Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/XGVtvFzh3QE6qHtzIdBWoRBvLik.roa
File: XGVtvFzh3QE6qHtzIdBWoRBvLik.roa (raw, json)
Hash identifier: sJJQ4G1nmwjTMCYb2xhlN4VPmX93rxvfinK4niTqtto=
Subject key identifier: 5C:65:6D:BC:5C:E1:DD:01:3A:A8:7B:73:21:D0:56:A1:10:6F:2E:29
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018570F0A25DCCCB45FCF5CB0A66FF96AA39
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/XGVtvFzh3QE6qHtzIdBWoRBvLik.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 88.218.101.0/24 maxlen: 24
88.218.102.0/23 maxlen: 23
88.218.100.0/24 maxlen: 24
141.98.240.0/24 maxlen: 24
195.206.108.0/24 maxlen: 24
195.206.109.0/24 maxlen: 24
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
193.31.74.0/24 maxlen: 24
193.31.75.0/24 maxlen: 24
85.209.218.0/23 maxlen: 23
85.209.216.0/24 maxlen: 24
139.28.138.0/23 maxlen: 23
139.28.137.0/24 maxlen: 24
45.84.44.0/24 maxlen: 24
194.5.0.0/22 maxlen: 22
45.84.45.0/24 maxlen: 24
45.84.47.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
141.98.242.0/23 maxlen: 23
194.124.52.0/22 maxlen: 22
85.8.188.0/24 maxlen: 24
85.8.189.0/24 maxlen: 24
85.8.190.0/23 maxlen: 23
45.11.236.0/22 maxlen: 22
92.119.180.0/24 maxlen: 24
45.157.74.0/23 maxlen: 23
45.14.72.0/24 maxlen: 24
5.182.100.0/24 maxlen: 24
5.182.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a2:5d:cc:cb:45:fc:f5:cb:0a:66:ff:96:aa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c656dbc5ce1dd013aa87b7321d056a1106f2e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:75:69:ab:89:d2:9e:05:d7:3f:43:0a:da:
66:c1:00:6b:42:df:9b:ec:c8:31:ad:6d:2f:69:3d:
d9:0e:cd:e7:8d:c4:c1:23:7b:81:dd:11:9a:42:c6:
a7:be:18:79:ab:47:16:92:8f:83:39:ec:df:9d:73:
b5:4b:3e:4f:48:0f:52:e5:21:d7:15:ee:d1:bb:19:
5c:ec:c0:50:71:ed:e1:83:be:7a:53:80:59:e6:cc:
f7:34:1f:06:64:e8:b2:87:3a:46:b3:1b:32:92:7a:
27:8b:e5:30:de:da:74:05:0f:d5:03:3e:ff:71:e5:
c3:b1:2c:47:18:58:5d:ac:b2:db:38:a4:42:de:75:
ac:cf:bf:d8:f7:9b:40:ad:3b:8a:c6:c6:b7:7f:53:
9e:20:90:dd:88:52:19:de:89:bd:0d:e0:2b:fa:da:
e7:1b:ab:f8:7c:54:cd:71:68:1a:65:a4:d6:1c:52:
95:f6:23:18:61:72:e5:ee:72:53:16:95:3b:64:b5:
00:cb:cd:c2:13:4c:89:88:2f:51:b5:c5:a8:d8:63:
61:20:5e:62:18:13:ea:ba:de:94:fb:32:54:c8:8c:
05:ba:fd:a3:2c:37:41:19:0e:fc:9b:83:a3:19:86:
7a:65:59:db:d8:f2:22:1a:4e:d9:13:e0:83:42:a4:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:6D:BC:5C:E1:DD:01:3A:A8:7B:73:21:D0:56:A1:10:6F:2E:29
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/XGVtvFzh3QE6qHtzIdBWoRBvLik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.100.0/24
5.182.103.0/24
45.11.236.0/22
45.14.72.0/24
45.84.44.0/23
45.84.47.0/24
45.157.74.0/23
85.8.188.0/22
85.209.216.0/24
85.209.218.0/23
88.218.100.0/22
92.119.180.0/24
139.28.137.0-139.28.139.255
141.98.240.0/22
193.31.72.0/22
194.5.0.0/22
194.124.52.0/22
195.206.108.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:bc:e4:a2:51:2b:3f:d0:50:6d:b1:61:15:8a:d1:7f:e5:ee:
e0:c2:69:69:41:ca:b7:f1:73:1a:74:4b:eb:20:9a:28:a4:ce:
24:23:ab:3b:c8:b7:d4:1d:54:14:9d:c1:7a:cf:a0:ae:82:ff:
3d:1d:a6:69:1d:fc:07:e1:ad:89:38:6e:a7:82:2b:e0:b0:13:
1d:53:6c:1d:f4:d3:2a:3d:3c:96:68:d9:e2:c2:b6:1a:33:81:
f0:20:07:34:8b:78:02:6d:cc:68:ed:c9:2f:8d:fc:2c:5e:53:
d4:ba:96:e5:31:b5:1c:9e:fe:1b:da:2d:49:b5:55:24:c3:ee:
c8:23:7a:d9:4f:c0:a5:fe:2a:3c:a1:ec:e9:aa:2f:9c:8d:90:
2a:c4:6c:ff:19:9e:8c:5a:72:04:40:58:ad:6b:db:83:c6:af:
ca:15:22:67:76:93:7b:cc:87:6c:43:98:ea:f7:3d:c5:be:a3:
08:9a:d4:ca:82:63:1e:87:82:07:af:1f:17:e4:0e:b6:12:7d:
21:9e:9f:6e:53:84:52:03:92:39:1b:fd:6c:0a:83:71:85:ce:
33:8c:b3:8d:ae:ff:bf:a5:9d:4f:f5:ad:30:fd:33:8c:3e:99:
a5:22:ca:a0:ac:61:bb:24:12:25:81:b1:7c:76:5c:6b:eb:21:
dd:ba:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org