Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/XVgsmefkwP_2A_58T7JlHOEVNoY.roa
File: XVgsmefkwP_2A_58T7JlHOEVNoY.roa (raw, json)
Hash identifier: 1UGm99wjPPDM+rmoRkPTUH9vd7Kit1o7s6+CyQ0M7vc=
Subject key identifier: 5D:58:2C:99:E7:E4:C0:FF:F6:03:FE:7C:4F:B2:65:1C:E1:15:36:86
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 01856D01890F2FCD08BEF55CA2472344DB78
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/XVgsmefkwP_2A_58T7JlHOEVNoY.roa
Signing time: Sun 01 Jan 2023 11:04:55 +0000
ROA not before: Sun 01 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41872
IP address blocks: 185.161.20.0/22 maxlen: 22
94.198.248.0/21 maxlen: 22
94.100.144.0/20 maxlen: 20
37.209.176.0/20 maxlen: 20
37.110.200.0/21 maxlen: 24
212.35.0.0/19 maxlen: 19
91.190.0.0/19 maxlen: 19
81.92.96.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:89:0f:2f:cd:08:be:f5:5c:a2:47:23:44:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Jan 1 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d582c99e7e4c0fff603fe7c4fb2651ce1153686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:73:02:a6:c7:ef:d5:95:77:51:3a:53:bf:
94:38:0e:6b:c7:51:1e:31:ca:3c:8d:52:47:31:52:
ac:fc:d6:40:dd:d1:7d:9e:a6:da:97:42:a4:ee:62:
42:0f:0a:1d:7c:f2:b3:9a:a1:07:4b:16:ff:d0:dd:
5e:4e:e0:4b:61:0e:1e:5d:cf:c8:67:fc:b7:d9:bf:
9f:27:1a:cd:a7:5a:c9:88:24:4a:02:4c:e3:96:cb:
f1:46:71:64:4a:b6:56:b8:78:58:70:62:98:e4:eb:
5d:d9:34:54:cc:c0:fb:2f:4f:79:95:c3:15:19:22:
e5:db:f1:36:66:9a:6b:2a:40:b9:0c:cf:6a:7d:56:
ad:7a:b4:5f:5c:c9:3e:43:ee:60:bb:af:4c:5f:8f:
20:6e:7b:88:1c:ac:75:eb:03:b9:4b:64:29:a9:69:
ea:9c:6b:a4:ac:ce:45:71:19:d7:6e:2b:a0:7d:0b:
ee:de:51:da:6c:c5:38:8e:f7:73:6d:80:f0:eb:14:
8e:11:bb:ec:06:f0:8c:47:80:1e:f5:94:79:b7:a0:
0f:9f:5b:56:85:52:7e:53:69:dd:48:af:e7:69:56:
07:58:73:fd:13:96:85:c5:09:b6:8e:8d:3f:a8:62:
0d:33:04:8d:a5:0d:46:58:1a:99:a8:8d:aa:bd:e4:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:2C:99:E7:E4:C0:FF:F6:03:FE:7C:4F:B2:65:1C:E1:15:36:86
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/XVgsmefkwP_2A_58T7JlHOEVNoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.200.0/21
37.209.176.0/20
81.92.96.0/20
91.190.0.0/19
94.100.144.0/20
94.198.248.0/21
185.161.20.0/22
212.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
37:82:9b:70:15:54:ee:b7:29:4e:0b:f2:09:a9:1c:c2:0d:59:
95:3d:ca:e5:db:96:71:9d:d3:af:7b:b2:43:4d:91:47:a4:ad:
2f:00:17:f2:95:87:67:ea:86:61:77:bb:a6:83:b9:28:8a:63:
7e:b8:9f:e6:a9:dc:d6:2b:fd:69:27:9e:4a:73:b0:99:5d:01:
91:ef:4b:85:6f:45:76:0d:5d:65:d2:ae:45:27:ef:65:fc:8d:
09:2c:1b:17:e1:4a:56:4d:59:39:68:b1:ea:a9:e9:d3:23:c0:
7f:6a:fd:ee:9a:f4:c4:97:64:3b:ff:bc:6b:b1:dd:b6:15:14:
2f:5d:93:19:17:2e:7d:af:96:f2:3f:90:8b:29:bf:fc:4a:c8:
7b:85:b7:56:73:e1:f1:94:47:51:53:10:1e:84:bb:87:86:09:
71:e1:f9:39:96:92:ca:c0:ef:b6:2d:4b:2b:72:b4:53:d4:41:
f5:fc:58:77:cb:e5:ec:4f:e0:77:a1:ae:10:1f:34:0e:05:6c:
a2:23:14:ea:fb:20:7a:84:a0:bb:de:d3:06:ca:9f:2a:e9:29:
b5:6c:12:c1:1f:37:5d:05:a5:bb:3c:33:ec:7c:1d:58:71:81:
5c:9b:bb:3c:3e:59:ab:7f:dd:5b:19:d3:6c:40:5d:f4:2f:64:
c2:53:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:33 2023 by rpki-client on console-fra.rpki-client.org