Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/h-SudYOWy5aLXCQG2pkbCFgemFE.roa
File: h-SudYOWy5aLXCQG2pkbCFgemFE.roa (raw, json)
Hash identifier: 7B15X/lhEhlD5pPEBdXaKEEl6pu9sjcFUZm4Z7OQ7+Q=
Subject key identifier: 87:E4:AE:75:83:96:CB:96:8B:5C:24:06:DA:99:1B:08:58:1E:98:51
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 0190DA84DFD97C62035C231D967473D923A5
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/h-SudYOWy5aLXCQG2pkbCFgemFE.roa
Signing time: Mon 22 Jul 2024 12:57:39 +0000
ROA not before: Mon 22 Jul 2024 12:57:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39347
IP address blocks: 89.33.88.0/21 maxlen: 21
89.33.89.0/24 maxlen: 24
89.33.90.0/23 maxlen: 23
89.33.94.0/23 maxlen: 23
93.119.176.0/23 maxlen: 23
93.119.176.0/24 maxlen: 24
93.119.177.0/24 maxlen: 24
93.119.182.0/23 maxlen: 23
185.122.220.0/24 maxlen: 24
185.122.221.0/24 maxlen: 24
185.122.222.0/24 maxlen: 24
2a06:a880::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Sep 2024 10:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:84:df:d9:7c:62:03:5c:23:1d:96:74:73:d9:23:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Jul 22 12:57:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87e4ae758396cb968b5c2406da991b08581e9851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:73:79:82:50:13:e1:d1:55:56:6f:f0:60:
32:ca:03:8c:82:09:de:ac:fe:f9:9f:2c:0a:e2:f4:
81:12:90:05:c9:d2:72:e6:c0:67:08:b9:2b:04:7b:
9f:71:d5:34:8d:20:f8:05:20:72:44:63:74:1f:ca:
c4:64:15:cb:dd:5e:17:40:2b:55:88:f2:be:72:96:
dd:ff:0d:91:20:93:82:d1:70:90:de:ee:83:f3:f1:
7b:81:47:a4:d1:a9:95:9b:6f:e6:cc:7f:49:69:81:
97:81:aa:8a:96:cf:6b:52:e1:02:6c:a4:1e:48:d8:
1e:85:53:98:ae:27:17:a0:e2:ea:ea:2e:4e:34:b9:
ac:fb:a6:14:f2:f3:45:c5:0a:f7:5b:68:19:3d:73:
45:42:ac:0e:ca:f3:7d:a6:0e:95:cd:65:4c:66:56:
f9:8d:60:8e:99:c9:24:1c:5d:51:05:fb:d5:00:1c:
1b:18:d5:6f:81:ce:30:8e:e0:f7:f2:0b:c1:8e:3f:
6d:8c:bd:b0:dc:73:42:b8:bd:05:ee:5e:d7:3c:01:
d5:06:ea:4e:29:8e:bd:60:27:14:1c:08:53:74:9d:
94:47:f7:18:24:e4:09:ad:d1:9c:15:b6:de:38:04:
68:95:f9:9b:84:c1:6c:ea:ee:37:bc:c7:86:20:71:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:AE:75:83:96:CB:96:8B:5C:24:06:DA:99:1B:08:58:1E:98:51
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/h-SudYOWy5aLXCQG2pkbCFgemFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.88.0/21
93.119.176.0/23
93.119.182.0/23
185.122.220.0-185.122.222.255
IPv6:
2a06:a880::/48
Signature Algorithm: sha256WithRSAEncryption
1b:4e:b6:3b:70:b5:3e:1d:c2:7b:65:9d:1c:fb:94:6f:d8:fd:
68:99:b5:83:26:0d:64:49:05:0f:50:5a:f9:f0:c7:b1:42:c8:
c0:b3:de:60:45:36:6d:46:96:d4:50:c1:b3:05:03:c6:c3:7e:
e1:1c:15:d7:7f:72:e3:3a:2f:61:75:54:11:44:47:61:94:23:
c5:4b:5c:c2:7f:03:39:a0:98:14:a6:db:32:00:a9:63:21:7c:
19:6b:27:a2:3b:da:1e:1b:f5:03:15:b3:98:46:d5:79:95:e6:
4b:37:e2:66:31:62:eb:6d:51:67:2d:a1:c7:bc:1b:59:9a:a7:
60:49:38:b3:79:42:e8:12:0d:b5:13:70:8b:99:07:8b:28:17:
79:8c:26:f9:ed:fe:90:a0:3d:76:10:6c:58:1b:01:7e:56:3c:
29:2d:8a:30:03:b3:17:e5:cc:f9:59:15:16:0d:9d:4b:19:12:
b1:e4:93:b9:06:ae:0b:71:74:3b:22:05:a5:be:f7:bc:bf:c0:
97:7c:16:60:b0:66:51:48:dd:da:ed:67:96:2b:e4:49:ad:f0:
3c:9d:b8:22:68:c1:92:7b:f9:a8:eb:08:c2:45:1c:26:c0:af:
0f:d7:6b:07:2a:38:dc:1f:42:bf:5d:1f:08:0c:f5:be:8d:de:
22:f6:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 14:32:39 2024 by rpki-client on console-fra.rpki-client.org