Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Xti3UGZMGkXmeCViDmQRuDFoZqU.roa
File: Xti3UGZMGkXmeCViDmQRuDFoZqU.roa (raw, json)
Hash identifier: 8RcYwytsd+Jfb62Z5QHROiSDc0hYmgkMq2wwRBlo+HQ=
Subject key identifier: 5E:D8:B7:50:66:4C:1A:45:E6:78:25:62:0E:64:11:B8:31:68:66:A5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0189AB586ED21CDA72CC88DAA14D9E218195
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Xti3UGZMGkXmeCViDmQRuDFoZqU.roa
Signing time: Mon 31 Jul 2023 09:47:26 +0000
ROA not before: Mon 31 Jul 2023 09:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.44.0/22 maxlen: 22
195.180.140.0/22 maxlen: 22
194.163.72.0/22 maxlen: 22
195.179.80.0/22 maxlen: 22
212.224.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:58:6e:d2:1c:da:72:cc:88:da:a1:4d:9e:21:81:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 31 09:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ed8b750664c1a45e67825620e6411b8316866a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:a9:ce:62:7c:2b:31:19:bf:72:d7:ca:42:
f6:5a:75:77:f4:2b:1e:76:c6:a6:41:ff:00:b3:7c:
82:69:d4:0b:e9:cd:10:a1:a4:d1:f6:e5:ff:53:73:
59:f2:c2:94:8c:5f:de:a6:65:71:3f:65:e2:96:4d:
c1:c2:2e:c6:8a:bc:fd:20:c6:5a:c5:f2:bc:50:ea:
f8:60:7a:2f:aa:5f:0a:71:c3:34:ff:d4:27:77:ca:
4a:ec:25:ed:90:43:e1:4d:6d:b8:dd:2f:ed:96:44:
66:c3:f3:d3:06:87:36:01:6f:ac:91:99:42:87:0e:
d0:be:76:20:e0:86:41:5f:6e:5f:ca:af:2c:f2:70:
2d:bc:3a:3a:1e:8c:0a:f2:d2:aa:97:9a:58:ea:cb:
0d:74:e8:35:98:ec:12:7a:32:48:16:cf:42:91:b5:
87:2c:13:e5:03:d8:7e:d1:3e:9c:e1:56:44:27:61:
90:60:43:70:08:c4:89:3e:14:7f:c7:bb:a3:55:c3:
af:d9:19:83:67:92:07:5e:c5:0b:cf:01:74:d4:59:
f9:52:91:09:1a:6f:55:f2:55:22:dd:28:b6:3b:15:
bb:b5:70:92:50:02:d6:2e:23:4f:9e:9b:d5:a6:ea:
e0:9a:d8:77:d7:7c:c2:1b:20:86:60:7c:dd:c9:db:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:B7:50:66:4C:1A:45:E6:78:25:62:0E:64:11:B8:31:68:66:A5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Xti3UGZMGkXmeCViDmQRuDFoZqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.72.0/22
195.179.44.0/22
195.179.80.0/22
195.180.140.0/22
212.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
79:f4:24:6f:5e:f8:2c:93:ac:38:c1:c0:5a:6d:45:62:2b:c0:
f4:5b:77:05:8f:a0:ac:62:2a:50:19:54:30:47:45:30:4c:9a:
72:76:09:49:dc:2c:c1:58:a2:5f:27:ff:ac:69:a2:8f:c3:5f:
c0:a4:07:39:87:a5:a3:b3:7c:d7:26:97:2c:65:9a:16:39:c9:
41:52:04:93:b8:d1:1b:42:84:c4:be:fd:98:df:fa:df:23:dd:
73:02:e8:89:46:7a:86:5b:f7:87:b8:88:4a:8b:c2:36:ce:56:
5c:dc:1a:1a:77:ce:6f:11:9c:64:2e:3a:18:03:7c:77:58:c3:
e3:25:41:22:02:15:23:18:7b:1d:60:26:c0:1b:75:56:67:29:
af:fd:01:b4:8f:dd:25:50:a4:4e:d7:08:29:39:9d:df:46:db:
8c:bb:7b:a0:94:c4:ab:8f:d5:e8:eb:82:7f:21:3e:77:a1:de:
e8:f2:15:a1:09:1f:fe:d6:23:ac:5b:d5:26:71:03:9f:f0:52:
7c:12:67:bc:7c:ae:e5:a7:53:d3:a8:85:94:62:64:08:13:da:
ff:1e:36:3f:f3:d1:6d:66:5a:42:4c:5d:24:e0:38:cf:5d:55:
36:ac:0f:93:f4:a1:2a:d4:a6:c9:db:89:1a:0e:a5:97:21:44:
ed:cd:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 10:45:53 2023 by rpki-client on console-fra.rpki-client.org