Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/AlCECKITe-BzmMcZ15NqUljJdO4.roa
File: AlCECKITe-BzmMcZ15NqUljJdO4.roa (raw, json)
Hash identifier: Hxbo6u7LIelzjnvMW0B3d9Bk2Pxp9YZ2Y90HUlrP+xA=
Subject key identifier: 02:50:84:08:A2:13:7B:E0:73:98:C7:19:D7:93:6A:52:58:C9:74:EE
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01856C4A450648499151F2C309D6D2CF6EB7
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/AlCECKITe-BzmMcZ15NqUljJdO4.roa
Signing time: Sun 01 Jan 2023 07:44:44 +0000
ROA not before: Sun 01 Jan 2023 07:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50427
IP address blocks: 109.226.248.0/24 maxlen: 24
185.84.175.0/24 maxlen: 24
185.84.174.0/24 maxlen: 24
185.84.174.0/23 maxlen: 23
193.106.170.0/24 maxlen: 24
193.106.171.0/24 maxlen: 24
193.106.168.0/22 maxlen: 22
193.106.168.0/24 maxlen: 24
193.106.169.0/24 maxlen: 24
2a05:7401::/34 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:45:06:48:49:91:51:f2:c3:09:d6:d2:cf:6e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jan 1 07:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02508408a2137be07398c719d7936a5258c974ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:1e:79:14:13:cb:a4:77:41:3f:77:eb:af:
f6:5e:9f:96:cf:3d:df:9d:23:4e:0a:a6:30:e4:3f:
7d:10:88:6d:2b:04:6d:ee:1a:ef:8e:e7:d4:dc:7e:
96:1e:43:8d:5f:f4:c4:31:c5:94:0f:f1:63:99:e1:
1b:6c:da:c1:24:c8:97:af:9d:8a:24:c6:43:9f:c1:
d5:5c:4d:d7:ed:df:9c:74:e6:8e:ef:20:1a:82:03:
4b:8a:59:db:39:c6:bc:17:1d:e2:97:2d:57:fd:17:
8c:ae:b5:be:28:bf:ab:9e:6a:1c:b7:42:98:bd:eb:
64:89:97:58:56:cc:ca:04:32:fd:ad:9a:94:b6:5d:
41:95:1d:65:6a:e8:1e:9a:09:f8:d2:09:b2:bf:87:
2d:35:1b:8d:d9:1f:0b:19:5a:b3:dc:50:ba:f2:b3:
71:74:9f:21:62:b5:ce:51:d9:18:b5:65:51:4f:c8:
b0:69:8e:e9:34:d3:12:c0:5e:5d:5c:4e:b7:ae:7f:
17:e8:2a:ff:fe:b4:e4:e9:27:99:2c:01:84:03:e9:
bd:7a:5b:e9:65:0f:d0:56:73:98:55:9b:cd:11:43:
99:88:3f:03:09:4b:54:38:4b:d2:57:74:6c:36:42:
88:9d:35:a5:f0:25:ea:60:d9:60:85:63:2e:49:a8:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:84:08:A2:13:7B:E0:73:98:C7:19:D7:93:6A:52:58:C9:74:EE
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/AlCECKITe-BzmMcZ15NqUljJdO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.226.248.0/24
185.84.174.0/23
193.106.168.0/22
IPv6:
2a05:7401::/34
Signature Algorithm: sha256WithRSAEncryption
62:9d:b7:9e:49:18:be:e2:02:8f:2a:ac:1c:e6:c4:5b:c4:91:
e1:b1:9d:5f:a8:37:ed:af:78:7a:7b:22:56:bc:4d:66:03:5c:
47:21:4e:9c:9b:10:de:e2:3d:7c:53:76:39:0c:42:a1:c0:06:
15:09:2b:d7:af:0b:6a:e6:f6:9c:d5:39:1b:1b:b8:e2:c0:21:
89:91:72:ea:52:5a:cc:55:2b:24:e9:69:6e:d4:82:38:3d:12:
66:ea:c8:19:f6:5e:5c:94:57:88:7c:39:80:ab:0f:65:fc:49:
e0:99:fe:96:ed:9f:3c:4f:2a:32:44:5b:dc:48:90:50:ac:d5:
48:16:0a:dc:1c:e6:91:93:4d:cd:86:71:9d:27:2c:d8:f0:ab:
44:bd:46:0f:9d:e8:5b:a2:fb:c7:b5:54:13:e9:92:be:e7:1d:
6b:bd:1a:4d:90:6b:11:66:cf:c7:e6:3e:04:15:93:6b:3e:24:
90:df:ee:82:f1:5f:52:67:4e:79:ac:b3:a0:26:22:59:03:15:
7b:8f:43:cd:e5:c7:a5:04:78:32:87:21:a3:14:27:09:11:67:
b6:29:57:d4:cf:d2:26:4d:9b:32:07:5b:94:d2:cd:ed:c8:2d:
47:96:0b:80:c8:8a:74:28:f5:95:71:6f:73:d0:90:ec:04:3a:
8f:66:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:24 2024 by rpki-client on console-fra.rpki-client.org