Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/XCQCRLzNJE2VNOdoNLA1KloFEVE.roa
File: XCQCRLzNJE2VNOdoNLA1KloFEVE.roa (raw, json)
Hash identifier: 4PBo+7V2CrM4ujWTCgwUQ7G3YT4/AqTxbEACulsEz5M=
Subject key identifier: 5C:24:02:44:BC:CD:24:4D:95:34:E7:68:34:B0:35:2A:5A:05:11:51
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 0185829CF6A86E8F9FAE1A8C41199B0EC706
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/XCQCRLzNJE2VNOdoNLA1KloFEVE.roa
Signing time: Thu 05 Jan 2023 15:46:42 +0000
ROA not before: Thu 05 Jan 2023 15:46:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45014
IP address blocks: 194.150.252.0/23 maxlen: 24
217.172.128.0/20 maxlen: 24
185.18.32.0/24 maxlen: 24
185.184.236.0/22 maxlen: 22
159.253.56.0/21 maxlen: 24
80.93.160.0/20 maxlen: 24
92.60.96.0/20 maxlen: 24
2a00:1a90::/32 maxlen: 38
2a03:f2c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:9c:f6:a8:6e:8f:9f:ae:1a:8c:41:19:9b:0e:c7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 5 15:46:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c240244bccd244d9534e76834b0352a5a051151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:70:4e:9a:0e:a6:76:92:b3:d8:25:94:9f:
aa:85:db:24:bb:85:b1:d5:12:51:9b:f3:f0:c1:57:
d7:fe:07:77:1e:44:19:46:50:f8:a4:ff:d6:ec:f9:
49:19:e0:5c:61:27:3d:85:a3:e7:21:50:b6:57:1b:
b9:cc:e3:10:7d:ff:de:e4:1f:92:1e:77:16:27:75:
bd:ac:3a:6c:13:3f:ad:cb:b5:26:9e:11:47:de:f0:
7a:9c:fc:21:c8:7c:cf:13:f2:35:49:ce:9d:e6:54:
03:9d:94:0d:c0:fb:a9:cd:68:55:91:f7:01:e1:95:
a2:2b:3b:09:5c:18:f3:6a:5f:6d:9f:c2:a4:51:63:
4f:28:94:77:14:9a:79:5b:04:26:bf:b0:fc:91:27:
79:2a:7e:98:d2:6e:ea:4e:2f:fd:b1:54:05:5c:33:
f0:1f:7e:d2:69:2c:33:f5:ac:80:4b:1f:0e:1e:e7:
95:e6:62:f9:da:fa:49:34:c0:00:fb:35:fb:c5:59:
00:84:8c:90:da:f1:53:b8:5b:eb:19:9f:70:9a:b0:
36:f2:1e:18:5b:7a:61:1f:ea:57:bb:96:77:d1:43:
6f:9f:41:da:3c:90:de:75:dc:b5:10:46:13:bc:2b:
1d:d1:d8:59:67:78:fe:a9:b0:2e:cb:9e:cc:5b:47:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:02:44:BC:CD:24:4D:95:34:E7:68:34:B0:35:2A:5A:05:11:51
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/XCQCRLzNJE2VNOdoNLA1KloFEVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.160.0/20
92.60.96.0/20
159.253.56.0/21
185.18.32.0/24
185.184.236.0/22
194.150.252.0/23
217.172.128.0/20
IPv6:
2a00:1a90::/32
2a03:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
51:53:ff:51:14:fa:e5:05:8f:44:a8:2b:4b:46:e4:1b:ec:c1:
05:a9:b6:28:5f:19:84:97:40:91:a8:78:18:39:d6:dc:4f:60:
3a:6a:3a:e4:3b:cd:6a:3e:b5:89:9b:41:72:03:b7:96:1e:4d:
7e:2c:0c:ad:c3:9b:1c:7a:ae:70:40:e0:54:66:69:67:57:15:
9b:b7:94:32:52:44:32:5f:fb:74:44:89:af:bb:11:36:54:11:
3f:94:10:23:b9:e4:42:cf:4b:d5:1c:a4:37:0c:e3:2f:b6:7e:
12:0c:0d:54:db:dd:c3:20:1d:75:c0:0a:24:f2:9d:ce:25:52:
25:ac:30:ce:fc:7d:4a:36:e4:57:09:ef:c6:26:45:36:1c:55:
36:4f:dd:24:64:3c:82:a3:7f:dc:33:a6:70:0c:31:6d:bf:2f:
b6:04:9b:f0:bf:dc:2c:c1:f3:f8:b1:44:06:9a:ee:ef:b8:72:
49:49:f9:93:ef:b8:ed:53:21:6b:ef:c4:3c:51:8d:e7:ba:30:
6d:c6:ce:0e:49:6c:59:60:23:ff:30:e7:2d:b7:db:5d:cf:bd:
bd:7a:ca:25:cc:18:77:31:5e:ec:8a:69:fb:88:9a:c3:a8:22:
4e:03:e5:02:79:25:4d:dc:f6:43:19:d1:a3:49:ac:30:5f:a2:
06:40:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:35 2023 by rpki-client on console-fra.rpki-client.org