Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XFdqv_AJKGjB_7Dm08HDG0SB4oM.roa
File: XFdqv_AJKGjB_7Dm08HDG0SB4oM.roa (raw, json)
Hash identifier: 0tf4G5CcS3zfs/8jMvNBJgWb78Scc7mA8v7apwHmz+M=
Subject key identifier: 5C:57:6A:BF:F0:09:28:68:C1:FF:B0:E6:D3:C1:C3:1B:44:81:E2:83
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D24280DC56D1F2F1C6104C9ABD2004
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XFdqv_AJKGjB_7Dm08HDG0SB4oM.roa
Signing time: Thu 28 Dec 2023 14:26:58 +0000
ROA not before: Thu 28 Dec 2023 14:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12578
IP address blocks: 185.38.56.0/22 maxlen: 24
46.109.0.0/16 maxlen: 24
195.122.28.0/24 maxlen: 24
195.122.29.0/24 maxlen: 24
195.122.26.0/23 maxlen: 24
81.198.0.0/16 maxlen: 24
78.84.0.0/16 maxlen: 24
195.114.32.0/19 maxlen: 24
81.198.95.0/24 maxlen: 24
194.8.16.0/21 maxlen: 24
194.8.24.0/22 maxlen: 24
195.13.201.0/24 maxlen: 24
195.13.200.0/24 maxlen: 24
80.232.150.13/32 maxlen: 32
80.232.195.0/24 maxlen: 24
195.13.215.0/24 maxlen: 24
84.237.128.0/17 maxlen: 24
195.13.128.0/17 maxlen: 24
80.232.128.0/17 maxlen: 24
80.232.150.0/24 maxlen: 24
80.232.147.0/24 maxlen: 24
95.68.0.0/17 maxlen: 24
87.246.144.0/20 maxlen: 24
195.2.96.0/19 maxlen: 24
195.122.0.0/19 maxlen: 24
87.246.160.0/19 maxlen: 24
62.85.0.0/17 maxlen: 24
195.13.228.0/24 maxlen: 24
195.13.237.0/24 maxlen: 24
195.13.245.0/24 maxlen: 24
195.13.253.0/24 maxlen: 24
195.13.251.0/24 maxlen: 24
195.13.249.0/24 maxlen: 24
87.110.0.0/16 maxlen: 24
91.105.0.0/17 maxlen: 24
2a02:2330::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d2:42:80:dc:56:d1:f2:f1:c6:10:4c:9a:bd:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c576abff0092868c1ffb0e6d3c1c31b4481e283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:95:b0:b7:3f:b6:aa:76:b0:ef:f4:ca:90:
c9:c1:4a:2c:d0:27:db:2b:c7:42:ca:51:44:98:c3:
6f:ea:92:73:db:ec:20:a7:91:56:b2:a8:9e:4d:1f:
00:c0:cc:b3:00:be:01:65:1c:ed:d3:8f:92:20:78:
b2:5a:39:64:40:7a:a7:d5:f0:d8:33:98:a6:84:5f:
13:a4:85:15:6e:01:56:e6:87:d0:b5:bf:e8:1d:45:
2e:4d:5a:17:4c:7a:69:af:6b:22:f4:87:ba:6f:b6:
53:ac:9d:16:45:70:02:57:ff:92:9d:56:61:ce:ac:
8d:fd:1d:00:d9:66:6c:ae:83:4b:15:09:aa:95:05:
da:ca:0c:09:6c:97:db:80:4e:2f:8a:1c:fe:09:db:
5e:db:8e:4b:1e:2e:5a:e1:0f:94:25:93:1f:7d:f9:
d1:ca:1d:ef:9e:f1:41:1b:da:a0:9b:18:9d:f9:a4:
e5:20:fe:e5:8e:0e:4a:ce:d3:c8:0c:1a:88:49:7d:
ce:91:cf:ce:77:44:38:f0:d2:4d:97:ae:f8:31:f8:
9c:af:67:02:05:e8:28:8f:f6:93:92:7a:10:00:8b:
f8:2b:57:fb:85:96:04:51:1e:18:ec:c0:98:98:aa:
d3:42:03:13:65:c7:b3:46:1e:95:4f:a0:eb:6f:15:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:6A:BF:F0:09:28:68:C1:FF:B0:E6:D3:C1:C3:1B:44:81:E2:83
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/XFdqv_AJKGjB_7Dm08HDG0SB4oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.109.0.0/16
62.85.0.0/17
78.84.0.0/16
80.232.128.0/17
81.198.0.0/16
84.237.128.0/17
87.110.0.0/16
87.246.144.0-87.246.191.255
91.105.0.0/17
95.68.0.0/17
185.38.56.0/22
194.8.16.0-194.8.27.255
195.2.96.0/19
195.13.128.0/17
195.114.32.0/19
195.122.0.0/19
IPv6:
2a02:2330::/29
Signature Algorithm: sha256WithRSAEncryption
c7:53:9d:3b:eb:1d:a6:24:09:d9:7e:be:10:00:f7:13:32:24:
bd:ca:36:26:86:f5:0d:f3:3c:3f:c7:5a:2c:e8:34:e2:d4:b4:
fc:1d:47:81:f3:10:0a:ac:d5:2e:a5:1e:54:1a:37:8c:32:ed:
49:09:ab:d0:0f:6d:10:e0:f8:d0:ad:fa:2f:8b:69:43:79:6e:
54:2b:74:da:18:42:0d:06:7f:7b:8d:19:67:b6:7f:bd:7f:7a:
49:af:ea:a8:48:f3:2f:b1:7c:f5:ae:fe:52:5f:50:f6:00:42:
35:90:1d:2d:9a:32:f0:bb:c9:22:19:9f:bd:96:b3:a1:f8:28:
81:d8:59:3a:3a:ef:54:f7:18:dc:a7:a4:03:5b:63:98:fe:89:
54:71:c7:73:43:f0:ef:7c:3b:cb:b0:3a:9a:5b:ee:2a:ab:b5:
67:06:7d:93:29:9f:79:0b:b5:09:dd:8a:65:d4:81:7e:e4:ef:
9c:8e:61:15:61:5d:bd:06:74:f6:ef:4c:e5:d2:a8:ff:e6:18:
13:52:c4:8a:77:06:d7:a1:b5:c3:52:b1:d0:33:68:d3:54:6a:
a3:41:f0:e4:23:6b:67:d8:f1:70:98:3a:b5:2f:79:87:24:ed:
54:6a:cf:26:46:76:0e:77:ac:53:f6:b3:0a:8a:2b:c9:ef:e0:
d8:e5:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org