Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XicKS8vjHRCxAxJTzUsvkpuBRSM.roa
File: XicKS8vjHRCxAxJTzUsvkpuBRSM.roa (raw, json)
Hash identifier: DXv+u74Cu5wu+CYRh9odwPXfTDxcT3cz+5EQLRz0Vvo=
Subject key identifier: 5E:27:0A:4B:CB:E3:1D:10:B1:03:12:53:CD:4B:2F:92:9B:81:45:23
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0186B5FED198DDED975F50316A2BBA2DF5C7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XicKS8vjHRCxAxJTzUsvkpuBRSM.roa
Signing time: Mon 06 Mar 2023 08:17:01 +0000
ROA not before: Mon 06 Mar 2023 08:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 85.209.132.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:fe:d1:98:dd:ed:97:5f:50:31:6a:2b:ba:2d:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 6 08:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e270a4bcbe31d10b1031253cd4b2f929b814523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:35:e9:b2:f9:8f:1a:6a:85:1b:5c:1f:98:
a7:7d:cc:63:a1:b8:78:1b:02:9e:0c:8e:df:0e:a6:
79:85:20:a0:ae:86:58:6e:e0:24:e4:8b:d1:ee:40:
37:7b:96:9c:54:10:c2:06:1b:1b:ea:22:c8:ab:70:
73:9f:90:bf:fe:5f:fd:37:19:d8:bd:36:55:03:f0:
8c:c0:54:61:2e:9f:9b:ae:b4:fe:c0:88:75:1a:6a:
fa:82:30:b8:a9:5a:b9:40:ab:99:db:d7:a2:a9:1e:
e6:d7:af:45:76:96:92:3a:b8:9a:4a:d8:67:a6:78:
02:52:fe:f6:41:76:5b:d7:e8:65:88:cb:ce:f6:55:
c3:a6:1f:ce:5d:b2:c7:3c:30:c2:67:99:74:d7:01:
71:3d:eb:fc:84:eb:cc:ac:2a:eb:59:d3:df:11:b3:
98:3a:49:f2:8b:64:49:33:77:90:5b:ad:e5:bf:02:
0a:ad:da:67:08:d0:b9:d6:3c:4b:53:8a:62:24:8b:
26:f8:ba:65:00:76:ca:d0:cd:66:53:aa:1f:8c:28:
a8:7b:b4:d0:9e:bb:86:18:53:33:c5:38:c3:f4:cc:
49:69:30:d9:4f:ac:a6:4b:6e:95:40:fd:d1:c5:d4:
3a:73:26:0c:77:f4:c5:f4:c6:27:76:6e:39:3b:79:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:0A:4B:CB:E3:1D:10:B1:03:12:53:CD:4B:2F:92:9B:81:45:23
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XicKS8vjHRCxAxJTzUsvkpuBRSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
176.125.255.0/24
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:13:60:4b:5f:b4:64:e7:48:41:38:b7:6a:aa:98:dc:0a:4d:
4a:81:62:fd:00:2d:c6:4e:7e:c8:55:45:a2:cc:f3:1a:65:0c:
2c:c4:60:21:ec:7b:cc:43:6c:1a:85:21:10:47:a0:e2:46:16:
9a:2c:4e:a2:74:e7:7f:d9:03:23:b6:7e:78:9b:ff:85:77:2b:
f6:7b:8f:8d:65:73:54:c7:64:1e:b8:ed:79:6b:b2:30:d2:0a:
24:02:51:0c:ed:62:62:b7:c3:50:f4:62:43:dc:de:1b:e2:9f:
bb:6f:e1:0c:6e:1e:bf:b6:9b:55:65:a4:06:ae:92:86:e8:04:
37:05:c5:7f:cd:93:e4:31:89:ba:79:5f:5d:05:4e:9f:02:81:
55:ab:7f:aa:c8:9b:4b:7a:aa:10:96:5f:00:21:30:ee:c1:5e:
06:ba:80:93:e7:64:6d:87:c8:9f:68:af:ea:c0:39:b2:0f:56:
d4:a6:ee:7e:be:51:d5:ac:03:fe:a0:eb:e5:39:ba:14:7f:6b:
3c:89:87:be:d2:75:05:1b:fd:5e:b6:2f:f6:eb:d5:fd:5e:69:
1d:d7:56:af:77:95:02:64:d1:d5:90:6a:c0:b0:df:bb:ce:06:
fe:54:7a:fc:20:ca:36:f9:c7:d6:0e:a8:e4:6d:4b:ce:6f:5d:
22:d5:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org