Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/xIBK2VZjLFr-_6-0TcPYybVTSYo.roa
File: xIBK2VZjLFr-_6-0TcPYybVTSYo.roa (raw, json)
Hash identifier: bUhPXZkVoQsok3/q8iDl4e0Eyp+3T3iX9gfH5LsqPOY=
Subject key identifier: C4:80:4A:D9:56:63:2C:5A:FE:FF:AF:B4:4D:C3:D8:C9:B5:53:49:8A
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 01856FF94E4A671DF92B6532229F4E8B416B
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/xIBK2VZjLFr-_6-0TcPYybVTSYo.roa
Signing time: Mon 02 Jan 2023 00:54:47 +0000
ROA not before: Mon 02 Jan 2023 00:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.41.140.0/22 maxlen: 22
213.179.192.0/19 maxlen: 19
213.179.192.0/22 maxlen: 22
213.179.196.0/22 maxlen: 22
91.216.207.0/24 maxlen: 24
188.122.64.0/19 maxlen: 24
91.198.152.0/24 maxlen: 24
185.52.12.0/22 maxlen: 24
185.50.104.0/22 maxlen: 22
213.163.64.0/19 maxlen: 24
162.245.204.0/22 maxlen: 22
5.200.0.0/19 maxlen: 24
185.179.202.0/23 maxlen: 24
213.179.204.0/22 maxlen: 22
213.179.200.0/22 maxlen: 22
185.179.200.0/23 maxlen: 24
213.179.210.0/23 maxlen: 23
213.179.209.0/24 maxlen: 24
213.179.212.0/22 maxlen: 22
213.179.216.0/22 maxlen: 22
212.19.224.0/22 maxlen: 22
213.179.220.0/22 maxlen: 22
146.247.76.0/22 maxlen: 22
109.200.192.0/19 maxlen: 24
109.200.194.0/23 maxlen: 23
109.200.208.0/22 maxlen: 22
162.244.52.0/22 maxlen: 23
185.197.24.0/22 maxlen: 23
104.153.84.0/22 maxlen: 22
193.43.218.0/23 maxlen: 23
31.204.132.0/22 maxlen: 22
31.204.128.0/19 maxlen: 24
31.204.156.0/23 maxlen: 23
138.128.136.0/22 maxlen: 22
91.195.234.0/23 maxlen: 23
138.128.140.0/22 maxlen: 22
2a01:9580::/32 maxlen: 34
2a04:c600::/29 maxlen: 34
2a00:1630::/29 maxlen: 32
2a00:1631::/32 maxlen: 32
2a00:1637::/32 maxlen: 32
2a00:1d26::/32 maxlen: 34
2a00:1630::/32 maxlen: 48
2a00:1632::/32 maxlen: 32
2a00:1d20::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:4e:4a:67:1d:f9:2b:65:32:22:9f:4e:8b:41:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jan 2 00:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4804ad956632c5afeffafb44dc3d8c9b553498a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:0f:50:b0:76:5d:91:bd:fb:69:a7:e5:93:
e7:ea:a8:0a:7c:f1:80:b4:0e:1d:6a:f8:e2:f6:06:
3a:37:71:ca:b2:80:84:8a:01:93:1c:39:45:57:ce:
bc:2d:52:8c:06:f7:74:43:f4:7e:cd:e6:25:67:56:
12:ee:78:66:b2:2a:5f:6d:9a:4c:67:e9:6f:5c:a2:
7a:25:f3:1c:69:76:fa:36:e9:76:46:e2:d7:e8:57:
ab:87:5f:da:ce:b1:d5:4a:3b:c4:64:3d:d5:55:36:
d2:6c:e9:f8:dc:08:b1:49:84:3c:f0:27:90:a9:db:
70:2b:66:b3:ef:ab:2d:74:e2:56:ba:1c:39:89:24:
d8:48:49:fe:99:35:9d:54:31:6e:8d:18:c3:06:75:
c7:d0:0b:87:d6:48:7a:1a:05:36:7e:61:a7:ee:cf:
55:ba:81:cf:db:b3:ff:e7:78:cc:4c:e0:91:7d:72:
d5:d8:23:92:58:9c:ee:d8:a2:b9:ec:2c:07:3a:b6:
59:03:26:f2:18:fb:cf:4e:71:69:a1:70:f5:06:59:
07:cf:62:1e:a3:e6:f0:83:da:87:a1:a9:d4:94:df:
47:65:39:3f:2c:40:25:5d:6a:e2:5a:fc:bf:6a:a5:
13:a7:b8:74:19:3a:2a:ad:72:bd:f0:0a:45:17:bd:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:4A:D9:56:63:2C:5A:FE:FF:AF:B4:4D:C3:D8:C9:B5:53:49:8A
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/xIBK2VZjLFr-_6-0TcPYybVTSYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.0.0/19
31.204.128.0/19
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.76.0/22
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
212.19.224.0/22
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
Signature Algorithm: sha256WithRSAEncryption
45:d5:77:39:33:8d:f3:36:4d:83:c5:5d:01:cd:b5:1d:d8:8f:
a8:c6:25:91:58:79:01:37:80:c3:3e:b4:eb:f4:97:d6:be:79:
c8:21:95:90:12:9d:6b:33:e6:80:77:47:da:ac:33:c5:0a:bb:
a0:ba:f1:db:11:79:15:83:cd:03:ec:ec:a4:aa:8d:b9:6e:f3:
88:3b:bf:f8:10:39:ee:6d:c1:2c:57:43:10:bc:39:02:b6:bb:
9b:5d:78:ec:b3:aa:09:b7:c4:69:8e:3a:3d:9a:ad:21:2e:91:
08:56:70:b1:f1:82:a1:49:f2:d2:ed:11:c3:8a:4b:b8:d5:23:
f5:be:e2:da:3b:57:7a:5f:d4:e0:75:2d:8c:dd:bd:45:7f:27:
68:f6:8d:22:cc:7c:e4:9a:aa:a9:52:97:f9:ac:b9:ff:72:51:
5d:d1:63:1b:70:41:81:b0:b4:1c:43:0e:72:b4:c0:b2:41:c8:
01:d5:36:a9:b7:5a:2c:da:29:38:4a:ca:b6:1c:e1:cc:c4:58:
74:c3:0b:68:a5:ce:12:71:ac:b3:8d:c6:7c:f3:9b:73:49:47:
62:30:22:ce:3e:33:10:13:d2:42:71:76:eb:d5:4c:aa:ee:f2:
45:da:5d:ed:46:e0:46:eb:ec:dc:dc:73:e4:d3:22:98:ea:2d:
79:ac:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org