Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/3tzhCrrr45QRZ4ZZ-jUvuWYWBbM.roa
File: 3tzhCrrr45QRZ4ZZ-jUvuWYWBbM.roa (raw, json)
Hash identifier: RPzoTYEW0eoyuEAub0PkybqzDQkyVrmikUAHrLaWR2o=
Subject key identifier: DE:DC:E1:0A:BA:EB:E3:94:11:67:86:59:FA:35:2F:B9:66:16:05:B3
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 01856D6F6416F972D7F1EA719941515BC29D
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/3tzhCrrr45QRZ4ZZ-jUvuWYWBbM.roa
Signing time: Sun 01 Jan 2023 13:04:54 +0000
ROA not before: Sun 01 Jan 2023 13:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212578
IP address blocks: 185.84.116.0/24 maxlen: 24
185.84.117.0/24 maxlen: 24
185.84.118.0/24 maxlen: 24
80.255.112.0/24 maxlen: 24
185.84.119.0/24 maxlen: 24
80.255.113.0/24 maxlen: 24
80.255.114.0/24 maxlen: 24
80.255.115.0/24 maxlen: 24
80.255.124.0/24 maxlen: 24
80.255.125.0/24 maxlen: 24
80.255.126.0/24 maxlen: 24
80.255.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:64:16:f9:72:d7:f1:ea:71:99:41:51:5b:c2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Jan 1 13:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dedce10abaebe39411678659fa352fb9661605b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:34:ad:b3:9a:a8:89:61:39:57:e4:5b:af:
ae:30:6d:24:ee:be:57:b0:25:2c:63:04:41:05:77:
1c:d1:a5:0d:d1:a0:4c:92:f4:19:c8:40:61:3a:ab:
24:dd:15:b6:b4:60:30:00:28:5b:0c:c3:3a:71:89:
92:e6:e1:02:37:45:fe:21:85:ed:5f:0a:97:3c:d3:
1f:e8:b9:03:ed:22:92:64:5a:bd:67:54:a5:12:9b:
13:c2:14:dd:c3:d0:a2:13:83:34:66:8d:a1:b6:1f:
cb:b8:cd:f7:96:0f:be:f7:41:db:08:fb:33:04:b4:
a8:39:ec:10:31:d4:f8:c9:56:81:47:9e:e4:28:4d:
1f:3a:6e:ec:35:60:1e:38:4f:39:2b:80:66:43:f8:
30:cb:5c:ae:12:4a:29:70:5f:69:46:2a:49:fc:98:
e8:3e:39:77:4d:f4:e4:c7:69:72:54:ce:19:60:1f:
58:1e:c2:d1:3e:b5:95:fb:e9:50:d8:7b:44:31:cc:
9e:e7:fe:bd:6b:45:11:ed:fb:7c:5c:01:49:13:e6:
e5:8c:77:14:c0:15:8a:22:98:b8:c3:6f:c8:d9:13:
b9:ed:1e:76:f6:dc:5d:94:7a:02:b0:af:c6:6c:81:
be:6d:5f:b7:a3:31:2b:96:42:e0:9d:03:66:44:85:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DC:E1:0A:BA:EB:E3:94:11:67:86:59:FA:35:2F:B9:66:16:05:B3
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/3tzhCrrr45QRZ4ZZ-jUvuWYWBbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.112.0/22
80.255.124.0/22
185.84.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:68:12:b0:3f:15:20:bb:b2:1a:89:33:30:e1:26:7f:90:38:
5b:22:8e:48:5e:6d:e6:9d:af:6b:ce:48:15:ec:ce:ee:fc:d8:
1f:02:ff:ec:55:33:53:62:a1:79:c2:2f:7b:ea:c7:d7:6d:8f:
d6:1e:74:f3:10:9a:cc:16:4e:5f:0b:c9:4f:7b:20:83:73:b6:
0e:cc:41:02:d9:58:51:d3:2d:27:95:77:6b:fd:80:90:f9:6b:
02:c7:b5:ed:ba:a2:ca:cb:a9:8a:60:33:c8:87:5e:a4:2a:ac:
a9:2f:13:a7:0c:89:46:99:ba:03:c7:1c:7d:d2:eb:7f:87:5b:
c8:b8:d6:84:77:68:2c:cc:5c:16:4d:27:6c:fd:68:a3:11:b3:
3c:31:34:38:f0:dd:00:1d:cd:a2:fe:cb:88:52:c4:46:fd:95:
cf:c8:1e:ae:e1:45:8f:87:82:72:59:40:39:80:10:35:8d:14:
00:d3:38:ae:0d:35:2e:cb:88:3b:fa:f5:6d:24:f3:82:a7:5c:
08:fc:98:d0:c9:22:ac:23:09:4a:55:fb:96:5d:e2:f2:4b:2b:
d8:9f:a8:c5:e5:83:bc:5a:9c:07:fd:8e:cb:99:18:f1:92:3d:
33:09:5d:37:26:e0:a5:38:16:56:32:ca:47:4f:0d:eb:50:27:
dd:4c:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:08 2023 by rpki-client on console.sobornost.net