Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/x-lfXOe_PyjQ9e9BHEb9lqUy8Sc.roa
File: x-lfXOe_PyjQ9e9BHEb9lqUy8Sc.roa (raw, json)
Hash identifier: RPyjMiqYtKz9QuSxACyr2vFnxBbyqJb35WAnxYmg+M4=
Subject key identifier: C7:E9:5F:5C:E7:BF:3F:28:D0:F5:EF:41:1C:46:FD:96:A5:32:F1:27
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 01856CF8301FC897C0F68D5B8467204E3730
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/x-lfXOe_PyjQ9e9BHEb9lqUy8Sc.roa
Signing time: Sun 01 Jan 2023 10:54:42 +0000
ROA not before: Sun 01 Jan 2023 10:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205614
IP address blocks: 185.171.44.0/22 maxlen: 24
193.22.251.0/24 maxlen: 24
2a0d:1f80::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:30:1f:c8:97:c0:f6:8d:5b:84:67:20:4e:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Jan 1 10:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7e95f5ce7bf3f28d0f5ef411c46fd96a532f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:a1:80:c9:12:7b:a7:25:62:44:13:0a:0d:
4f:44:3b:23:c8:c0:1a:41:f5:5c:f4:d7:01:d2:8d:
76:3c:10:f4:8b:fd:57:69:f7:95:64:37:8c:bb:ad:
83:b3:d2:0f:c1:e7:fb:78:a5:8a:c5:b4:80:c5:c8:
9f:54:c0:c3:01:a1:09:41:6d:2c:fd:32:2b:c1:c9:
e1:6e:77:ef:09:e6:69:e3:bf:0a:c9:18:b8:a3:01:
81:f4:d0:e8:60:61:d2:d7:de:f3:98:cf:25:e7:f4:
07:da:28:70:23:e1:b1:79:aa:e7:95:61:0f:09:2d:
18:ac:2a:2a:2a:97:b2:db:04:28:f8:48:d2:44:ae:
24:7b:a9:5f:cc:cc:ea:e6:b5:c4:11:25:63:db:42:
63:a4:c9:7e:fd:3a:08:a0:a4:56:b3:3f:9f:3a:bb:
59:62:cc:2b:94:73:fe:32:9e:26:d7:c9:30:b7:e1:
e2:d7:75:97:6b:f3:6d:be:c1:76:04:75:e6:c0:15:
68:79:6d:50:77:86:a6:16:da:93:1e:83:35:a9:7d:
e4:b5:c1:b5:5b:92:f1:1b:c5:99:df:40:2f:97:a4:
ed:40:13:7d:b2:48:36:09:19:4a:b7:81:a6:d2:8b:
84:13:d8:6d:f8:cc:46:c5:8d:54:14:cf:36:f4:95:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:5F:5C:E7:BF:3F:28:D0:F5:EF:41:1C:46:FD:96:A5:32:F1:27
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/x-lfXOe_PyjQ9e9BHEb9lqUy8Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.44.0/22
193.22.251.0/24
IPv6:
2a0d:1f80::/32
Signature Algorithm: sha256WithRSAEncryption
78:7b:d8:69:d2:b8:30:64:2e:6e:e8:72:3b:98:b0:96:13:7f:
d5:4e:c4:fa:34:66:59:a0:c4:31:c9:a7:3e:75:b8:16:85:5d:
63:95:1e:24:0f:06:8e:86:39:6a:cd:a8:a5:78:8c:13:ca:e0:
a3:d0:f6:ac:cb:2f:b6:d2:7e:c7:ff:cb:51:fb:a7:1b:13:8a:
83:cf:48:c3:af:d5:9b:0c:66:fb:ff:43:d1:d1:3f:16:af:4c:
6a:40:ed:98:b9:a5:6c:67:32:d2:fc:0d:75:0a:87:fc:5c:52:
07:0a:37:b9:df:44:76:41:b5:8c:55:e6:ae:40:86:69:bd:50:
c7:2f:68:f2:6b:6c:9a:5d:19:ce:12:f3:3c:3e:4b:4e:00:a2:
22:7c:44:0c:a3:c2:fb:03:f7:bb:7a:43:ee:70:1d:9b:4b:07:
b9:64:a4:3f:d2:65:0b:44:eb:86:bf:2c:89:43:15:4d:54:b9:
30:88:f8:55:85:c8:5f:e9:62:f6:a4:e1:a3:15:0a:69:34:d7:
e0:e2:2a:e4:45:19:7b:88:7a:07:19:5e:c1:e7:17:dc:66:42:
2a:bc:01:7d:44:b2:57:39:39:74:1f:29:78:fe:ad:e5:2c:64:
ee:46:9a:12:d6:d1:12:be:66:17:2e:58:23:dd:01:a4:92:bc:
f4:c5:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 08:41:00 2023 by rpki-client on console-ams.rpki-client.org