Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/5qoOZxdn47J4F1IFWGoEUqT3_C0.roa
File: 5qoOZxdn47J4F1IFWGoEUqT3_C0.roa (raw, json)
Hash identifier: 47dyYW5cXA2Yyfa5hzjGbCk4DkkWcGwdnkp9OqgDVeE=
Subject key identifier: E6:AA:0E:67:17:67:E3:B2:78:17:52:05:58:6A:04:52:A4:F7:FC:2D
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 01856EA6AB7721580D23A1598E30EB8DBCA1
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/5qoOZxdn47J4F1IFWGoEUqT3_C0.roa
Signing time: Sun 01 Jan 2023 18:44:54 +0000
ROA not before: Sun 01 Jan 2023 18:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210055
IP address blocks: 185.214.170.0/24 maxlen: 24
176.119.132.0/22 maxlen: 22
176.119.132.0/24 maxlen: 24
185.214.171.0/24 maxlen: 24
176.119.135.0/24 maxlen: 24
176.119.134.0/24 maxlen: 24
176.119.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ab:77:21:58:0d:23:a1:59:8e:30:eb:8d:bc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jan 1 18:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6aa0e671767e3b278175205586a0452a4f7fc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:59:8f:3b:23:26:9e:f4:76:a6:a3:67:99:
a2:84:78:bc:2d:d1:84:b4:c8:68:f2:b3:68:9d:04:
64:9c:a9:7c:c5:5c:4b:9e:e7:6d:29:8f:dc:7b:ee:
8d:fb:c0:90:ef:46:2e:17:34:49:ac:61:01:05:7d:
f2:0c:52:c6:91:c0:8c:d3:53:45:25:bd:66:f2:63:
e0:32:46:31:67:ac:61:eb:42:fc:b3:a6:fb:52:ad:
20:48:3d:d4:79:95:d6:48:96:9e:19:09:2f:29:59:
5b:98:28:af:db:34:93:9f:cd:c7:4b:5f:e8:ad:ca:
f4:b2:fa:da:68:0b:2e:0b:6b:e7:d7:2e:ee:8a:e5:
02:83:1b:78:8c:94:4e:8b:49:cd:d6:cb:98:3f:ab:
48:bd:6e:f4:4a:55:88:b0:4c:18:ad:74:13:ee:87:
bb:79:42:7e:e4:44:58:f1:13:c4:04:24:21:69:b1:
2c:af:b4:b1:17:b1:ef:18:69:8b:64:9a:5c:4c:b6:
a7:89:59:f9:77:1e:56:64:d8:68:ef:e9:73:09:1f:
55:1b:e0:d0:1c:a7:2d:38:cb:d0:dd:7b:68:cd:6b:
c7:6e:84:c9:f3:8f:07:62:f4:b0:03:09:2c:69:11:
c9:77:d7:c8:72:1e:ee:15:70:b8:1e:fc:bc:65:e4:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:0E:67:17:67:E3:B2:78:17:52:05:58:6A:04:52:A4:F7:FC:2D
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/5qoOZxdn47J4F1IFWGoEUqT3_C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.132.0/22
185.214.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:78:52:9e:57:e2:2c:d6:a3:21:66:f1:12:f0:1f:d5:9a:90:
f3:d7:b7:0e:15:3f:d4:6f:d1:bf:81:01:b8:57:42:b5:a6:98:
93:11:84:c9:f5:65:5a:78:06:3d:47:6b:29:db:94:c4:83:74:
1a:aa:3a:35:cc:f4:f2:89:7d:ca:c9:2a:b3:04:db:e9:88:e3:
b9:6d:6f:c3:f7:15:5d:97:d0:b6:1a:74:9b:a6:55:ba:ab:6b:
62:f5:c6:f5:18:34:5d:9b:dd:8a:9d:67:72:7f:6e:c0:94:f6:
d5:84:df:4d:13:5a:2a:46:e8:32:e5:09:d5:51:8e:0e:51:eb:
cb:db:28:52:33:18:a3:bc:7a:7c:fd:ff:84:5e:14:c0:ae:ee:
1d:73:80:d7:19:d8:cf:38:36:77:87:25:86:2e:d1:09:7e:7c:
01:17:67:ae:17:9d:3e:eb:19:d4:10:a6:bd:47:3d:52:75:3f:
f3:0d:be:e8:53:fe:e5:4d:d9:32:bf:da:b0:e7:1c:a5:11:cb:
4e:42:28:66:20:1b:9c:00:fd:9a:2e:2d:c8:87:c3:ee:97:ad:
4a:70:f8:64:b0:58:d0:2c:ae:95:8d:5f:e2:81:20:aa:94:10:
58:92:80:e6:af:b0:e0:c1:c1:d9:f1:87:71:0b:b5:3b:44:a8:
5e:c6:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:40 2024 by rpki-client on console-fra.rpki-client.org