Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/xqBwMNgITBOtoODuRa0pWXX_EMk.roa
File: xqBwMNgITBOtoODuRa0pWXX_EMk.roa (raw, json)
Hash identifier: AXcBAWeX9OZuOXFVa8DMqXxWW98mj/s1y3C+/M11e+I=
Subject key identifier: C6:A0:70:30:D8:08:4C:13:AD:A0:E0:EE:45:AD:29:59:75:FF:10:C9
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B262BE932994CE58D808A5696B710
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/xqBwMNgITBOtoODuRa0pWXX_EMk.roa
Signing time: Sun 01 Jan 2023 18:14:50 +0000
ROA not before: Sun 01 Jan 2023 18:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 185.236.8.0/24 maxlen: 24
185.236.11.0/24 maxlen: 24
85.117.243.0/24 maxlen: 24
192.144.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:26:2b:e9:32:99:4c:e5:8d:80:8a:56:96:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6a07030d8084c13ada0e0ee45ad295975ff10c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:51:d1:d4:fa:71:95:1c:34:a6:02:43:3f:
f5:c9:69:3f:75:2f:c1:6e:b2:8f:1b:04:bb:f8:ae:
6d:c2:95:95:dc:af:fe:7a:8c:50:f7:c2:98:bf:8e:
40:7f:71:69:e9:d3:8a:3d:dd:9b:90:2e:d5:4c:4c:
15:07:15:23:34:96:59:86:cd:e8:e5:f9:d7:f4:62:
19:6f:f0:f1:70:5e:88:da:ce:d6:9c:32:e3:18:08:
9b:eb:f2:70:45:f3:6d:c1:53:bb:49:c7:52:f3:b4:
5f:79:fe:ec:a7:24:59:0b:7b:70:ec:03:1f:da:fe:
f5:4b:a2:f4:29:79:3c:19:1f:c4:9d:cf:93:85:f3:
9d:91:17:05:07:1b:6e:f6:df:bf:e5:03:76:08:85:
33:85:13:bc:c8:93:17:e6:9e:a8:0d:54:8a:f8:2f:
4d:0c:11:d1:4d:c5:39:36:d4:14:6f:b4:2d:99:b6:
d1:c7:4c:31:69:8b:1f:95:f4:57:21:c6:4b:e5:ff:
b1:ff:41:bb:39:21:62:1c:c1:d5:3a:de:6b:cf:14:
f7:3b:3f:5d:ac:00:11:ed:38:e9:eb:bc:a6:0b:c6:
e3:52:70:cb:69:ce:ae:4e:15:f8:37:fb:e5:e8:33:
14:c3:d8:6b:60:a3:9a:c7:37:66:80:ca:39:01:2a:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:70:30:D8:08:4C:13:AD:A0:E0:EE:45:AD:29:59:75:FF:10:C9
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/xqBwMNgITBOtoODuRa0pWXX_EMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.243.0/24
185.236.8.0/24
185.236.11.0/24
192.144.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:91:16:a5:5f:c9:b8:e0:58:34:e8:a4:2a:f4:66:05:50:cd:
d1:f3:51:9c:b3:d8:4a:e1:70:fa:42:ea:b3:38:49:3e:7e:e2:
6c:ef:5f:c4:8d:86:e0:bc:b2:21:dc:53:9c:1d:9f:64:b8:b3:
99:77:6f:b7:b0:d4:98:77:b0:37:74:ba:cc:8f:f7:fa:fd:64:
31:25:03:1d:5e:da:f7:9d:cd:de:6e:83:e0:a0:8c:10:51:20:
cb:79:93:55:cc:48:fe:70:52:94:26:d9:8c:74:e9:df:d0:98:
b5:a6:a9:33:87:33:e2:fc:68:93:07:16:b7:0d:8b:ef:af:27:
94:6d:b0:ce:5c:71:f5:85:d7:fa:87:6d:c1:1c:3e:ce:bf:3c:
bc:9a:a9:82:f9:24:82:d6:d5:73:fb:28:6c:bd:5b:74:4f:72:
98:46:6e:6f:84:58:b0:04:d4:b9:ec:46:a7:eb:de:21:03:18:
46:b7:db:27:27:8f:a0:c7:08:dc:27:d9:6c:7f:15:74:b2:e2:
ad:56:4a:c8:da:d7:4b:8f:b1:d2:16:8f:a6:b9:0c:ee:ed:77:
6d:b4:d8:e4:a5:57:1b:98:93:8a:ea:20:96:4e:ee:a4:6b:9f:
58:b4:24:ef:b4:59:65:66:2c:07:9b:0f:a4:96:2d:bf:58:b5:
0b:d1:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-fra.rpki-client.org