Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/xUWrTyB_VZXQ2KK82cMHhqIBC9M.roa
File: xUWrTyB_VZXQ2KK82cMHhqIBC9M.roa (raw, json)
Hash identifier: uf8CqvR80efx/UqJAXAq8+/od2ML0L/YJBDWUwxpjNI=
Subject key identifier: C5:45:AB:4F:20:7F:55:95:D0:D8:A2:BC:D9:C3:07:86:A2:01:0B:D3
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 0188909B894164B043BC1A275A286C726672
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/xUWrTyB_VZXQ2KK82cMHhqIBC9M.roa
Signing time: Tue 06 Jun 2023 12:08:12 +0000
ROA not before: Tue 06 Jun 2023 12:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60823
IP address blocks: 185.25.124.0/22 maxlen: 22
92.243.70.0/24 maxlen: 24
92.243.92.0/24 maxlen: 24
195.191.254.0/23 maxlen: 23
2a04:3180::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:9b:89:41:64:b0:43:bc:1a:27:5a:28:6c:72:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Jun 6 12:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c545ab4f207f5595d0d8a2bcd9c30786a2010bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:d1:a5:6d:52:44:9c:2c:89:57:17:b7:7b:
5d:7e:ce:1b:b1:e8:6a:e9:9c:d9:81:28:46:83:94:
25:36:54:2b:c0:bb:86:97:16:e5:1a:0e:15:e8:e7:
c4:11:5d:f2:d5:d7:09:a1:d3:f9:c3:22:8b:cf:70:
5d:6c:e6:80:f6:d5:40:32:be:b0:bf:b7:1f:cd:8a:
85:5a:f7:25:31:26:1e:79:16:7f:21:b6:01:d7:dd:
2f:5b:20:2e:36:21:7d:e4:56:92:68:c0:1c:49:d3:
df:b3:72:c1:e2:2d:18:b9:b3:21:4d:68:76:7d:49:
b1:fb:4e:f8:a6:45:aa:18:e6:0d:c0:0f:f8:bf:e9:
03:2f:28:6c:05:8e:4a:6b:64:be:54:22:c2:9c:6c:
db:94:c7:92:2c:e9:04:57:ed:10:99:b8:65:0e:49:
da:e2:16:57:1a:f1:2b:26:aa:1e:8c:5e:43:70:c1:
11:ba:cf:fa:28:ca:23:6e:9a:2c:28:85:73:c2:53:
95:23:cb:21:bc:d5:e1:c7:1d:2f:3d:b7:65:c9:ec:
8c:6e:1c:ea:59:17:59:c6:c4:6d:b1:d3:89:a9:d5:
09:60:db:9e:47:74:fb:8c:38:80:67:02:67:79:fd:
85:a8:bb:92:45:70:f1:3c:fc:92:6f:00:98:96:1f:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:AB:4F:20:7F:55:95:D0:D8:A2:BC:D9:C3:07:86:A2:01:0B:D3
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/xUWrTyB_VZXQ2KK82cMHhqIBC9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.70.0/24
92.243.92.0/24
185.25.124.0/22
195.191.254.0/23
IPv6:
2a04:3180::/29
Signature Algorithm: sha256WithRSAEncryption
98:1b:05:31:43:0c:b5:c0:df:e2:5a:59:a9:75:be:0c:dc:f3:
1f:19:f6:d7:fd:a8:46:82:62:18:89:90:5c:5c:6b:80:8e:1d:
30:79:10:4a:29:16:54:8b:3a:96:64:c8:51:d1:13:ba:a2:a1:
69:14:36:1b:25:57:50:31:9e:90:8c:c8:f8:60:dc:1f:8c:fc:
32:31:69:a8:c3:cc:10:83:e0:09:85:7d:ed:0a:f2:64:11:df:
cb:11:f1:af:41:3c:c7:08:05:31:b7:fe:39:e6:a3:3c:f3:eb:
1d:c2:a6:50:fb:a7:bb:53:9f:d0:be:c1:ed:4b:2f:a9:62:5c:
c2:1e:5b:94:d0:0f:9b:8c:e7:d0:e6:1b:45:3c:c3:3d:a4:b3:
bd:a0:32:56:6d:2c:fa:53:91:df:ab:e7:7b:78:cd:d6:9e:23:
45:a4:9a:22:58:35:15:00:95:5f:78:c7:be:7a:8f:69:6b:7d:
0e:0f:aa:7f:e1:62:05:c1:ec:1b:74:36:3a:56:35:99:07:38:
f8:28:3d:73:d5:c0:f3:3f:d4:e1:cc:27:58:92:d8:cd:65:8c:
66:d1:d8:2c:19:90:d2:64:36:3a:08:7b:2d:f4:42:80:01:db:
ca:8c:1c:e4:4e:a1:8a:83:65:8f:bf:8c:db:bd:68:a0:66:2b:
9c:2a:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:12 2024 by rpki-client on console-ams.rpki-client.org