Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/9TXVtHcvpbn5P5XSIXSGLjDHllQ.roa
File: 9TXVtHcvpbn5P5XSIXSGLjDHllQ.roa (raw, json)
Hash identifier: /vXeEjH4bb9sY1f4dDDt+XuelFn4Z/M1jlBfTifXWWo=
Subject key identifier: F5:35:D5:B4:77:2F:A5:B9:F9:3F:95:D2:21:74:86:2E:30:C7:96:54
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 018CC56E49D32581CC1B9552FF0B9DAE5A3B
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/9TXVtHcvpbn5P5XSIXSGLjDHllQ.roa
Signing time: Mon 01 Jan 2024 14:29:48 +0000
ROA not before: Mon 01 Jan 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201446
IP address blocks: 185.68.110.0/24 maxlen: 24
185.68.109.0/24 maxlen: 24
185.68.111.0/24 maxlen: 24
185.68.108.0/24 maxlen: 24
212.63.110.0/24 maxlen: 24
212.63.109.0/24 maxlen: 24
212.63.111.0/24 maxlen: 24
212.63.108.0/24 maxlen: 24
89.46.91.0/24 maxlen: 24
89.46.88.0/24 maxlen: 24
89.46.90.0/24 maxlen: 24
89.46.89.0/24 maxlen: 24
185.45.73.0/24 maxlen: 24
185.45.74.0/24 maxlen: 24
185.45.75.0/24 maxlen: 24
185.23.117.0/24 maxlen: 24
185.23.116.0/24 maxlen: 24
185.23.118.0/24 maxlen: 24
185.23.119.0/24 maxlen: 24
185.18.199.0/24 maxlen: 24
185.18.198.0/24 maxlen: 24
185.92.245.0/24 maxlen: 24
185.92.244.0/24 maxlen: 24
217.148.139.0/24 maxlen: 24
185.92.246.0/24 maxlen: 24
217.148.138.0/24 maxlen: 24
185.92.247.0/24 maxlen: 24
185.177.152.0/24 maxlen: 24
185.177.154.0/24 maxlen: 24
185.177.155.0/24 maxlen: 24
185.177.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:49:d3:25:81:cc:1b:95:52:ff:0b:9d:ae:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f535d5b4772fa5b9f93f95d22174862e30c79654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:ba:6b:fe:aa:0e:fb:10:83:4e:41:d7:e8:
17:a2:d3:7f:c7:34:aa:16:60:f7:e9:9f:64:06:3d:
b1:00:4a:b3:e5:11:96:ce:d4:35:72:81:1a:84:69:
24:88:6d:b9:55:0e:f3:f3:0f:39:9b:1c:39:0b:05:
5b:7c:e7:ba:72:4b:bb:7e:e1:01:96:cc:28:23:b9:
a5:23:ee:59:40:d9:a6:d3:d7:ff:6e:16:f6:0a:c3:
69:39:24:50:ab:33:fa:45:97:7e:b1:d1:ca:62:fa:
8e:77:90:be:56:fa:82:fe:fa:96:6d:f1:95:b3:0e:
8f:b8:3c:8b:07:a1:53:6a:f7:fb:8f:4d:bf:95:4d:
36:7d:c2:eb:94:dc:a9:76:e3:8d:19:a1:80:7c:85:
73:ba:b6:31:88:11:cc:e6:8d:da:89:86:9c:62:ed:
b0:56:d4:4c:11:f9:bb:76:5f:90:6e:e2:ea:cf:ea:
af:77:df:de:a5:e5:62:12:2c:0e:3d:94:5b:d9:86:
4f:a3:98:cc:42:37:9b:94:41:8f:d5:05:a6:79:f9:
5a:81:49:ca:b7:45:06:53:23:c9:15:e9:0a:d2:87:
01:43:f9:01:3e:c6:ff:b2:8d:53:40:1f:f6:34:e7:
ef:c5:c4:82:7d:1d:17:3c:77:c1:65:5e:3d:3d:6a:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:D5:B4:77:2F:A5:B9:F9:3F:95:D2:21:74:86:2E:30:C7:96:54
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/9TXVtHcvpbn5P5XSIXSGLjDHllQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.88.0/22
185.18.198.0/23
185.23.116.0/22
185.45.73.0-185.45.75.255
185.68.108.0/22
185.92.244.0/22
185.177.152.0/22
212.63.108.0/22
217.148.138.0/23
Signature Algorithm: sha256WithRSAEncryption
94:75:ba:01:cd:d2:ad:2b:32:40:c7:9c:fd:88:35:27:0c:bd:
b4:d1:04:ca:fa:dc:a6:71:a2:f8:9d:d6:e4:b1:ae:3b:1f:a2:
a7:b6:3a:06:ef:d9:cd:79:76:33:5e:5a:8d:3a:b9:c6:14:63:
f6:fa:75:42:0c:2b:af:1f:37:d8:08:f8:c5:96:99:5b:85:45:
23:3d:81:75:d7:a2:8c:79:63:1a:76:5b:19:92:b0:df:a8:29:
ab:f4:50:40:67:3e:79:60:b2:32:e2:59:76:dd:98:a5:01:d6:
1a:0d:4c:f6:58:5b:45:d5:14:0c:b3:bf:31:9d:13:a0:cb:a1:
a1:5d:6d:94:79:4c:f0:00:8d:a9:44:fe:8d:9e:8b:2b:2a:11:
e1:50:34:47:27:bc:62:3f:fc:5c:ad:8a:ab:02:b9:c2:b4:32:
cd:9e:b4:07:d4:76:10:9c:d0:5d:16:b5:bd:5c:bb:48:2e:80:
f9:54:f4:c6:0d:f8:ec:0d:e5:c4:e3:02:86:ba:27:31:56:a6:
e0:50:ba:58:dd:7f:d4:76:34:3d:1e:20:b1:e8:ae:de:92:76:
58:c3:76:0a:71:12:4e:70:e2:0c:7f:af:9e:ca:5f:ed:a2:b5:
72:c8:0b:fb:af:57:44:de:74:52:44:fd:52:2c:a6:cc:40:58:
53:7a:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 17:14:09 2024 by rpki-client on console-ams.rpki-client.org