Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/XgRdhIX-UTOruaSkjCH_lbAdnZo.roa
File: XgRdhIX-UTOruaSkjCH_lbAdnZo.roa (raw, json)
Hash identifier: JsdtRAByw7zV6ltNA1yUR8xUuP0fOIggMPCLHRVck9U=
Subject key identifier: 5E:04:5D:84:85:FE:51:33:AB:B9:A4:A4:8C:21:FF:95:B0:1D:9D:9A
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 018AF5ECFCB799B0594DEB682657CC201BB8
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/XgRdhIX-UTOruaSkjCH_lbAdnZo.roa
Signing time: Tue 03 Oct 2023 14:24:23 +0000
ROA not before: Tue 03 Oct 2023 14:24:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206602
IP address blocks: 185.245.144.0/24 maxlen: 24
185.245.145.0/24 maxlen: 24
185.245.144.0/22 maxlen: 22
185.245.146.0/24 maxlen: 24
185.245.147.0/24 maxlen: 24
2a12:bcc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 10 Oct 2023 14:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:ec:fc:b7:99:b0:59:4d:eb:68:26:57:cc:20:1b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Oct 3 14:24:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e045d8485fe5133abb9a4a48c21ff95b01d9d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5e:c2:7f:2b:43:16:27:a3:3d:fb:3a:8e:bf:
80:59:67:0d:52:02:fb:03:6c:6a:30:de:d4:a5:72:
6e:77:fc:38:d6:db:c0:b4:1f:50:c1:d5:e0:d9:75:
98:ef:a2:49:66:eb:f8:3c:0d:9c:09:8c:98:48:0d:
18:4d:34:0b:2d:eb:b3:68:8f:e5:13:2c:aa:6d:80:
a5:25:42:97:d2:d5:c5:ae:38:33:5d:f5:30:4a:cb:
be:be:62:cd:6e:dd:cf:f8:65:67:c3:53:f6:60:1b:
6c:a8:6a:14:bb:51:42:14:10:c7:f7:b3:60:5b:d6:
bd:00:4e:34:8e:e4:ae:78:76:f2:73:af:7d:49:f3:
4d:91:ef:a6:7d:e5:74:d7:3b:e6:bf:81:06:35:a4:
7c:0b:b8:54:e2:a9:b8:e4:f0:ff:fe:6a:d6:72:22:
92:f0:20:0b:43:9f:ca:36:10:a9:40:b1:55:6f:01:
7f:fa:cb:dc:b8:86:46:5f:b0:cd:4d:6a:1b:43:29:
a0:61:aa:7d:e2:53:dd:74:cd:e2:dd:b0:36:ec:e0:
e8:c2:4a:b8:47:90:9d:f7:d6:ad:cc:b6:90:6a:bc:
f6:c1:a8:99:e5:df:83:8d:3c:c1:e5:f0:80:f9:7e:
38:ba:32:f5:3b:cb:e3:dd:c9:37:03:06:68:9b:fb:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:5D:84:85:FE:51:33:AB:B9:A4:A4:8C:21:FF:95:B0:1D:9D:9A
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/XgRdhIX-UTOruaSkjCH_lbAdnZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.144.0/22
IPv6:
2a12:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
97:60:67:31:b4:fb:f2:9d:51:ce:10:7a:cb:a1:56:4f:e1:68:
22:44:32:9f:24:21:ae:49:c6:c0:8d:fd:02:ba:5b:e9:e5:5c:
bf:5a:89:4f:ca:7d:df:40:fc:40:85:4f:c5:9e:1a:ba:0d:f0:
08:82:bb:06:9a:a2:d8:d1:4a:14:73:f1:ac:74:f0:b8:ff:65:
eb:4a:62:76:c0:fe:e0:2b:b8:74:71:74:8e:2a:1c:7a:b9:2d:
44:f0:33:4c:7e:27:cd:fb:21:89:f1:16:6d:b8:57:61:be:ab:
78:dc:9f:f8:af:0f:00:cc:1b:89:17:d0:85:0f:57:19:d9:e8:
ca:a8:b9:35:8e:5b:b3:88:59:1b:88:0c:eb:0e:5e:f5:05:0d:
63:33:f1:8a:82:c0:31:ac:cd:fe:74:2a:10:37:f1:10:1d:73:
5e:c5:8d:1c:da:14:00:28:c6:da:8a:6c:d8:65:32:4a:ad:79:
74:28:6f:7b:34:ed:0c:74:f9:5a:c2:bc:b1:01:82:8e:36:b4:
56:16:f2:7a:e7:72:72:6f:2d:6d:84:7f:c7:d0:64:cf:c4:63:
7c:38:31:04:0e:37:f4:0c:78:ee:61:31:49:44:d1:30:8d:3a:
00:92:e8:be:2c:e5:4e:76:7d:17:26:9f:f0:cf:56:bb:eb:92:
c6:e4:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:33 2024 by rpki-client on console-ams.rpki-client.org