Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/swxvXDEnVB6IkvRyPliKMIDxZCU.roa
File: swxvXDEnVB6IkvRyPliKMIDxZCU.roa (raw, json)
Hash identifier: of0D1TO4UXZOfQXIg2+XlOFVE8nvNHdBsjuqOFpHbO0=
Subject key identifier: B3:0C:6F:5C:31:27:54:1E:88:92:F4:72:3E:58:8A:30:80:F1:64:25
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 01856BA57E76F5D39D8C57B278A70855B470
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/swxvXDEnVB6IkvRyPliKMIDxZCU.roa
Signing time: Sun 01 Jan 2023 04:44:45 +0000
ROA not before: Sun 01 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12360
IP address blocks: 185.39.108.0/22 maxlen: 24
93.119.240.0/20 maxlen: 24
82.115.96.0/19 maxlen: 24
5.57.192.0/21 maxlen: 24
212.7.160.0/19 maxlen: 24
2a02:1628::/32 maxlen: 56
Validation: Failed, certificate revoked on Mon 11 Sep 2023 14:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:7e:76:f5:d3:9d:8c:57:b2:78:a7:08:55:b4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Jan 1 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30c6f5c3127541e8892f4723e588a3080f16425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:d6:bb:03:2e:13:bd:f6:ad:6a:6f:8c:66:
d0:da:da:35:5b:38:5b:71:84:97:fd:95:cc:00:0c:
9e:3b:a2:8d:e8:54:c8:f4:cb:c6:c5:86:e7:63:11:
41:d0:95:d1:d1:30:c5:24:ae:09:e4:73:95:0f:2a:
93:02:3c:c8:ab:c4:30:a0:17:8c:13:b5:2a:f1:e1:
54:26:bd:f1:50:ea:d2:2a:92:27:c2:74:00:da:34:
e9:08:be:9f:92:13:d5:22:1d:06:75:25:a8:ce:f2:
99:d5:da:e2:b6:a7:76:da:ca:30:d0:a0:70:34:98:
47:57:85:97:8f:92:cb:f5:7b:60:23:0e:d0:b4:be:
21:d7:b2:61:da:05:34:f7:66:59:cc:32:12:f5:10:
f3:d8:94:c1:ad:9c:58:a0:8e:c1:20:ee:41:06:f4:
ce:d4:49:bc:0a:24:9b:a9:b0:42:99:0e:12:f2:b1:
33:46:7b:f4:d0:d0:f0:11:24:c4:bb:f8:af:c3:45:
2a:6f:20:53:ad:a1:63:d2:08:8b:97:4f:bc:56:c7:
7b:16:3d:fc:21:cc:19:b4:fa:cf:08:f7:83:cf:98:
69:e7:27:83:38:e6:83:66:54:81:ca:3e:8f:c5:47:
5e:ef:2c:c3:8a:b4:b8:a0:45:4a:e5:76:e4:2c:98:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:6F:5C:31:27:54:1E:88:92:F4:72:3E:58:8A:30:80:F1:64:25
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/swxvXDEnVB6IkvRyPliKMIDxZCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.192.0/21
82.115.96.0/19
93.119.240.0/20
185.39.108.0/22
212.7.160.0/19
IPv6:
2a02:1628::/32
Signature Algorithm: sha256WithRSAEncryption
4e:45:42:f8:c7:9d:e7:69:dd:70:c9:ec:e5:58:1b:6b:07:0b:
0a:d5:ff:1c:df:db:cc:86:5e:6a:7e:1e:9f:11:56:11:d0:14:
6a:eb:07:64:05:1f:d1:ca:c5:7f:56:67:ca:03:7d:cf:2c:82:
14:c9:fd:bd:8e:d0:86:7f:4b:b6:ee:c0:83:ae:9b:2d:d6:e1:
38:ef:02:c9:ce:d1:46:6b:93:b3:6d:c3:db:04:93:f2:a5:3b:
b8:cb:a6:cb:cd:15:78:aa:85:90:19:af:38:31:6a:14:8a:4f:
ac:20:84:91:47:44:8f:dc:39:23:70:a2:db:cd:01:f5:30:b5:
0d:c4:70:eb:31:1a:22:db:a2:fc:6d:9c:f3:fa:35:e1:15:bb:
59:23:7b:9c:fa:6e:7c:0f:af:7a:77:53:8a:87:51:86:c2:4f:
0e:26:ec:8f:85:53:ed:b8:42:e4:74:0a:da:e5:e2:d9:48:29:
61:76:e7:46:67:51:9f:fd:c9:b1:8b:40:84:94:c0:ac:ca:ad:
f5:7f:4b:d2:0c:4a:2f:74:c5:8a:95:95:9f:b4:aa:3a:13:42:
d0:68:0d:ab:7b:c0:b4:4b:7f:8c:ca:13:7b:47:ef:e0:78:c2:
eb:9a:3c:a9:93:bd:16:bf:a4:71:cc:f8:58:0d:08:f3:16:e3:
d3:ec:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org