Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/xTyVbHA-MjHRzfiFVetPrAQ0UoY.roa
File: xTyVbHA-MjHRzfiFVetPrAQ0UoY.roa (raw, json)
Hash identifier: 2AT5UFfxyqs1F8zhKlInIXzEIqPfDv06YOx1C23roJg=
Subject key identifier: C5:3C:95:6C:70:3E:32:31:D1:CD:F8:85:55:EB:4F:AC:04:34:52:86
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0187FA98B873E1E1221183ADA46C30128366
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/xTyVbHA-MjHRzfiFVetPrAQ0UoY.roa
Signing time: Mon 08 May 2023 09:02:05 +0000
ROA not before: Mon 08 May 2023 09:02:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60284
IP address blocks: 193.135.96.0/22 maxlen: 22
178.238.0.0/22 maxlen: 22
193.228.197.0/24 maxlen: 24
193.228.198.0/24 maxlen: 24
2a13:a200::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 16 Aug 2023 13:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:98:b8:73:e1:e1:22:11:83:ad:a4:6c:30:12:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: May 8 09:02:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c53c956c703e3231d1cdf88555eb4fac04345286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:bc:35:00:ff:d7:2e:5a:1a:11:84:0b:d4:
53:99:37:7b:0c:4f:0f:30:89:2d:37:aa:50:06:cd:
0a:f6:a9:68:e4:9b:f7:ac:a3:4e:1a:35:ea:e7:13:
d8:0c:9a:f4:1f:34:83:21:d8:d1:9e:32:38:6a:2e:
62:10:96:f3:5b:93:46:f7:35:d5:ac:2b:75:ae:4c:
c0:17:89:72:6d:15:fa:cf:89:8b:fb:aa:6e:93:9b:
9d:66:c7:3b:14:e2:72:99:00:8e:4c:ef:d5:d0:e4:
bf:80:b6:28:d7:c2:a0:ca:39:d5:3f:ae:7b:f9:ac:
38:bd:62:92:08:9b:e1:f5:0f:46:79:d2:4d:9a:11:
d3:3d:a7:36:f8:0e:ff:5f:17:25:68:c2:13:86:6d:
0d:5e:52:9b:df:df:c7:7a:7a:95:78:55:0d:a7:2a:
b5:c2:ef:cb:5f:c8:7c:af:44:88:38:d9:27:c9:a7:
12:63:f6:26:67:7e:07:41:48:75:d8:ed:52:09:07:
c3:38:b4:09:10:ce:ab:00:94:30:bb:d8:23:32:80:
df:10:db:e2:26:ac:66:62:7e:73:1b:1b:ec:0c:eb:
51:cf:48:a8:63:52:8e:5d:d7:27:24:66:2c:52:e2:
51:84:e7:99:73:de:5f:5a:bf:ab:94:c1:6f:c3:ea:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3C:95:6C:70:3E:32:31:D1:CD:F8:85:55:EB:4F:AC:04:34:52:86
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/xTyVbHA-MjHRzfiFVetPrAQ0UoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.0.0/22
193.135.96.0/22
193.228.197.0-193.228.198.255
IPv6:
2a13:a200::/29
Signature Algorithm: sha256WithRSAEncryption
5a:94:a5:29:bd:36:43:d8:07:97:0b:85:10:b1:e2:66:41:0a:
9a:ed:bf:03:59:6c:f0:e8:7c:bc:00:23:01:95:9d:9d:35:ec:
39:ce:e5:95:65:36:0d:cf:33:59:65:7c:66:3d:d4:5d:20:6b:
5c:e7:46:21:2f:35:e3:7e:69:92:8b:91:15:9c:fa:8f:89:fd:
64:fc:53:82:92:36:ec:94:ce:4f:ed:d6:f1:6e:b7:1e:22:54:
fd:71:37:ee:c9:61:ec:f6:9a:17:b9:03:78:e1:36:3e:75:bc:
34:9c:09:14:87:2b:17:ef:4b:b5:d8:a2:06:19:4f:ed:b2:72:
c3:48:37:4e:c6:5a:00:52:4c:9b:74:a7:15:8f:36:4f:9a:bc:
f4:37:e6:f6:f5:12:be:60:1b:7d:b3:fe:d2:cd:5d:86:a8:ad:
e2:b6:a0:7f:53:00:14:5c:cd:e2:d4:ba:7b:94:84:fa:dc:64:
f7:99:2e:a6:5b:5c:71:65:ca:a5:91:3b:46:cd:35:0b:64:ab:
38:d7:be:62:74:75:84:52:6d:58:27:a0:d2:d4:5f:90:18:a0:
53:03:50:92:46:ea:d4:d5:ef:ff:76:eb:b9:5e:9e:a6:d1:9a:
16:9c:be:1c:6b:7a:66:cd:7d:08:59:cb:b5:ae:64:48:f9:d1:
d3:30:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:00 2024 by rpki-client on console-fra.rpki-client.org