Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/X_ZUBBu5nhd86Ymp4DyTzXwv73Q.roa
File: X_ZUBBu5nhd86Ymp4DyTzXwv73Q.roa (raw, json)
Hash identifier: SDrZWUZgUaXBhZQ9/QXblVZR/Yr/tZOEpORxaYCXj7Q=
Subject key identifier: 5F:F6:54:04:1B:B9:9E:17:7C:E9:89:A9:E0:3C:93:CD:7C:2F:EF:74
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D07A68A8F7E6D909AC2B88560F32
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/X_ZUBBu5nhd86Ymp4DyTzXwv73Q.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203068
IP address blocks: 185.241.120.0/23 maxlen: 23
185.244.232.0/23 maxlen: 23
185.242.173.0/24 maxlen: 24
185.242.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d0:7a:68:a8:f7:e6:d9:09:ac:2b:88:56:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff654041bb99e177ce989a9e03c93cd7c2fef74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:a0:c0:11:a6:24:0c:ae:e9:66:b0:ba:7f:
aa:7d:25:d1:9b:a9:58:c5:d9:4d:b4:32:06:03:ae:
ec:ba:c9:ac:4f:e5:ea:ce:1e:41:21:bd:ab:ca:d4:
f7:b3:8b:a9:e1:5d:a9:6c:ee:98:85:61:2e:68:49:
49:15:b0:97:31:03:5a:72:5b:45:26:fa:7c:e4:6a:
50:bc:06:36:62:69:64:55:bf:9c:de:e8:58:23:75:
76:8c:96:e3:71:90:70:51:50:53:77:59:1e:92:f9:
7a:df:30:b5:d6:bb:8c:f4:fd:58:21:56:86:ba:c6:
eb:7e:b3:59:90:05:c8:95:70:ee:58:22:1c:ff:66:
89:82:dc:12:24:ba:9d:a8:d7:d0:7a:69:d7:29:6b:
be:ce:4e:91:36:73:13:5a:96:0f:51:13:c6:ce:ab:
fe:b6:2d:9d:3a:8d:88:5d:a2:ff:5f:a3:ba:5e:9a:
8c:6d:42:7b:0e:58:09:75:7c:ca:9a:18:bc:31:c4:
fb:fc:af:48:80:9e:57:f3:36:6c:49:e6:b4:66:7b:
aa:c8:63:e0:a8:9e:b5:5d:7b:4b:78:58:dd:fc:70:
59:8f:38:b0:d6:ef:85:39:7a:af:e8:18:8e:c7:38:
4a:e8:38:1b:15:20:08:a4:19:e3:0d:6e:92:c9:52:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:54:04:1B:B9:9E:17:7C:E9:89:A9:E0:3C:93:CD:7C:2F:EF:74
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/X_ZUBBu5nhd86Ymp4DyTzXwv73Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.120.0/23
185.242.173.0-185.242.174.255
185.244.232.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:b0:5b:45:f3:c2:81:13:15:5c:8e:17:84:aa:8b:e8:46:6c:
05:da:c7:dd:ee:bc:fd:37:8a:85:68:66:63:e9:8c:5f:49:01:
0b:25:01:82:9b:52:d4:f1:d0:de:00:35:ec:b6:0f:22:72:b3:
47:16:c7:94:e8:f2:bb:4d:86:02:05:4e:a8:8f:e6:77:01:1d:
88:32:05:da:0c:d3:d7:76:5e:cc:19:c3:50:52:4a:bb:af:83:
d5:ed:69:79:1d:c4:66:3a:3a:de:62:58:b7:b2:08:a4:87:03:
9f:60:7a:ca:f3:1f:a4:b2:26:80:64:bd:51:95:38:fe:32:c2:
d5:28:9a:6d:cc:4d:cd:df:48:94:f7:4a:d0:e9:5b:02:ab:1a:
ed:0d:55:07:be:06:a0:29:17:1b:88:6a:58:79:72:1c:f1:70:
8d:69:32:de:07:8c:f2:95:07:c0:c9:f1:bc:8f:9e:9f:f3:c5:
a3:a5:8b:2e:be:7c:2e:11:38:4e:56:22:b6:c9:7a:f5:c5:06:
84:79:4c:23:33:8c:00:94:67:9a:29:b3:b5:ec:f7:1b:fc:c0:
53:87:6d:d7:7a:87:76:67:cc:42:ec:de:5c:45:f3:a1:43:00:
de:a0:74:ee:5c:d4:1b:76:a1:68:b6:44:3e:13:d4:f4:66:9c:
7b:b6:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org