:4C:F1:22:9C:BA
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 018CC50053F6395EF22E0490BA7124DACF2C
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/97vY39xCZQx9_iSgKuPbTPEinLo.roa
Signing time: Mon 01 Jan 2024 12:29:42 +0000
ROA not before: Mon 01 Jan 2024 12:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39347
IP address blocks: 185.122.221.0/24 maxlen: 24
185.122.222.0/24 maxlen: 24
89.33.88.0/21 maxlen: 21
93.119.176.0/23 maxlen: 23
93.119.182.0/23 maxlen: 23
2a06:a880::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 May 2024 14:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:53:f6:39:5e:f2:2e:04:90:ba:71:24:da:cf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Jan 1 12:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7bbd8dfdc42650c7dfe24a02ae3db4cf1229cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:16:68:34:e8:0e:fb:91:7c:0b:e2:4e:1f:
ab:bb:54:30:35:38:36:96:5b:ed:46:a7:9c:b4:57:
d3:a3:02:b3:8b:c8:c7:a1:39:80:41:86:a8:0b:fc:
df:fe:a1:37:e7:fa:28:36:dd:2f:af:6a:40:a0:ee:
52:0b:10:96:65:f6:cb:26:f6:b2:75:d3:b5:6a:e3:
2d:69:81:46:0d:28:f5:9f:63:cb:d2:69:ad:40:0a:
fd:12:6c:c4:7a:b1:e2:cd:25:d7:dd:34:50:f3:74:
4f:43:a5:40:81:09:53:0a:f2:6e:10:65:9b:54:35:
5d:35:5b:80:92:6a:a3:88:60:5d:a0:41:05:0a:96:
e6:da:53:87:96:06:f0:9a:25:dc:95:3a:0b:e9:1a:
53:69:8a:24:9a:b1:0e:6f:84:c3:0d:f7:af:fb:39:
16:02:31:17:c8:5a:b2:e2:f0:4a:0c:bc:bb:1b:f6:
2a:b6:4a:09:66:6f:68:36:5c:4d:6e:d2:8c:e9:26:
89:e9:16:69:af:db:c3:cc:29:08:66:6b:d8:c8:a3:
3e:a1:d7:cb:b7:ac:ff:ca:fa:4d:98:09:bd:79:da:
45:dd:a3:f9:ad:a4:97:ab:51:21:3e:32:b4:f8:d4:
2b:58:8a:75:09:23:84:6e:97:e6:30:6c:47:5c:0a:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BB:D8:DF:DC:42:65:0C:7D:FE:24:A0:2A:E3:DB:4C:F1:22:9C:BA
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/97vY39xCZQx9_iSgKuPbTPEinLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.88.0/21
93.119.176.0/23
93.119.182.0/23
185.122.221.0-185.122.222.255
IPv6:
2a06:a880::/48
Signature Algorithm: sha256WithRSAEncryption
80:ac:4b:eb:a2:92:1c:7d:a8:a0:c8:b6:11:d4:06:37:d4:fe:
bd:a5:15:f9:2d:a7:e8:aa:92:89:e8:d5:e0:90:9f:1c:fd:84:
d9:a1:fe:f3:68:63:af:55:d4:e1:6e:0a:a4:eb:9f:b6:5a:e6:
32:bf:f5:50:63:b6:53:ac:de:bc:1b:c0:a6:35:60:23:a3:81:
86:5c:be:13:e5:33:2e:df:6f:e9:d8:96:57:b2:9b:cb:63:6c:
8c:3c:7d:1d:7f:93:66:af:fe:2c:59:3a:b8:0b:15:f3:af:70:
dc:e8:b1:af:28:d1:a9:33:cf:66:de:c7:2e:31:ae:a9:66:6f:
77:d6:37:cf:1e:29:a9:e1:7a:8d:49:53:22:aa:f2:d8:20:c7:
1a:96:74:ce:8d:5a:13:b3:e2:cc:a3:7d:33:38:cb:ae:a7:42:
c5:51:bb:a8:f4:59:a9:9d:58:59:09:66:0a:e3:b8:c1:4c:5f:
da:e9:14:1a:f6:a9:6e:dd:7f:ad:f3:70:49:dd:ff:3e:c5:77:
cf:21:5b:1c:81:b8:5b:56:56:dd:d3:cd:16:93:6b:f9:b5:cb:
45:d5:1b:83:be:2d:d1:74:72:a1:37:2d:a0:5c:92:e3:ae:33:
bb:f3:8b:7e:2b:08:a1:55:7d:a4:c6:d1:f8:4f:db:59:ea:52:
15:da:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:49 2024 by rpki-client on console-ams.rpki-client.org