Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xjO85WWByaFDmALsqCCl4EhpH4Y.roa
File: xjO85WWByaFDmALsqCCl4EhpH4Y.roa (raw, json)
Hash identifier: 2MlM1M2yNxlvSYcazMb7axglNbxrnOTNviOkn5fPHpI=
Subject key identifier: C6:33:BC:E5:65:81:C9:A1:43:98:02:EC:A8:20:A5:E0:48:69:1F:86
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB83605D0CD3C60D4D9C158E6597EBB
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xjO85WWByaFDmALsqCCl4EhpH4Y.roa
Signing time: Sun 01 Jan 2023 09:44:49 +0000
ROA not before: Sun 01 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 193.251.220.0/22 maxlen: 24
193.251.240.0/20 maxlen: 24
90.84.48.0/20 maxlen: 24
81.52.128.0/21 maxlen: 24
90.84.128.0/20 maxlen: 24
81.52.136.0/22 maxlen: 24
81.52.140.0/23 maxlen: 24
90.84.151.0/24 maxlen: 24
193.251.160.0/20 maxlen: 24
193.251.169.0/24 maxlen: 24
81.52.236.0/22 maxlen: 24
90.84.255.0/24 maxlen: 24
81.52.160.0/24 maxlen: 24
81.52.168.0/23 maxlen: 24
81.52.166.0/23 maxlen: 24
81.52.176.0/20 maxlen: 24
80.12.71.0/24 maxlen: 32
80.12.76.0/24 maxlen: 24
80.12.79.0/24 maxlen: 24
81.52.190.0/24 maxlen: 24
193.251.128.0/19 maxlen: 24
80.12.98.0/24 maxlen: 24
80.12.96.0/22 maxlen: 24
81.52.202.0/24 maxlen: 24
80.12.96.0/23 maxlen: 24
2a01:c000::/19 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 14:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:36:05:d0:cd:3c:60:d4:d9:c1:58:e6:59:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c633bce56581c9a1439802eca820a5e048691f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:e3:e7:39:83:74:78:05:a8:08:38:27:d5:
7d:e8:7b:ed:4b:d7:59:47:8c:e7:7c:c9:3a:a8:8c:
b6:ec:40:f8:cb:e2:5a:f9:5d:0f:c4:0c:85:6e:83:
b2:60:bf:f5:37:19:95:5d:7e:37:82:b5:b6:ec:1e:
ea:01:6c:83:55:64:80:a5:a9:b5:d7:e1:8e:f6:7b:
51:6a:95:9c:b8:19:e1:b8:77:4a:1e:ec:5d:a1:00:
85:fc:fb:22:62:e1:2f:a0:c2:16:39:59:28:c2:12:
3b:ca:d4:f0:12:cb:40:73:5a:a9:54:4e:d6:21:3d:
05:57:ab:6f:51:58:e2:d8:9e:b7:56:a5:a4:c0:1e:
23:08:22:87:58:45:5c:5f:01:35:8a:cd:b3:fa:a4:
ae:2b:70:62:7a:86:13:bc:ca:05:a8:37:71:f0:98:
85:90:9d:9e:a3:65:de:a2:ef:2a:c2:a9:75:f7:df:
b2:5b:89:03:94:64:74:69:cb:3a:a1:91:7e:8e:61:
4d:49:ff:3a:b4:5c:81:62:ce:bb:2c:ed:b6:e5:14:
14:d0:ca:38:a4:e6:c9:3d:e1:dc:63:cc:2c:87:c1:
1d:7a:09:bf:90:a3:2d:56:b6:7b:24:b4:11:90:1c:
e2:bb:ca:e1:28:a4:77:42:14:90:5c:91:d6:82:59:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:BC:E5:65:81:C9:A1:43:98:02:EC:A8:20:A5:E0:48:69:1F:86
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/xjO85WWByaFDmALsqCCl4EhpH4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.71.0/24
80.12.76.0/24
80.12.79.0/24
80.12.96.0/22
81.52.128.0-81.52.141.255
81.52.160.0/24
81.52.166.0-81.52.169.255
81.52.176.0/20
81.52.202.0/24
81.52.236.0/22
90.84.48.0/20
90.84.128.0/20
90.84.151.0/24
90.84.255.0/24
193.251.128.0-193.251.175.255
193.251.220.0/22
193.251.240.0/20
IPv6:
2a01:c000::/19
Signature Algorithm: sha256WithRSAEncryption
24:45:09:1b:1a:7a:b4:41:96:32:78:04:a4:9b:01:9c:fc:42:
df:e2:69:a4:da:59:bc:29:ef:22:e2:c3:66:fe:cd:7f:80:30:
0a:fd:7f:fb:81:d4:cc:69:59:e4:3a:e3:24:29:3c:79:54:5a:
ae:b6:11:7a:10:91:ee:96:23:5f:a5:b5:fd:cc:7b:dd:f6:13:
93:64:05:74:41:5b:7b:c7:5f:93:ff:f8:14:80:ce:7b:0c:6f:
54:15:3e:20:60:a6:9a:fc:41:6c:78:af:a8:e4:e2:a6:e6:ce:
34:b1:5c:23:90:00:26:dd:a4:c9:60:5d:dd:9f:4b:df:12:63:
9c:20:b7:19:45:af:01:66:8e:94:6b:24:f7:98:88:2d:e6:1f:
5f:22:a3:68:51:60:b3:01:ef:58:d9:7b:f8:0a:4c:7a:27:42:
17:40:cf:52:d9:4e:74:ae:29:58:ba:b3:d4:32:38:5b:ca:8e:
a2:4a:1e:43:3e:5f:1f:05:bc:04:33:46:33:2f:cb:fa:44:43:
85:c2:ce:c9:bd:55:88:e9:9e:3e:89:65:02:1b:c8:18:68:00:
69:d2:2f:b4:72:77:b8:10:16:28:07:a2:95:35:88:37:50:09:
78:b4:72:5f:08:0a:34:98:f8:4a:ea:a1:06:e4:e7:c9:eb:d0:
60:5c:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org