Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/XlD-_4dPHMcUdP7SmAkx4IVzxKE.roa
File: XlD-_4dPHMcUdP7SmAkx4IVzxKE.roa (raw, json)
Hash identifier: NnrIu5L+bmeuQlU4hHJ8WDAZmIUyOIHcteJriwgrGzg=
Subject key identifier: 5E:50:FE:FF:87:4F:1C:C7:14:74:FE:D2:98:09:31:E0:85:73:C4:A1
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 018ADC8FB46462BE4DBF624552544BDB8AA8
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/XlD-_4dPHMcUdP7SmAkx4IVzxKE.roa
Signing time: Thu 28 Sep 2023 16:11:59 +0000
ROA not before: Thu 28 Sep 2023 16:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51020
IP address blocks: 5.62.136.0/24 maxlen: 24
5.62.142.0/24 maxlen: 24
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:8f:b4:64:62:be:4d:bf:62:45:52:54:4b:db:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Sep 28 16:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e50feff874f1cc71474fed2980931e08573c4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:d1:17:7a:23:21:3a:23:eb:f4:07:c1:27:
32:c8:c7:9d:98:9a:a5:4a:ce:af:52:f8:46:11:8a:
10:62:46:f5:2a:64:96:b9:32:26:fd:84:67:12:cf:
06:71:0b:0d:d6:23:99:06:fb:e4:a9:58:9b:77:58:
06:a1:86:c1:7a:4f:8f:04:77:b0:1b:fd:29:78:53:
49:4a:7f:16:a8:6c:55:30:a9:5e:d9:f8:e3:af:a5:
9f:86:5a:dc:63:7a:06:5f:c1:c0:04:82:9d:6e:f9:
71:7d:d0:73:22:6d:6b:2a:65:f5:47:e5:74:3d:ac:
60:34:0c:aa:d8:6b:10:19:01:f7:9c:bb:27:f8:46:
97:82:f3:1c:95:f9:11:e2:73:09:06:50:78:46:d0:
85:23:f3:3a:59:9e:f3:c7:b9:02:d5:5d:45:5d:ec:
96:b4:15:03:bc:cb:e7:4a:db:01:8a:41:2e:4a:fa:
0a:73:f9:52:44:8e:e7:4a:6f:82:b8:7c:6b:32:42:
bc:81:ad:79:00:9a:4d:78:4e:a9:14:6b:2a:8d:0e:
22:d2:dd:0f:da:c5:44:f0:0f:be:e4:8c:56:c5:51:
ca:07:3d:c8:e0:d8:42:6f:4a:2b:fb:1c:41:38:f1:
0f:72:8f:70:34:d7:42:84:b3:50:01:ee:92:2e:43:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:FE:FF:87:4F:1C:C7:14:74:FE:D2:98:09:31:E0:85:73:C4:A1
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/XlD-_4dPHMcUdP7SmAkx4IVzxKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.136.0/24
5.62.142.0/24
37.77.50.0/24
185.69.4.0-185.69.6.255
Signature Algorithm: sha256WithRSAEncryption
75:d1:bc:95:c5:e4:b9:a4:ac:06:f1:ee:91:7c:2b:f5:dc:82:
69:bb:9b:8e:64:8c:a6:07:83:8b:4d:f7:83:2d:ee:9a:32:78:
57:37:c4:0a:0e:d8:4b:9c:73:a8:25:e5:09:80:22:47:72:85:
73:7a:79:a8:a9:6d:6d:54:3c:17:57:ca:c6:3d:8c:1b:65:6c:
b3:7f:87:af:a0:7e:c5:72:e6:9c:7d:a8:31:43:46:3b:e9:8d:
f9:a6:63:7e:41:d3:ae:3c:7f:83:d2:1b:2a:a2:07:e9:5c:f7:
be:e2:c3:3d:94:d9:9c:d4:da:de:c3:fb:a6:f0:93:67:8c:57:
64:f0:30:a8:fd:9f:a0:13:39:b5:c2:26:5a:80:07:67:d0:6e:
10:ee:5e:6a:9d:16:76:8d:e4:aa:65:c1:00:ae:93:bf:49:1c:
d4:50:b5:fb:7b:38:82:f6:96:d4:b9:56:98:e8:3b:bd:46:15:
3e:ce:c3:1d:50:1d:c6:dc:19:b3:93:e9:7c:a9:ed:ca:e7:40:
c3:08:c6:be:6e:81:fb:c1:20:e8:42:ce:4b:59:16:7d:ba:09:
9d:aa:70:95:c9:9c:89:92:f8:33:2e:84:39:47:a4:8d:c3:6e:
68:ed:d3:fe:b4:83:9c:77:84:23:34:db:0d:f4:3a:82:64:78:
80:19:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 11:22:00 2023 by rpki-client on console-fra.rpki-client.org