Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/CRrtLKiTE5F4LOZLlL0zaK-qlKA.roa
File: CRrtLKiTE5F4LOZLlL0zaK-qlKA.roa (raw, json)
Hash identifier: BAnWu5SH2bXEmgoqtKmf9D8lUYvFU3IN/m+teSO/D5o=
Subject key identifier: 09:1A:ED:2C:A8:93:13:91:78:2C:E6:4B:94:BD:33:68:AF:AA:94:A0
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 01856F94B06E104686D2447613BF86090552
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/CRrtLKiTE5F4LOZLlL0zaK-qlKA.roa
Signing time: Sun 01 Jan 2023 23:04:53 +0000
ROA not before: Sun 01 Jan 2023 23:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199274
IP address blocks: 194.177.20.0/22 maxlen: 24
176.112.192.0/19 maxlen: 24
185.22.60.0/22 maxlen: 24
91.239.26.0/23 maxlen: 24
2a00:5a60::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b0:6e:10:46:86:d2:44:76:13:bf:86:09:05:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Jan 1 23:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=091aed2ca8931391782ce64b94bd3368afaa94a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:fd:a4:c1:82:bf:64:98:81:14:5b:af:f9:
f5:a3:70:43:88:db:b5:91:20:db:c6:7f:be:6d:3d:
70:37:16:fe:9c:af:c5:29:06:ef:19:17:da:9e:f7:
26:3d:e3:13:d4:cc:1e:e1:7a:9c:e2:35:dd:49:2b:
d1:26:6d:81:c9:72:30:31:b5:9c:d7:58:69:cf:71:
ba:e7:bd:64:1c:1e:f9:f7:9d:6a:e9:3f:1d:36:c9:
c8:e6:27:1c:0f:50:42:a9:b6:82:15:75:2d:88:79:
10:5d:2d:38:a2:b2:7f:b2:e1:f6:64:f6:fe:76:0a:
d9:49:67:ed:30:da:bd:60:aa:d0:f5:6f:17:ed:3a:
31:47:2a:b9:cf:6f:44:8c:01:14:66:0b:9e:6e:4a:
dd:5a:5e:b9:64:f8:38:9e:5c:57:e1:f2:b5:79:73:
7d:0a:a1:4e:ac:4a:8f:dd:25:57:76:e3:26:db:d0:
49:b1:0e:75:92:ca:24:1e:52:e8:24:97:27:3f:cc:
cc:84:84:02:81:37:41:27:a6:9e:f5:1e:b3:7d:be:
17:0b:e2:9d:bd:34:40:cb:d7:1a:e4:d7:06:49:49:
33:85:bd:6d:21:1c:e8:e0:32:f1:c3:b2:7b:1b:3a:
2c:36:3f:16:8b:2e:d4:b6:7d:56:d0:f5:2a:2d:dd:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1A:ED:2C:A8:93:13:91:78:2C:E6:4B:94:BD:33:68:AF:AA:94:A0
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/CRrtLKiTE5F4LOZLlL0zaK-qlKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.26.0/23
176.112.192.0/19
185.22.60.0/22
194.177.20.0/22
IPv6:
2a00:5a60::/32
Signature Algorithm: sha256WithRSAEncryption
5c:8e:2b:43:6e:b8:1f:26:9b:42:47:1e:59:c9:78:f8:3b:e6:
28:b8:96:3c:12:d2:2f:cb:d5:39:b7:0a:11:8c:30:e1:11:85:
72:17:62:19:8f:e5:01:a3:83:cb:92:b9:ab:de:6b:aa:6a:03:
d7:26:01:79:d1:c2:b2:d6:6b:33:b8:c0:fc:f5:ca:9c:c4:8c:
23:ab:22:83:0b:cf:3a:81:95:b1:4d:0b:a4:42:93:a7:d8:81:
7a:1d:00:71:29:6a:62:7d:8c:40:17:67:48:18:6d:cd:48:21:
44:fb:da:e4:39:68:21:d7:66:cc:b0:b2:93:a9:04:f1:e3:c8:
10:ac:21:39:92:41:d2:34:d1:77:f8:10:63:a3:30:ae:7b:70:
e0:0a:ad:3d:b9:12:a7:d8:d6:08:4c:47:e6:ca:06:3b:38:0a:
79:de:69:3c:e8:f9:0f:61:6b:5c:97:71:e9:e2:a8:f3:8d:21:
fb:81:8c:f3:e1:fe:f7:77:f6:1b:03:75:ae:4d:34:2e:c4:98:
4d:77:2d:90:ba:c3:f2:d3:a0:da:23:b4:27:6e:63:33:0c:08:
93:5b:f2:80:68:f5:36:3d:17:a4:e9:27:1d:6f:38:0b:3f:2b:
7d:00:30:ff:77:80:c9:c7:e5:a1:4a:b7:cd:3e:74:fe:0f:5e:
2c:a2:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:02 2024 by rpki-client on console-fra.rpki-client.org