Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/XozpQXZI2jzHzy2vXpG19vyu6bs.roa
File: XozpQXZI2jzHzy2vXpG19vyu6bs.roa (raw, json)
Hash identifier: z+kbC5kvm6AUSqguCxdazYsaR8DjMbhnQXvx/wRokNA=
Subject key identifier: 5E:8C:E9:41:76:48:DA:3C:C7:CF:2D:AF:5E:91:B5:F6:FC:AE:E9:BB
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 01893F8B26E4E3EBEEE554362B9A6D5BD529
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/XozpQXZI2jzHzy2vXpG19vyu6bs.roa
Signing time: Mon 10 Jul 2023 11:23:51 +0000
ROA not before: Mon 10 Jul 2023 11:23:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51013
IP address blocks: 185.140.108.0/24 maxlen: 24
193.32.235.0/24 maxlen: 24
185.111.89.0/24 maxlen: 24
185.111.88.0/24 maxlen: 24
185.111.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 11:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:8b:26:e4:e3:eb:ee:e5:54:36:2b:9a:6d:5b:d5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Jul 10 11:23:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e8ce9417648da3cc7cf2daf5e91b5f6fcaee9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:bb:a7:d5:a5:ee:0f:d7:3a:a1:3d:9a:c8:
4b:7a:55:2f:8b:a2:e8:d4:f4:9d:e4:3f:88:0f:7b:
6f:42:5a:e9:2f:60:40:30:66:f8:cc:fe:cb:ff:4e:
6c:fc:79:b2:f7:9e:f8:bf:f1:20:0f:ce:77:c9:b6:
5e:8a:00:92:63:e8:1c:e9:5f:e3:67:a0:55:45:62:
cf:12:95:fc:3e:2d:ca:e2:09:f9:88:0b:55:9f:26:
90:67:4b:a9:bb:39:39:97:94:56:8a:88:0c:b1:47:
be:b0:27:26:66:03:4c:bd:ad:b1:a3:e9:4b:e1:b8:
54:1b:a1:89:c1:7a:67:4f:62:13:b6:27:27:cf:a1:
20:8d:e8:be:51:6e:d1:ad:51:54:1e:67:cf:32:6f:
eb:47:7a:5a:c9:97:22:83:0b:30:25:f0:9e:03:78:
c9:08:17:af:7e:ff:5a:ab:fb:55:9f:2e:a3:a6:98:
48:9c:b9:13:37:79:2a:52:04:fa:36:40:bc:20:df:
e2:3f:7c:6c:e1:ec:ba:e6:4d:a6:2f:eb:ec:5a:3f:
33:15:ee:e7:48:7d:78:4e:72:09:95:ac:7b:35:85:
78:c5:24:c5:da:9e:45:98:b6:7e:ba:53:cf:71:c6:
b7:94:b1:9b:d9:d7:92:e1:aa:ab:ba:b1:08:42:45:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:E9:41:76:48:DA:3C:C7:CF:2D:AF:5E:91:B5:F6:FC:AE:E9:BB
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/XozpQXZI2jzHzy2vXpG19vyu6bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.88.0/22
185.140.108.0/24
193.32.235.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9c:50:34:3d:c6:cf:65:7c:6b:13:b2:d9:cd:91:6b:82:de:
f7:de:ad:21:ef:36:ba:9e:ec:ea:65:ee:a4:fd:3f:e6:2a:3b:
3e:e8:5c:00:f6:5f:d9:3a:56:da:61:7d:e8:1d:da:33:4c:18:
1b:43:99:d7:c3:68:21:33:2d:35:f4:75:68:8f:80:e7:71:1b:
04:d7:99:e7:9f:93:6e:b5:68:79:e6:b7:0b:47:c9:5d:c0:27:
da:81:e3:d3:63:43:da:88:5c:53:16:4e:27:13:15:12:10:40:
f1:40:00:43:51:5a:3a:86:64:ba:00:a6:fb:63:2a:10:e3:8b:
bc:4f:9a:51:7e:c6:8b:8f:b7:ec:5b:4d:1c:c3:9b:6c:d4:cf:
36:14:f9:3e:d3:e4:df:e8:70:67:14:c0:0b:db:d2:be:96:4a:
cd:eb:67:f1:fa:b8:ed:fa:d1:67:1a:db:a6:e5:a3:a2:c7:c5:
e7:53:6b:76:ad:9d:19:48:9a:66:88:b6:58:9f:cd:c5:79:63:
4c:ea:97:ab:17:95:95:eb:30:89:7d:bf:13:c2:d5:51:a7:73:
9c:1c:53:b5:74:64:4e:63:1a:8d:6b:b9:66:29:8e:0b:5e:1d:
25:f0:94:e1:64:bc:90:b6:1d:9c:d8:14:b0:c8:d9:9d:d8:66:
c8:df:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-fra.rpki-client.org