Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/t_xqCbt72jrAy9GCzPFW-h7PcJA.roa
File: t_xqCbt72jrAy9GCzPFW-h7PcJA.roa (raw, json)
Hash identifier: yeqhXltf+ltIUY56X+6nlzOFfYQYZOHrjCv4g+b8K4o=
Subject key identifier: B7:FC:6A:09:BB:7B:DA:3A:C0:CB:D1:82:CC:F1:56:FA:1E:CF:70:90
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 018572CCB2849431CDFF3F566D2CE2968F36
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/t_xqCbt72jrAy9GCzPFW-h7PcJA.roa
Signing time: Mon 02 Jan 2023 14:04:55 +0000
ROA not before: Mon 02 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203724
IP address blocks: 185.212.107.0/24 maxlen: 24
185.212.106.0/24 maxlen: 24
185.125.226.0/24 maxlen: 24
185.125.225.0/24 maxlen: 24
185.125.224.0/24 maxlen: 24
185.212.104.0/24 maxlen: 24
185.212.105.0/24 maxlen: 24
185.125.227.0/24 maxlen: 24
2a06:bcc0:5::/48 maxlen: 48
2a06:bcc0:9::/48 maxlen: 48
2a06:bcc0:4::/48 maxlen: 48
2a06:bcc0:2::/48 maxlen: 48
2a06:bcc0:3::/48 maxlen: 48
2a06:bcc0:1::/48 maxlen: 48
2a06:bcc0:11::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:b2:84:94:31:cd:ff:3f:56:6d:2c:e2:96:8f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 2 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7fc6a09bb7bda3ac0cbd182ccf156fa1ecf7090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:c8:f6:b6:7e:61:20:ea:bf:e5:79:fc:a7:
7c:07:64:f7:9f:8c:07:4a:4f:91:e2:4d:dc:43:c5:
4c:ea:c6:bc:9b:af:05:16:7e:0f:8d:27:5e:49:07:
28:c8:ac:8a:0c:a3:5e:8d:56:5c:bd:0a:a7:39:c6:
02:1e:65:34:10:b0:63:b8:d6:4b:fb:b2:dc:28:e4:
61:5a:9a:31:c2:41:4a:7e:2f:71:81:5e:80:55:b6:
a9:b2:3c:98:2b:b5:31:5d:37:fd:77:41:cb:26:54:
f4:99:69:29:43:5f:c9:be:21:ee:d8:27:de:90:8c:
7d:34:64:1c:73:04:cb:b1:8f:60:cd:c1:91:4a:66:
7b:f8:9a:bc:4b:2e:3d:fb:08:fd:16:46:76:27:97:
6d:41:9e:f5:46:54:d6:f0:0f:a2:5f:14:fd:ea:ff:
05:ba:f2:ed:ac:a8:2a:8b:3e:f1:de:1d:6d:81:e4:
c8:3b:3e:5e:e7:d4:2d:f3:ec:f9:53:d7:43:c3:1b:
df:de:5b:2c:8e:bc:38:71:13:99:90:b1:84:de:52:
0f:09:be:89:fb:43:37:3d:ff:67:59:8a:91:62:1e:
1a:d2:51:2e:63:71:2e:fe:a9:42:26:5a:26:12:42:
ba:a0:f8:40:24:ff:0d:de:f1:fc:9a:ec:4a:45:20:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FC:6A:09:BB:7B:DA:3A:C0:CB:D1:82:CC:F1:56:FA:1E:CF:70:90
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/t_xqCbt72jrAy9GCzPFW-h7PcJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.224.0/22
185.212.104.0/22
IPv6:
2a06:bcc0:1::-2a06:bcc0:5:ffff:ffff:ffff:ffff:ffff
2a06:bcc0:9::/48
2a06:bcc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
93:a3:f6:9b:46:eb:fa:24:ca:9c:f8:8d:98:00:6d:ec:e2:d7:
50:b5:ac:b7:9d:90:06:20:62:7b:f2:f8:a1:db:53:ea:f4:8b:
15:af:99:ed:41:b3:f2:de:7e:9f:c3:05:5c:9f:bb:f8:a1:86:
e9:4d:77:bd:71:86:35:22:2c:f2:2c:4e:76:8e:4e:34:c3:2a:
3f:45:b3:2e:7f:be:9f:e5:5f:35:07:16:24:24:a9:7c:98:f9:
74:b5:b1:c1:41:7a:80:a5:ab:d7:b5:05:e1:6a:10:b3:5e:2b:
75:a9:1b:40:a2:67:35:b8:53:ae:7a:c2:c3:77:ef:5d:cd:7c:
7d:0a:4d:89:82:0d:92:08:fa:0f:79:7b:f2:27:bf:a4:f9:a0:
c9:c1:b5:f9:95:67:dd:9a:e5:83:63:b1:cb:23:80:02:e8:45:
a2:a6:5f:67:83:54:e4:04:3f:06:d0:a2:1a:0e:d6:3a:1e:f0:
8f:c0:a5:50:a7:96:93:54:98:b9:84:96:78:eb:f5:3a:16:83:
a9:10:c6:9a:97:8f:60:4d:43:2c:d4:e2:ee:0f:a9:4b:7e:ba:
8f:0b:89:62:e2:d5:21:c0:a6:68:93:2f:6b:46:04:d1:64:0c:
53:5f:d1:df:37:2f:4f:6a:de:52:03:48:f9:1c:33:31:17:ad:
c7:fd:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:29 2023 by rpki-client on console-ams.rpki-client.org