Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/XJOljKSiLH05a9nbhK0dHzQuwnI.roa
File: XJOljKSiLH05a9nbhK0dHzQuwnI.roa (raw, json)
Hash identifier: /Jnz71Tn0VSq48XCtM254GNz9KE6vtf7Y2JRxFxdyxA=
Subject key identifier: 5C:93:A5:8C:A4:A2:2C:7D:39:6B:D9:DB:84:AD:1D:1F:34:2E:C2:72
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01856D5CF042A665E95D0A992F3F3EE7D388
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/XJOljKSiLH05a9nbhK0dHzQuwnI.roa
Signing time: Sun 01 Jan 2023 12:44:45 +0000
ROA not before: Sun 01 Jan 2023 12:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31586
IP address blocks: 185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
2a05:a282::/32 maxlen: 48
2a05:2500::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 29 Aug 2023 14:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f0:42:a6:65:e9:5d:0a:99:2f:3f:3e:e7:d3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 1 12:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c93a58ca4a22c7d396bd9db84ad1d1f342ec272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:2d:13:ec:03:11:d2:9c:b2:4c:35:ca:25:
79:2d:f3:36:7b:49:75:e4:ba:9e:de:d2:b6:08:fc:
a4:fc:e2:b3:71:e3:06:4c:d7:cc:ca:26:7a:2a:91:
17:23:4d:71:be:94:ae:59:a4:83:03:2d:fd:88:d9:
12:ea:be:29:26:2c:96:42:69:5c:2f:cb:3a:97:09:
f2:84:e7:22:9c:17:8f:22:18:a0:7f:13:af:ea:88:
53:fc:7a:75:04:48:1e:3c:29:fc:e6:93:61:b3:ba:
3e:98:90:a9:cd:bc:23:29:5a:11:bb:50:1c:32:2a:
bb:85:76:bb:77:b6:9a:1e:f5:bb:7e:93:dd:9e:9a:
9f:db:37:ed:08:47:a9:96:f0:bb:81:08:b5:58:bb:
03:70:3d:e2:95:17:99:7a:e3:37:39:9c:1b:ae:48:
e8:03:17:ed:a1:20:a2:b8:3d:a9:3d:9a:74:64:c5:
9c:f5:44:e5:1f:f5:bc:c7:29:64:e3:64:9f:62:46:
17:91:3c:3f:e0:f7:6f:81:00:80:47:b7:b6:4c:22:
1b:f9:0c:4a:7d:71:81:91:3c:0d:18:4e:0f:1f:0e:
dd:45:9b:79:0a:9f:70:af:47:86:d5:e0:e5:ce:e9:
09:f6:59:26:34:38:4b:78:1f:78:e5:9a:d4:20:b0:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:A5:8C:A4:A2:2C:7D:39:6B:D9:DB:84:AD:1D:1F:34:2E:C2:72
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/XJOljKSiLH05a9nbhK0dHzQuwnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.255.180.0/22
185.69.232.0/22
185.84.72.0/22
185.105.204.0/22
185.105.216.0/22
IPv6:
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
42:14:b9:6c:5e:bd:27:8d:db:3c:7e:43:7b:e2:34:41:8b:21:
3d:33:c5:c6:28:db:ac:93:36:d5:99:0a:a4:20:96:32:a8:1f:
a9:23:44:26:e8:3f:c4:83:c2:8c:a7:d0:17:bb:e6:0b:5a:06:
d8:e8:a3:d3:27:d0:a3:f7:a2:a2:ff:9e:90:e6:ec:ed:92:af:
c2:fa:c0:c3:da:0c:11:10:7c:e7:11:cb:1a:95:13:5e:22:78:
db:df:66:28:97:0f:78:a6:40:a4:41:ed:47:d8:46:f1:a0:af:
71:9f:8d:ab:8e:62:e0:9d:ef:65:8e:3e:71:6b:63:ab:c7:2c:
55:5f:85:ce:d9:31:11:3d:c1:72:95:65:f6:7e:bd:03:9e:ca:
35:5b:07:10:db:50:f7:48:f1:95:3b:39:2e:8d:06:34:c5:e8:
27:f6:4b:58:84:b0:c5:df:8e:e3:64:14:bc:ea:d4:52:c5:a2:
96:15:2e:4c:42:62:fc:06:1e:c8:98:51:68:2f:16:38:38:4b:
4b:04:f4:20:ff:c2:57:34:fa:d5:8c:70:5f:8b:4d:4c:db:c7:
b8:48:29:a0:4d:7a:47:d9:8e:4f:0c:79:11:e3:9a:e0:cc:68:
f1:ef:cd:85:06:7e:28:9c:a3:62:15:a2:82:e4:d4:2e:8a:cf:
54:03:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org