Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/XiZ3fbkqxTmskslL5NKczphXpUY.roa
File: XiZ3fbkqxTmskslL5NKczphXpUY.roa (raw, json)
Hash identifier: 5UbPctyiU5HhK8XRgAqn9BFzSCzC5piZaROZDZ4/HAw=
Subject key identifier: 5E:26:77:7D:B9:2A:C5:39:AC:92:C9:4B:E4:D2:9C:CE:98:57:A5:46
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 01856B2E7EA431CDD48BB0B4A7AFE99CAE18
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/XiZ3fbkqxTmskslL5NKczphXpUY.roa
Signing time: Sun 01 Jan 2023 02:34:47 +0000
ROA not before: Sun 01 Jan 2023 02:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205943
IP address blocks: 185.201.70.0/24 maxlen: 24
185.201.69.0/24 maxlen: 24
185.201.68.0/24 maxlen: 24
2a0a:bf40::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2e:7e:a4:31:cd:d4:8b:b0:b4:a7:af:e9:9c:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Jan 1 02:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e26777db92ac539ac92c94be4d29cce9857a546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:2b:3f:53:61:55:b6:4e:c4:b0:1e:f0:6a:
38:62:64:10:4d:73:fc:ca:4c:11:9b:aa:cf:f1:51:
d6:8e:61:35:cf:bb:c2:9b:ca:43:8f:86:60:28:88:
74:1c:33:08:ea:e7:ca:52:9d:c9:28:41:17:b0:13:
99:44:23:e2:17:2b:f0:57:6b:e4:6f:ce:c8:cd:4d:
8d:49:9f:67:e3:bd:95:9a:9f:ef:f6:8a:14:87:c2:
3a:ac:37:35:8f:51:3a:a0:4a:18:38:0a:a0:ec:94:
68:fb:f9:64:e4:96:57:42:e7:7e:ef:c9:e0:e9:6a:
07:27:ca:1e:ba:f0:a2:a0:d5:fb:ac:71:b2:45:88:
23:ab:8d:98:1a:b1:ae:db:8f:a6:6d:a9:28:04:30:
cd:b8:7d:b1:87:1a:df:d5:63:67:e7:ac:c4:dd:10:
5c:fb:79:b8:92:aa:32:8d:09:cb:3c:c9:30:f2:eb:
ca:78:e8:07:f2:e6:ea:95:bb:bc:9b:91:04:c0:88:
76:58:8c:17:04:21:a2:67:5e:85:e2:3c:68:06:58:
13:4d:b4:60:2c:d5:fc:b0:54:16:da:45:c6:c4:f9:
82:04:ff:81:76:6f:cf:39:00:b1:4e:7f:ac:db:0c:
c4:8e:b3:f7:14:c5:dc:95:df:45:5e:f9:e3:45:08:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:26:77:7D:B9:2A:C5:39:AC:92:C9:4B:E4:D2:9C:CE:98:57:A5:46
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/XiZ3fbkqxTmskslL5NKczphXpUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.68.0-185.201.70.255
IPv6:
2a0a:bf40::/36
Signature Algorithm: sha256WithRSAEncryption
24:86:40:f8:21:5c:d8:f9:69:30:40:31:50:db:a3:df:86:95:
50:0e:32:4c:26:4b:02:0b:3a:70:d7:eb:b7:88:9d:12:40:1d:
8a:43:d7:4d:86:cd:12:df:3d:3b:c8:5d:1e:19:a2:1a:5c:0f:
cf:0e:06:60:35:a8:23:25:45:25:69:cf:47:13:e7:07:6d:40:
c4:bc:07:54:89:0e:87:7d:a7:0e:47:a3:a0:b3:24:b0:af:65:
57:1a:ca:23:4c:0f:b4:6f:14:eb:32:1f:d6:07:f2:09:ce:b9:
8e:82:b6:d8:67:7d:3c:bc:6b:14:ca:0f:f3:80:c9:e9:34:c5:
da:7f:9b:5d:5d:87:79:00:f3:95:75:a1:57:37:02:08:fb:2b:
02:f3:4c:41:f4:52:be:4f:ac:5c:17:c6:68:68:fc:88:2e:c0:
3c:4b:12:66:1e:36:98:d2:de:2a:5f:33:b1:7f:b5:34:bf:4f:
ad:11:b1:8c:57:7b:55:a7:50:d4:cb:b3:35:a3:9f:65:e0:e9:
1c:fa:8c:af:22:ae:27:24:d3:55:9b:37:bc:21:e8:05:84:a4:
8f:90:f6:b6:70:0d:ba:dc:7a:25:99:6f:e7:d5:b7:ce:de:4d:
09:23:4d:87:85:60:b4:5c:6f:1e:70:e8:63:e6:4b:80:11:a5:
31:ff:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org