Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Vf3RDVZj_UrCbJSBo9GOeRb8l9A.roa
File: Vf3RDVZj_UrCbJSBo9GOeRb8l9A.roa (raw, json)
Hash identifier: yyYBqM1R3UwlQmVGydLRtLuFaz0hFzKXuaKENhcwNKA=
Subject key identifier: 55:FD:D1:0D:56:63:FD:4A:C2:6C:94:81:A3:D1:8E:79:16:FC:97:D0
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 018750F657CC39B479BD40F1D8B216091A60
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Vf3RDVZj_UrCbJSBo9GOeRb8l9A.roa
Signing time: Wed 05 Apr 2023 10:28:54 +0000
ROA not before: Wed 05 Apr 2023 10:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35542
IP address blocks: 193.222.141.0/24 maxlen: 24
80.92.128.0/20 maxlen: 20
185.128.0.0/22 maxlen: 22
185.128.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 07:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:f6:57:cc:39:b4:79:bd:40:f1:d8:b2:16:09:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Apr 5 10:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55fdd10d5663fd4ac26c9481a3d18e7916fc97d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:0d:12:eb:df:f7:73:94:b0:c1:9d:e0:c1:
61:4a:3b:8f:7c:c0:bf:71:9d:58:28:3c:48:2b:b1:
b3:8c:f1:26:22:39:b6:15:86:29:68:f8:1c:c1:a3:
fe:e6:35:e8:ad:c1:b2:45:b2:32:ec:64:31:75:aa:
dd:a1:66:76:18:a3:46:ef:5f:d8:bf:3f:23:e0:a7:
d2:53:ac:aa:3d:af:fd:19:1a:f9:97:45:66:63:01:
d0:50:00:39:6b:19:89:30:d0:22:7b:d7:9b:5d:c1:
26:10:84:26:80:26:14:25:2b:10:0f:8e:fb:98:90:
c6:ee:e9:0d:d1:11:f3:87:1a:50:8b:ec:95:c0:54:
55:d5:f3:3e:50:57:12:c0:94:ac:ed:28:d7:5e:68:
92:d5:a0:e3:55:0a:60:f3:3b:90:da:48:b0:bb:63:
dd:ae:c7:aa:8a:e9:03:16:5a:1b:98:2c:9a:b7:c5:
29:9c:72:f7:3e:3b:b5:5e:cd:9e:22:4c:a2:a6:a3:
d9:ee:7d:f9:f8:8b:eb:ca:37:13:c5:3a:6b:8f:e1:
e0:4e:a4:f1:aa:3b:fb:f6:85:43:c0:9f:8b:17:42:
6b:fa:59:d2:8c:f3:71:4c:de:aa:c8:9f:8b:a8:56:
2e:c6:3c:5b:b4:41:92:1f:5c:a8:f3:45:ec:35:9c:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:D1:0D:56:63:FD:4A:C2:6C:94:81:A3:D1:8E:79:16:FC:97:D0
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Vf3RDVZj_UrCbJSBo9GOeRb8l9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.128.0/20
185.128.0.0/22
193.222.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4a:79:17:c0:0a:6b:76:58:9f:13:93:61:7b:9c:5c:80:d1:
8a:e8:e8:4d:6b:bb:f2:3a:ad:71:34:35:17:d1:a0:d9:1e:57:
48:da:38:ec:1d:34:3c:b7:7b:e0:64:39:e0:da:f1:8e:a3:62:
29:bc:d5:63:10:dd:e4:6b:aa:bc:f1:0b:cc:02:eb:c9:a6:9a:
8a:7b:2c:87:2f:4e:ae:a7:78:1d:e7:05:c7:53:53:52:90:19:
dc:62:b2:f1:48:05:7c:1d:fb:98:38:05:e6:77:78:4a:08:77:
20:b0:68:98:9b:6c:7b:91:a8:87:d9:2c:42:ac:5b:13:9a:c5:
b5:f7:ef:a5:d2:5e:00:0a:0c:c4:d0:ca:0b:d7:07:16:5b:4b:
19:a6:2e:84:be:46:68:78:cf:1a:9b:34:3f:ca:dc:18:09:6e:
ad:81:3d:94:cc:58:6b:94:9e:00:5b:d7:bd:50:a4:e4:ae:00:
c4:5e:a0:cd:a6:27:99:59:10:fa:64:44:5c:d4:a8:0a:bf:a4:
62:7b:48:fd:ce:8a:01:c9:f5:b1:df:7e:58:38:39:73:d8:f1:
c6:88:4d:3d:40:24:8a:1c:c1:de:69:5b:8c:cc:5a:25:01:0c:
13:d5:69:a3:ef:99:16:ef:48:27:bc:34:00:97:04:dd:25:07:
fc:b5:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:09 2024 by rpki-client on console-ams.rpki-client.org