Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/XUwq9DJk5-ps32_eaKk6sL2MJC0.roa
File: XUwq9DJk5-ps32_eaKk6sL2MJC0.roa (raw, json)
Hash identifier: zSimy/MtbR1Bg/1vE5v+4Bn4W3L574SqCMMEJ+fJeJA=
Subject key identifier: 5D:4C:2A:F4:32:64:E7:EA:6C:DF:6F:DE:68:A9:3A:B0:BD:8C:24:2D
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 01858671F8269F9EE89B70BCC13B2BDC987D
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/XUwq9DJk5-ps32_eaKk6sL2MJC0.roa
Signing time: Fri 06 Jan 2023 09:38:14 +0000
ROA not before: Fri 06 Jan 2023 09:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43268
IP address blocks: 185.239.152.0/24 maxlen: 24
185.239.152.0/22 maxlen: 22
185.239.154.0/24 maxlen: 24
185.239.155.0/24 maxlen: 24
185.239.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:71:f8:26:9f:9e:e8:9b:70:bc:c1:3b:2b:dc:98:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Jan 6 09:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d4c2af43264e7ea6cdf6fde68a93ab0bd8c242d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:07:8f:b2:25:37:59:1e:7c:f6:0c:c6:7f:
82:89:f6:d3:58:7e:19:d9:9a:83:5e:10:26:85:7e:
09:f6:cf:37:4d:bb:2e:7c:ef:b4:1b:51:27:f6:ac:
a3:f7:45:1b:74:6a:0b:96:b9:6a:cb:69:5a:7d:3c:
b9:00:ef:d5:b2:ac:d3:03:cd:f3:1b:91:5d:c6:14:
62:56:fa:86:8d:1c:d8:8d:fe:84:e0:88:d7:c8:d7:
9b:7f:26:a1:0c:87:6f:8d:97:4e:b1:68:d1:d0:31:
98:00:d3:c0:77:cd:e3:27:95:50:6d:1c:42:4f:68:
75:67:e7:3b:a4:33:0e:60:c2:d5:69:47:d0:83:fb:
94:46:71:96:04:89:2c:84:70:93:7f:fc:87:37:fc:
08:14:e2:1d:f8:d2:fc:8d:3e:04:06:32:ba:53:79:
61:8c:0a:cc:b2:18:15:65:e8:c5:70:ec:77:c6:af:
35:4d:37:56:02:34:6e:ac:46:6b:ce:f6:fd:fc:3f:
7f:ed:9e:14:86:70:6b:7a:a3:ec:18:68:4e:9e:2c:
2f:4d:89:78:8e:6c:2f:8d:83:34:cd:bb:91:5b:ea:
8b:9e:ed:29:71:4d:df:b9:3e:db:17:28:72:39:54:
44:d4:4a:a1:75:42:e3:d8:ee:6d:c9:71:b5:2b:42:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4C:2A:F4:32:64:E7:EA:6C:DF:6F:DE:68:A9:3A:B0:BD:8C:24:2D
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/XUwq9DJk5-ps32_eaKk6sL2MJC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.152.0/22
Signature Algorithm: sha256WithRSAEncryption
50:ba:b0:62:b5:b0:ae:bb:c8:0f:06:0f:35:db:78:8e:8f:8b:
5f:82:17:27:19:37:f9:b4:91:2b:e7:ca:19:8c:d4:1f:89:ca:
48:d5:ef:54:54:1d:79:49:2b:5a:e3:a3:61:b8:16:58:69:da:
59:df:f5:2e:3b:d2:ed:d9:e5:52:83:b9:dd:07:9e:a8:33:1c:
16:74:13:f2:1c:55:23:01:fc:3e:db:cc:0a:f9:43:63:52:8f:
44:ec:98:0c:0d:8f:d9:d3:af:d0:b6:e0:00:3e:c5:cf:1e:5d:
89:4d:96:50:9d:dd:1b:d1:1f:2d:66:98:2f:91:c8:3b:58:9a:
c1:46:46:de:1c:52:92:a4:f9:45:65:d5:cd:76:89:61:b5:3d:
f0:5b:12:b8:5b:70:cc:9e:de:fe:90:74:5d:5b:04:fd:a4:2c:
ba:bf:43:a9:f9:89:29:e7:f9:e2:c0:c4:a8:d4:15:5e:5d:61:
9c:aa:a4:b3:60:0e:67:dc:f5:ee:6d:89:9c:95:44:0d:64:9a:
b2:71:f8:fb:8f:5b:80:76:bd:d3:30:4f:ed:55:d1:b4:3e:f9:
6f:da:5a:63:b7:72:bb:f4:63:67:56:3b:d8:e8:d5:6a:61:b8:
f2:0c:c1:c0:5b:65:c4:7c:56:a4:98:e7:e5:f8:41:d5:72:3c:
74:c5:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org