Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/XBorkysiBwwBSqhwULugg29IQUk.roa
File: XBorkysiBwwBSqhwULugg29IQUk.roa (raw, json)
Hash identifier: +PdRpvbsOjzoUoF2yU0mIpaSAkCD31cAdHAnKTwV7lU=
Subject key identifier: 5C:1A:2B:93:2B:22:07:0C:01:4A:A8:70:50:BB:A0:83:6F:48:41:49
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01856C65B35DFDA57478C212C76CC4D79C42
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/XBorkysiBwwBSqhwULugg29IQUk.roa
Signing time: Sun 01 Jan 2023 08:14:42 +0000
ROA not before: Sun 01 Jan 2023 08:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213002
IP address blocks: 185.210.95.0/24 maxlen: 24
185.210.92.0/24 maxlen: 24
185.210.93.0/24 maxlen: 24
185.210.94.0/24 maxlen: 24
2a0b:5540::/33 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:b3:5d:fd:a5:74:78:c2:12:c7:6c:c4:d7:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jan 1 08:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c1a2b932b22070c014aa87050bba0836f484149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:5c:2a:0d:ad:29:63:7f:39:2e:61:1e:e8:
f8:2b:7d:6e:39:3e:1a:d0:fb:db:0f:16:52:20:2a:
5f:75:0e:a5:3c:49:0e:d2:d4:6b:6e:37:af:00:c8:
c4:0e:42:a7:6d:3d:c4:fe:f3:ad:51:79:ae:e9:57:
bb:e4:cb:9a:4a:cb:b9:53:db:3d:68:6a:cf:da:28:
16:7d:5e:a3:59:43:ba:19:c7:f9:1a:97:cb:2c:a0:
1c:80:e6:a5:43:62:31:da:a9:06:c1:60:a9:a4:f9:
79:63:ae:22:ad:eb:de:a2:c1:e0:19:21:f9:98:7c:
2e:93:fc:14:49:0b:4a:0a:0f:fa:d8:90:ba:e5:8f:
66:b1:e0:c4:82:c2:58:8a:c9:34:72:25:9c:7d:ec:
d0:8a:d4:de:c8:5a:d7:fc:e8:bc:1b:94:b1:8a:5c:
a8:0b:d1:cd:45:03:f8:62:73:c7:43:f0:30:a8:ef:
49:f2:8e:06:24:65:e6:06:02:95:f0:3e:89:b9:af:
b8:cb:76:91:51:af:fd:13:0a:75:6a:1b:6e:e4:5e:
45:18:0a:22:e3:c1:7f:8f:d8:f4:9d:af:5a:20:3f:
de:14:e8:24:86:a8:ea:0c:d1:6c:1a:07:bc:0b:d9:
4a:ac:92:43:d5:81:cf:28:97:2c:89:41:77:af:ec:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:2B:93:2B:22:07:0C:01:4A:A8:70:50:BB:A0:83:6F:48:41:49
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/XBorkysiBwwBSqhwULugg29IQUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.92.0/22
IPv6:
2a0b:5540::/33
Signature Algorithm: sha256WithRSAEncryption
51:b7:a6:73:25:4b:21:99:58:4b:73:92:3b:be:ee:f6:73:26:
2c:cf:5c:46:cb:0e:3d:d6:84:b4:bf:dd:6e:5c:c9:15:68:56:
88:53:de:98:67:d4:99:b5:ce:6c:ea:63:b7:5a:2e:7b:14:c4:
00:62:9d:e9:c8:e2:28:92:a8:fa:a8:8c:33:de:ed:39:1a:c4:
a8:37:d6:07:6e:5d:a8:9f:a8:3b:b0:e6:3b:fe:fb:d1:64:9c:
da:21:f2:10:45:2d:a7:06:e1:e5:b7:82:70:01:65:7d:23:ef:
f5:1e:73:4d:a9:92:d8:f0:07:61:b7:d1:41:0b:ff:1a:6d:76:
12:7e:68:d6:9b:73:d2:83:4a:0d:19:bf:3b:74:66:aa:27:48:
81:99:ad:96:43:8c:2c:a7:86:6d:6d:6c:e3:1c:aa:0a:df:0e:
33:73:a5:0e:88:ce:6b:c2:09:6f:96:5e:c6:52:1c:c3:dc:67:
07:6a:a1:2b:01:8a:ad:98:58:70:73:f9:87:fe:b6:c0:f9:77:
46:00:91:8b:35:8f:fa:8d:ef:13:4e:b8:de:3f:33:bc:15:41:
2e:11:d5:ce:3a:20:d2:6b:33:67:2c:1b:43:75:93:ee:c6:e2:
ff:b5:df:92:f2:51:a9:2b:d0:23:18:de:da:aa:95:2f:69:0c:
f9:69:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:32 2024 by rpki-client on console-fra.rpki-client.org