Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XQntpnK4N8VxJw0eRXuGjEvzbcU.roa
File: XQntpnK4N8VxJw0eRXuGjEvzbcU.roa (raw, json)
Hash identifier: d3FgjuEoTfVkNtXx9hzOqTQ0Xoofp31Q9abK2pXgn5A=
Subject key identifier: 5D:09:ED:A6:72:B8:37:C5:71:27:0D:1E:45:7B:86:8C:4B:F3:6D:C5
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0189D705582F8D44FB72F6C1BC6BA7A0D890
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XQntpnK4N8VxJw0eRXuGjEvzbcU.roa
Signing time: Tue 08 Aug 2023 21:19:58 +0000
ROA not before: Tue 08 Aug 2023 21:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 85.153.56.0/24 maxlen: 24
85.153.75.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.104.0/22 maxlen: 22
85.153.7.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 05:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:05:58:2f:8d:44:fb:72:f6:c1:bc:6b:a7:a0:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Aug 8 21:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d09eda672b837c571270d1e457b868c4bf36dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e7:d1:fe:02:cb:d7:cc:19:d0:02:a7:cb:3e:
96:b5:77:93:3f:3b:c1:5d:2f:7e:71:1a:dd:88:57:
60:3d:09:b7:19:c0:ee:b7:93:90:8c:20:28:98:2e:
8c:0b:1e:b0:f6:74:e0:b6:46:f6:23:c3:79:1a:f1:
e4:0e:e7:fd:e1:42:dd:ac:39:4f:c6:2b:ec:cd:02:
f8:58:db:4c:04:d0:09:36:5e:6e:3d:ce:1a:4e:66:
a8:0a:83:f8:18:17:18:45:16:e4:67:e6:02:f1:70:
fd:2b:1c:5c:1a:bf:68:37:67:6a:b1:c3:22:76:33:
a8:78:64:c2:af:05:10:d5:c4:88:22:9c:42:d4:86:
47:64:00:2c:b0:f2:77:2d:21:72:0e:64:5d:52:16:
85:1b:d3:56:15:b7:33:db:dd:31:62:13:b3:c6:17:
94:2b:14:54:17:94:95:b1:80:aa:b0:5d:56:55:20:
4c:31:a4:92:41:97:26:c7:e3:db:3b:5e:2c:ad:7a:
11:ae:4e:a1:5a:44:b6:77:a0:fb:f5:79:93:22:6c:
70:df:a4:af:3a:5e:1e:b6:12:22:f9:95:2a:d7:36:
54:d5:c9:91:55:96:33:71:05:26:16:bb:dc:80:87:
32:1c:e4:8f:ec:29:65:34:e5:f5:d1:fa:6b:39:79:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:ED:A6:72:B8:37:C5:71:27:0D:1E:45:7B:86:8C:4B:F3:6D:C5
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/XQntpnK4N8VxJw0eRXuGjEvzbcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.6.0-85.153.8.255
85.153.56.0/24
85.153.74.0/23
85.153.104.0/22
Signature Algorithm: sha256WithRSAEncryption
98:0f:33:ab:e4:38:a0:4b:e6:e4:44:f2:6c:5e:cb:0f:0f:d7:
ba:9f:ec:ec:75:a2:5f:c1:49:3d:59:58:c2:63:cc:32:c0:77:
ed:de:22:ed:ce:aa:70:1c:32:e0:70:81:2d:7b:97:90:54:8e:
19:f4:93:1a:e2:37:eb:73:d7:96:e3:7b:c6:07:67:76:65:d5:
2a:a5:9e:f4:3a:96:36:03:76:29:89:5d:29:d0:99:e3:aa:70:
77:97:75:41:b3:8e:97:15:89:5a:01:89:30:c2:4c:de:79:7c:
fb:3d:95:a7:b9:c6:24:a4:6f:17:ef:33:a9:7e:c8:08:08:15:
37:91:9d:fd:1b:dc:ea:65:f7:00:de:91:04:27:01:f1:66:c6:
8b:16:26:b5:2a:c0:6d:f2:bc:2c:6a:f7:d2:d5:65:c1:4c:af:
e7:b8:4e:5f:4c:42:a4:29:ec:3a:d7:f4:c4:43:f4:07:81:ed:
da:57:8e:81:12:d5:48:a6:f9:bc:56:29:37:77:91:b5:73:e9:
8e:cd:51:35:e9:f8:9a:51:14:cc:2e:19:03:a3:46:a2:35:cd:
ab:fb:91:43:fb:ac:ff:98:f7:7b:19:97:b1:b4:7a:fa:f0:35:
b0:e8:5d:7e:70:8f:a6:02:93:b3:ac:d5:4a:45:e1:d7:12:34:
a1:a0:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org