Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/xuqMafE-U7te5irtJ3rBLh8E7EU.roa
File: xuqMafE-U7te5irtJ3rBLh8E7EU.roa (raw, json)
Hash identifier: 8NoHuc86QRj5BMQ0UaRsP9pGidjZRtWw89nELDYgTgo=
Subject key identifier: C6:EA:8C:69:F1:3E:53:BB:5E:E6:2A:ED:27:7A:C1:2E:1F:04:EC:45
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 018C020AF44C039FAA14F7C7DC74E3377166
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/xuqMafE-U7te5irtJ3rBLh8E7EU.roa
Signing time: Fri 24 Nov 2023 15:55:21 +0000
ROA not before: Fri 24 Nov 2023 15:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
78.155.198.0/24 maxlen: 24
185.193.90.0/23 maxlen: 24
92.255.62.0/23 maxlen: 24
185.42.164.0/22 maxlen: 24
79.141.64.0/20 maxlen: 24
79.141.64.0/24 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:0a:f4:4c:03:9f:aa:14:f7:c7:dc:74:e3:37:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Nov 24 15:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6ea8c69f13e53bb5ee62aed277ac12e1f04ec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:23:83:44:c2:19:93:92:0a:2c:0b:22:b1:
3d:a3:97:d5:2e:58:f5:ae:1f:b7:86:4b:19:b0:4b:
b9:8e:a3:ff:a7:0a:99:da:5a:7d:83:ba:57:19:a6:
cd:de:25:73:67:0c:88:87:19:06:67:ce:15:13:90:
ce:61:e6:6d:5e:47:75:c4:02:33:04:ec:13:f1:23:
10:51:62:74:92:b0:92:12:f5:e7:40:15:15:4e:42:
2e:24:dc:38:de:1f:3d:09:fc:19:d2:06:df:51:5b:
7f:07:71:4e:00:f3:8b:cd:31:2b:27:e0:9d:3a:58:
98:08:07:1b:7b:32:79:c8:bd:76:7d:c7:81:e4:25:
f4:62:f5:24:3f:88:dc:b1:9b:3c:a8:96:d9:0a:a9:
1b:bb:91:49:58:2d:c8:17:8c:11:40:1f:04:b8:65:
af:a1:f6:f0:3d:26:29:6f:9d:b2:64:16:ab:7b:04:
8e:a5:f5:60:64:7a:2c:51:42:e6:da:0d:fc:2c:34:
51:ce:8b:7f:04:8e:6e:e0:43:ff:73:71:5c:3a:9d:
26:a4:cb:cc:17:cf:9a:eb:d9:dd:e4:88:30:e1:33:
15:f1:61:21:c6:ab:24:85:33:51:f5:55:9c:80:0b:
ed:b4:57:a3:14:35:42:1b:92:e3:88:f6:cf:48:9a:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EA:8C:69:F1:3E:53:BB:5E:E6:2A:ED:27:7A:C1:2E:1F:04:EC:45
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/xuqMafE-U7te5irtJ3rBLh8E7EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.155.198.0/24
79.141.64.0/20
92.255.62.0/23
185.42.164.0/22
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
45:8a:71:14:3b:e0:14:c9:1b:84:c0:29:bb:1a:69:ff:27:5d:
19:45:70:75:33:48:d2:9e:b8:76:20:b4:5d:b5:dc:ba:01:70:
81:f7:09:58:c1:c1:d8:c8:42:0a:1d:da:c9:27:49:f9:fd:1d:
9d:a0:a5:b1:62:1d:70:04:52:81:35:49:ec:cf:eb:c5:19:de:
19:fb:20:00:06:90:ce:b0:b3:87:5f:c0:75:27:1d:9d:8d:8e:
89:bf:e6:bf:f7:86:94:fc:83:05:b5:c0:51:cd:56:4f:15:dc:
af:36:91:14:0b:62:9f:61:8a:d7:f7:15:1f:15:4d:41:95:19:
1c:aa:3b:1f:86:c7:a6:1e:e1:75:43:5e:3f:70:6b:8c:d2:97:
ba:e1:b3:14:54:07:bd:01:89:05:71:ea:5b:e2:94:9c:af:d9:
da:b6:7d:6e:4b:ce:01:86:03:ad:0d:67:17:33:56:fe:12:4f:
07:cb:7c:9d:a8:e8:8a:45:f1:3d:15:9d:cc:18:04:40:cb:a4:
aa:bd:2e:3e:48:73:ed:20:7e:7f:39:0f:a5:db:b0:c2:e5:7d:
e1:94:c2:48:b7:7c:8e:33:55:3e:98:5c:f5:8b:a1:c7:fe:93:
7a:f3:bd:47:c3:cf:52:1c:c9:3c:75:b8:de:ec:9f:32:e3:c2:
aa:85:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:37 2024 by rpki-client on console-fra.rpki-client.org