Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/XqhxQVJG51OCYgvYQ41ex6Rusvc.roa
File: XqhxQVJG51OCYgvYQ41ex6Rusvc.roa (raw, json)
Hash identifier: XTdgeyoIKJ4jDCxI7RXZZ/a4789yFEHJAgoHkhYCo+k=
Subject key identifier: 5E:A8:71:41:52:46:E7:53:82:62:0B:D8:43:8D:5E:C7:A4:6E:B2:F7
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F099D46924D4651E8A7C054CCDCBA4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/XqhxQVJG51OCYgvYQ41ex6Rusvc.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6778
IP address blocks: 195.136.71.0/24 maxlen: 24
195.136.192.0/18 maxlen: 18
195.136.0.0/18 maxlen: 18
194.183.56.0/23 maxlen: 23
194.183.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:99:d4:69:24:d4:65:1e:8a:7c:05:4c:cd:cb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea871415246e75382620bd8438d5ec7a46eb2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:68:a2:8c:fe:71:32:5e:07:5f:4b:af:c2:
17:4b:86:17:2f:63:c2:b4:0c:70:7a:77:a8:a4:45:
63:70:d3:55:d6:21:12:0e:bc:2f:6a:e7:c3:45:09:
8e:d1:78:1b:a6:19:5d:bc:12:24:84:5c:f7:c5:e9:
eb:3d:93:9a:8e:d2:86:7b:48:6f:61:0d:a5:64:87:
8e:41:f7:e6:ae:4e:2d:b2:87:f5:c1:d1:e2:06:28:
35:10:d5:5c:81:c7:b7:d6:50:fe:ae:ce:87:f6:2d:
ab:5f:cc:1b:1c:9e:4c:20:ba:b9:c5:cd:c9:02:65:
6a:a0:b4:0d:78:12:c7:15:b7:31:9e:ab:d9:a2:23:
11:aa:4b:2c:4a:05:08:72:4f:80:0e:d5:6d:03:7a:
9b:36:28:4e:8a:84:a5:41:42:4f:f7:92:d2:e6:63:
fe:75:1e:8a:f1:2f:0c:3e:6b:18:64:ea:82:36:07:
59:de:91:7e:b0:9d:7d:2c:09:9c:3f:b2:16:75:c1:
5f:f2:bf:b5:ff:da:c5:ef:4b:b2:2f:5e:f4:5a:a6:
75:2c:90:82:0c:af:3a:a3:67:d0:73:35:ea:f5:54:
24:a4:2c:cc:f7:18:c7:d7:44:5b:a9:7e:41:ac:ca:
5c:0e:4e:e0:7d:4d:ef:f7:25:c0:15:f9:a0:09:5c:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:71:41:52:46:E7:53:82:62:0B:D8:43:8D:5E:C7:A4:6E:B2:F7
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/XqhxQVJG51OCYgvYQ41ex6Rusvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.56.0/23
194.183.62.0/24
195.136.0.0/18
195.136.71.0/24
195.136.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ad:85:00:78:f1:f1:43:f0:e5:44:fe:2d:ba:df:e3:1b:b3:4b:
ca:9d:72:96:4b:8a:8a:69:68:1a:3e:43:1d:28:b0:c0:2c:3b:
71:38:05:36:f7:3c:34:d7:6e:51:6c:19:e0:78:89:18:09:b1:
81:4c:c8:8d:ea:8b:c5:ee:db:45:3d:ac:8e:74:21:cb:2b:3f:
7e:02:3e:e0:10:da:a0:ba:45:f8:29:4f:b2:36:f9:a5:cd:6f:
e3:1e:4b:10:31:57:43:3b:21:45:50:09:e3:71:de:c1:8b:e1:
e0:dd:9f:4e:69:dc:78:c4:29:25:25:7b:75:59:1b:df:4d:39:
4c:b4:a1:9c:b3:61:6c:ed:04:68:08:3e:0c:1d:ce:09:4f:38:
cb:f3:ca:c2:54:5f:26:59:88:9b:e8:a9:d3:ba:8b:0e:3e:9d:
82:56:54:9d:11:a4:dc:20:ed:74:f6:86:4d:97:7e:41:45:2d:
e9:af:bd:7a:2b:32:83:a0:dc:43:ed:49:2c:8b:aa:8f:dd:62:
44:68:e8:77:f6:57:54:18:52:f2:be:87:7f:57:14:0e:2f:8e:
3c:ac:b7:3a:c0:61:df:be:cf:43:fb:d4:a7:9c:e9:49:6c:0f:
2c:74:e9:98:19:63:bd:28:e6:17:3a:6c:6a:6a:50:44:40:e7:
2b:ce:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org