Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/XWtjc8t3M6Y5QJFbTGsJckjnV1I.roa
File: XWtjc8t3M6Y5QJFbTGsJckjnV1I.roa (raw, json)
Hash identifier: EFqPQ5HqmHqUnj5V6K5AGMzSjrSQJy4AIw0oF/idbKk=
Subject key identifier: 5D:6B:63:73:CB:77:33:A6:39:40:91:5B:4C:6B:09:72:48:E7:57:52
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 018750DF746A70FF3ED904FE0F0FBBABF374
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/XWtjc8t3M6Y5QJFbTGsJckjnV1I.roa
Signing time: Wed 05 Apr 2023 10:03:54 +0000
ROA not before: Wed 05 Apr 2023 10:03:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201352
IP address blocks: 185.71.246.0/24 maxlen: 24
185.71.245.0/24 maxlen: 24
185.71.244.0/24 maxlen: 24
185.71.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:df:74:6a:70:ff:3e:d9:04:fe:0f:0f:bb:ab:f3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Apr 5 10:03:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d6b6373cb7733a63940915b4c6b097248e75752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:12:5a:60:6e:5b:88:20:18:61:6b:e2:31:
43:20:7f:ea:4a:37:ff:84:4a:53:8a:ad:65:57:53:
d8:be:91:12:f6:75:48:03:ba:68:c1:34:6b:1e:32:
55:c0:e6:99:bb:25:1a:86:90:72:f6:cc:00:cf:e1:
b3:d7:ca:45:bd:67:9c:bf:26:15:61:1b:79:5b:1b:
45:28:3a:da:38:c8:25:36:48:70:97:b5:81:95:9f:
5c:cb:1e:a9:1f:62:6e:85:7c:e2:56:24:95:69:63:
28:4c:d6:b0:3b:f0:b0:13:1a:9e:d0:ad:d8:50:c9:
a5:29:3b:9d:66:92:0d:13:5d:ee:82:13:07:eb:76:
6f:4b:61:a7:81:98:7f:b8:e8:49:19:e1:36:b8:7c:
0e:d5:58:ac:c8:c5:62:6c:68:9b:5e:88:04:82:38:
6a:f5:fe:86:ad:9b:ef:df:3e:d2:28:bc:13:9f:00:
56:f4:cd:8e:28:cd:e8:d1:34:6b:af:66:ce:fd:bb:
6b:1a:99:d0:b5:5a:9b:38:c8:af:aa:e1:6e:95:96:
4c:a3:54:b2:c3:6a:19:49:3d:e0:a9:ad:9b:87:26:
dd:75:00:09:53:3b:fb:9e:5d:37:6b:9c:14:e3:1e:
49:62:10:7b:65:b1:b4:ec:d8:e4:ba:d8:16:01:78:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:63:73:CB:77:33:A6:39:40:91:5B:4C:6B:09:72:48:E7:57:52
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/XWtjc8t3M6Y5QJFbTGsJckjnV1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:e2:18:a2:f5:7a:59:bd:56:51:be:e0:24:a2:3c:5d:1f:dc:
90:6f:c1:84:1f:c6:71:6e:bd:7c:b1:23:37:a0:95:17:44:05:
fe:05:84:86:9e:e7:d4:2c:db:66:a4:e3:da:e2:f3:6f:00:99:
aa:ba:42:6f:7d:47:ac:ab:70:1c:8b:ec:e8:dc:6c:ea:72:62:
90:e6:a3:4b:f3:33:44:52:5d:d6:c4:2b:30:a3:59:27:f5:9c:
8b:b3:df:c1:dd:f5:e7:ef:99:fa:db:95:7e:30:8e:ab:74:10:
a5:89:2a:1e:de:48:75:08:63:e6:65:0f:ca:0a:8c:0d:3a:53:
ee:84:70:39:5f:d1:81:eb:e9:86:38:1f:cb:7d:d1:54:e6:a6:
36:56:5d:40:b3:83:6f:5d:29:fb:da:0d:0b:4d:20:42:20:6a:
8e:fc:de:8e:84:5b:62:32:69:10:88:b0:cd:d0:8b:11:81:b2:
09:40:63:41:43:59:25:e0:9d:9e:ca:10:ce:ea:ab:a7:6b:ff:
52:8c:43:ba:12:c3:27:d9:6a:8f:2a:4b:e5:93:39:58:ce:4f:
34:60:37:b0:59:e5:49:20:79:87:d1:96:31:54:59:e6:bc:51:
15:81:11:a2:b2:fb:a0:d9:8a:4c:ee:dd:55:1e:3b:20:cc:5d:
f8:27:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:57 2024 by rpki-client on console-ams.rpki-client.org