Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/XqzalAbplFxurO34mwyYb9-UcKs.roa
File: XqzalAbplFxurO34mwyYb9-UcKs.roa (raw, json)
Hash identifier: RTADiVSwIXqXqRy45ueIIKTpwW+uQzuTZXA6GZ6JZYM=
Subject key identifier: 5E:AC:DA:94:06:E9:94:5C:6E:AC:ED:F8:9B:0C:98:6F:DF:94:70:AB
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 01856C1C9E06E3FF5AD094CA4FB626E6AF56
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/XqzalAbplFxurO34mwyYb9-UcKs.roa
Signing time: Sun 01 Jan 2023 06:54:52 +0000
ROA not before: Sun 01 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60415
IP address blocks: 185.31.92.0/24 maxlen: 24
185.31.95.0/24 maxlen: 24
185.31.92.0/22 maxlen: 22
185.31.94.0/24 maxlen: 24
185.31.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9e:06:e3:ff:5a:d0:94:ca:4f:b6:26:e6:af:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Jan 1 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eacda9406e9945c6eacedf89b0c986fdf9470ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:99:86:ba:6a:b0:07:05:be:2e:26:d3:11:
33:38:b6:94:6d:dc:9d:15:27:1b:4c:92:7b:92:ea:
ec:bf:d1:e8:fe:1a:d1:68:43:0e:34:25:4a:c0:d5:
18:7a:5d:d8:e1:16:ae:0b:2f:35:93:68:9a:94:36:
9a:09:f6:81:e5:1e:53:7d:e6:bf:94:aa:04:9e:46:
fa:e7:04:1a:ba:b4:00:a3:e0:d6:6a:96:ec:d7:65:
dc:8d:9d:f5:ff:d1:81:cc:04:94:af:36:2e:38:16:
bc:33:56:d2:15:e9:08:aa:e5:a2:65:ae:1b:b3:b8:
d6:7a:12:bc:7c:63:57:4a:a2:90:5f:42:b2:5a:fd:
a9:ee:91:a8:e0:52:de:8a:23:dc:94:26:54:fe:3d:
28:3a:f5:33:a5:f4:d0:3f:d2:40:7e:5f:9b:5d:86:
21:a9:24:96:6d:50:43:56:2f:d4:05:ed:35:eb:d3:
90:df:14:d9:f5:e7:63:f3:a9:a7:ae:5c:0f:77:f0:
08:48:e7:b9:15:50:79:bb:8a:50:01:a1:03:b0:d3:
67:9c:29:85:1a:88:e2:17:b5:af:b5:ca:b9:ab:5d:
39:7b:35:9d:a2:5f:7c:bd:c2:6b:e0:e1:57:f2:73:
e4:58:83:4c:a7:a5:6e:43:d3:6f:8d:5c:b6:54:18:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:DA:94:06:E9:94:5C:6E:AC:ED:F8:9B:0C:98:6F:DF:94:70:AB
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/XqzalAbplFxurO34mwyYb9-UcKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.92.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:51:08:70:e1:79:ec:c3:d2:a3:7b:05:2c:f0:17:5a:9c:6f:
22:e3:0e:f4:8c:4e:2c:7d:4a:72:b0:c9:06:07:22:03:08:91:
52:dc:a3:fa:76:d1:e6:8a:4d:9e:6a:ed:54:22:e1:45:9f:de:
2b:9e:c9:6c:71:1b:e5:ae:83:db:75:b8:a1:f9:a9:3f:98:dc:
1b:fa:ca:0a:59:76:56:b0:aa:43:74:fb:d5:cc:f5:42:e0:c1:
97:d3:9c:ba:60:0f:f7:af:b0:d3:d3:79:57:d7:ab:e7:76:6e:
9c:d7:1b:24:cf:9d:19:d3:f7:d7:70:07:e7:a2:6d:a7:96:d5:
7f:0c:44:72:40:75:fb:4f:5c:2c:bb:f7:c1:20:89:fb:0e:2d:
60:d2:d2:71:fc:f8:e1:81:63:a7:8b:ea:a3:63:06:6a:30:ce:
59:66:56:41:8f:58:fb:89:4f:e3:47:74:c9:ad:df:70:c7:12:
f4:48:2d:ae:ee:ee:7c:5d:8e:90:34:fa:55:f5:0b:ee:0f:dc:
af:49:d8:0d:53:32:96:61:e4:82:67:68:f1:cc:6f:75:0d:68:
36:c5:78:10:98:0f:e5:f0:9d:9d:55:cc:7c:67:e5:46:e3:a7:
ac:d5:bd:a2:14:63:8e:d3:56:a5:6e:7a:37:e7:c7:30:83:99:
46:3c:f9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:06 2024 by rpki-client on console-fra.rpki-client.org