Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/plCLShimec4l2FPGb0Q0EPBDWE4.roa
File: plCLShimec4l2FPGb0Q0EPBDWE4.roa (raw, json)
Hash identifier: Jt7r5xN0YeuVXFjKJ5gX+kgimU11x01SAF1csig/QG0=
Subject key identifier: A6:50:8B:4A:18:A6:79:CE:25:D8:53:C6:6F:44:34:10:F0:43:58:4E
Certificate issuer: /CN=0d41d0a6e6df2e18c256732368d6e76828931310
Certificate serial: 01856CCB0D46975ABF7F576EC5472B07A495
Authority key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/plCLShimec4l2FPGb0Q0EPBDWE4.roa
Signing time: Sun 01 Jan 2023 10:05:24 +0000
ROA not before: Sun 01 Jan 2023 10:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51546
IP address blocks: 185.127.228.0/22 maxlen: 22
185.176.96.0/22 maxlen: 22
88.218.23.0/24 maxlen: 24
88.218.20.0/22 maxlen: 22
185.181.44.0/22 maxlen: 22
2a09:9680::/29 maxlen: 29
2a03:9920::/32 maxlen: 32
2a0a:f80::/29 maxlen: 29
2a0a:c080::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0d:46:97:5a:bf:7f:57:6e:c5:47:2b:07:a4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d41d0a6e6df2e18c256732368d6e76828931310
Validity
Not Before: Jan 1 10:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6508b4a18a679ce25d853c66f443410f043584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:72:75:16:95:92:cc:75:6e:b4:70:01:fd:
03:b0:5a:b4:fa:60:24:73:b3:b3:89:7e:72:be:7c:
83:62:8a:7a:17:7e:20:cb:8f:5b:f6:20:81:8f:88:
c5:c4:9b:12:cd:93:87:ae:5b:e0:61:88:17:16:98:
70:56:e7:98:fb:31:aa:e8:9e:db:3e:e2:37:2c:2c:
8c:e4:16:b1:03:a1:83:db:50:30:96:a9:2d:3e:f4:
8f:92:9d:60:32:2d:37:71:b7:6f:85:1f:57:d0:54:
81:00:b8:7c:a6:76:e4:7a:9f:52:0f:ff:ca:91:09:
c5:b8:97:a1:c6:dc:34:1f:02:d9:6c:20:02:81:78:
05:cd:59:52:3b:79:7a:fa:2a:42:3c:ef:5b:a8:dc:
35:8f:ca:1e:8e:cc:22:3e:1d:e6:ac:39:27:5c:a1:
45:7e:f0:79:25:12:33:08:b5:ea:08:d6:94:e7:fa:
3f:8e:0e:80:d6:38:b1:45:7e:f2:5e:ad:e9:89:2e:
a8:99:54:5c:c7:c6:24:ec:a8:f2:62:6e:58:29:26:
98:1e:74:00:41:3a:f5:a0:4a:76:9b:85:5b:18:70:
2e:07:21:2e:c2:e0:ea:0e:22:16:43:2c:15:54:f0:
63:d8:2d:1c:fa:03:62:98:b8:5d:82:ed:94:2a:78:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:8B:4A:18:A6:79:CE:25:D8:53:C6:6F:44:34:10:F0:43:58:4E
X509v3 Authority Key Identifier:
keyid:0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/plCLShimec4l2FPGb0Q0EPBDWE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.20.0/22
185.127.228.0/22
185.176.96.0/22
185.181.44.0/22
IPv6:
2a03:9920::/32
2a09:9680::/29
2a0a:f80::/29
2a0a:c080::/29
Signature Algorithm: sha256WithRSAEncryption
51:da:c0:de:cb:d8:84:23:0e:e0:e1:2d:aa:59:7d:4e:45:8a:
e7:e5:bf:d4:8e:c8:bc:99:20:ee:e4:55:cb:03:43:1d:81:f1:
42:e9:59:7c:9c:39:3c:80:17:d7:db:e4:34:95:e0:74:59:f0:
ee:56:d6:e1:9e:62:ea:79:27:01:f0:fd:2f:e6:84:ca:6b:ea:
42:c8:7d:87:64:19:c6:d2:22:a6:05:44:05:e8:e9:d8:e7:f2:
86:b2:dd:e7:ac:2c:ff:c1:56:cb:ab:82:1d:3d:ad:6a:04:50:
cc:a2:de:b5:51:a0:33:ac:f9:28:8d:0b:42:e0:f7:6e:78:4e:
40:44:ed:01:69:c6:7f:ec:d6:18:ab:9f:41:9e:c4:08:6e:83:
39:cb:fb:69:0f:26:96:40:c1:00:f3:d1:0c:3f:b9:27:04:15:
66:d9:4e:87:c3:e4:98:8b:f4:7c:6e:bf:c9:8b:7e:6d:45:70:
71:29:ae:10:4a:c0:84:a4:37:21:58:e9:9e:0b:5a:28:d0:7c:
ce:03:3e:a0:db:5d:c2:e4:ae:a3:b3:8b:fe:e2:cb:c1:a1:fd:
0e:90:38:55:86:5c:38:32:d8:74:72:18:d9:10:da:36:12:9a:
89:8f:13:60:0b:49:a6:f7:4f:b7:cf:40:24:a3:53:d3:14:65:
fb:e8:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:10 2024 by rpki-client on console-fra.rpki-client.org