Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XxOn4b_AKJlyXvPA7GRG8FkLi3U.roa
File: XxOn4b_AKJlyXvPA7GRG8FkLi3U.roa (raw, json)
Hash identifier: 2aroLf4FO9DLZ8NdhYGtvOD40TVusQMo7m7wT46E02w=
Subject key identifier: 5F:13:A7:E1:BF:C0:28:99:72:5E:F3:C0:EC:64:46:F0:59:0B:8B:75
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187574096B1664BD2B6557A8B74F8D28E68
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XxOn4b_AKJlyXvPA7GRG8FkLi3U.roa
Signing time: Thu 06 Apr 2023 15:47:43 +0000
ROA not before: Thu 06 Apr 2023 15:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:40:96:b1:66:4b:d2:b6:55:7a:8b:74:f8:d2:8e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 15:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f13a7e1bfc02899725ef3c0ec6446f0590b8b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:d8:5a:03:0b:e3:70:a9:a2:f8:89:4a:de:
f9:6c:19:57:b0:4a:90:64:29:43:c4:a6:90:1a:c5:
f5:f8:ca:f5:14:2d:af:95:30:78:28:22:bf:0b:b4:
e9:a0:d7:40:cf:42:7d:be:88:61:f9:d8:c3:ba:d4:
0c:10:c0:64:91:14:b5:eb:16:91:25:6c:f1:8b:a5:
36:57:a9:6b:ef:82:e1:a5:6f:36:04:a7:89:cb:94:
a8:f9:2d:2c:a5:99:7f:a0:6d:80:91:cd:95:47:d4:
77:76:ed:47:23:74:09:7c:6a:8a:a3:61:00:55:5b:
f0:44:c9:18:45:3b:ea:2b:e7:9c:a5:1e:d2:51:16:
24:1a:51:37:7d:c3:5c:9e:75:53:bf:e9:9e:cf:e8:
97:0c:49:4c:36:3b:e3:41:75:ed:37:2b:ff:9d:18:
53:32:57:22:31:b0:cc:cd:c7:48:e2:8a:47:0c:b5:
64:b5:35:6a:6b:5f:9e:ac:2f:f0:10:dd:53:3a:42:
80:0f:ce:44:20:70:64:fa:62:53:7e:32:66:c6:be:
89:19:cc:72:54:fb:ca:a2:ca:04:5f:76:2d:df:16:
22:f2:1e:28:96:78:2d:5a:fa:50:e5:16:6f:aa:6c:
b5:c5:53:5d:4b:13:89:8f:1a:5e:44:e9:32:bb:f8:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:A7:E1:BF:C0:28:99:72:5E:F3:C0:EC:64:46:F0:59:0B:8B:75
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XxOn4b_AKJlyXvPA7GRG8FkLi3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.151.0/24
195.133.18.0/24
212.192.242.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9a:f0:20:e0:a0:91:05:c0:fb:d8:d7:57:8e:a0:3d:f1:f1:
59:a8:65:18:0a:50:cb:90:9b:dd:55:2c:c9:84:6d:64:cd:df:
d2:72:0d:06:2c:17:c2:ff:dc:62:cf:05:a8:2a:f6:76:d9:4a:
a5:b3:22:79:38:58:30:64:a4:fc:3e:9f:9f:35:2d:ec:51:66:
ee:f9:4f:9e:6f:3b:56:0b:e8:46:ab:39:8e:3c:db:d0:91:d5:
57:1f:47:23:e3:c2:2b:0e:5a:3c:b9:c2:96:0f:9a:59:1d:66:
ea:70:94:f4:2b:a4:c0:a4:c6:d3:62:12:64:17:2c:e7:4c:71:
68:d1:01:ec:5f:4e:3f:dc:0d:3c:9b:54:d3:3b:27:aa:ed:c9:
d8:07:57:fe:1e:a4:94:28:e9:4e:03:3b:04:f9:b0:07:db:f9:
58:b7:42:89:90:c6:61:20:e4:9a:8d:8a:3f:6c:ef:07:19:33:
2e:fa:f5:80:e9:7b:5c:ba:29:5a:15:42:25:3e:f7:a1:bc:f1:
cc:d5:04:5f:92:a6:3a:2f:d5:72:c8:1a:ec:eb:2e:0a:49:8c:
17:d4:2b:eb:f9:b4:94:50:d6:8b:3d:5e:86:fb:57:b2:1c:7a:
52:31:93:bf:49:3d:38:4f:57:77:96:5f:4f:a2:05:b4:e3:28:
b8:15:90:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:06 2023 by rpki-client on console-fra.rpki-client.org