Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XKXaZuoQEsNFDrLNbzP80TKiy2o.roa
File: XKXaZuoQEsNFDrLNbzP80TKiy2o.roa (raw, json)
Hash identifier: AZ5/E43+UP6L/8MzOPa1JjhD+t2f9zemWG4/QVWePnE=
Subject key identifier: 5C:A5:DA:66:EA:10:12:C3:45:0E:B2:CD:6F:33:FC:D1:32:A2:CB:6A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B1E2669C819C9A6A8CFA17B5AF62AA37D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XKXaZuoQEsNFDrLNbzP80TKiy2o.roa
Signing time: Wed 11 Oct 2023 09:51:55 +0000
ROA not before: Wed 11 Oct 2023 09:51:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213005
IP address blocks: 93.92.228.0/22 maxlen: 24
185.223.220.0/22 maxlen: 22
92.60.34.0/24 maxlen: 24
185.211.180.0/22 maxlen: 22
185.245.34.0/23 maxlen: 23
185.179.228.0/22 maxlen: 22
185.227.128.0/22 maxlen: 22
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 10:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:26:69:c8:19:c9:a6:a8:cf:a1:7b:5a:f6:2a:a3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 09:51:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ca5da66ea1012c3450eb2cd6f33fcd132a2cb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:de:06:8a:61:21:f7:3f:d0:66:4e:d1:3b:6f:
46:78:b7:60:c1:61:f0:b7:7b:f6:ef:62:9d:1e:42:
44:69:97:53:64:f9:36:a7:e0:f2:39:21:78:27:47:
a1:a9:7c:50:0e:81:75:80:50:a1:21:a0:c9:d7:bd:
55:8c:d0:53:31:d3:c8:8d:6b:8f:d6:c9:8b:89:72:
70:36:78:30:85:b3:73:80:e5:e0:20:cb:7b:35:32:
2f:21:1b:4a:2c:c1:ca:da:ac:8d:8e:ae:d6:12:2e:
54:04:10:ef:b9:6f:14:06:3f:42:4a:aa:2a:92:a9:
03:1d:95:07:b9:13:67:3c:5d:30:ca:ed:9c:35:11:
dc:ee:56:27:e4:2b:b8:61:b3:25:41:c3:db:29:03:
b9:2a:2c:12:53:72:09:90:d1:84:ae:8a:eb:d8:43:
42:71:dc:99:44:14:76:47:2a:6f:0d:44:90:1a:ca:
65:66:11:4d:7c:02:35:ae:18:29:7b:b3:d9:92:31:
1d:e4:7c:a8:3c:e4:d1:1a:b6:4a:12:de:3b:f2:ee:
20:12:90:a7:b4:55:6f:5b:94:59:60:27:4d:ff:69:
f9:52:2e:48:84:73:f6:77:6d:66:4a:32:21:3f:5f:
fd:92:db:e8:46:82:6f:81:5a:25:f5:12:14:12:13:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:DA:66:EA:10:12:C3:45:0E:B2:CD:6F:33:FC:D1:32:A2:CB:6A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XKXaZuoQEsNFDrLNbzP80TKiy2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.34.0/24
93.92.228.0/22
185.179.228.0/22
185.189.64.0/22
185.211.180.0/22
185.223.220.0/22
185.227.128.0/22
185.245.34.0/23
Signature Algorithm: sha256WithRSAEncryption
66:63:02:95:be:b2:37:63:64:a1:52:8d:b6:0a:74:af:ed:ba:
2a:73:4e:3b:1b:8f:a6:43:95:90:f7:69:13:40:e6:1c:a5:5d:
a8:c2:fc:a6:4d:27:b2:76:ad:fc:2f:61:ef:7b:42:74:85:ff:
75:36:6f:06:ef:99:a2:ab:e7:e7:9e:83:ca:2e:7d:d9:0f:e8:
41:b1:b4:1b:ed:8e:78:c0:4b:5c:5f:0f:43:68:1c:27:7f:b6:
9f:9d:55:1b:9e:a8:80:ad:9d:1a:49:87:d9:72:12:c1:93:f0:
5d:35:60:0f:e8:cc:70:f1:09:ef:ee:1e:28:b2:79:23:3b:db:
bf:95:6b:9e:98:57:62:5d:ed:ef:00:7f:75:51:58:64:c8:50:
73:eb:49:f1:0b:6b:0d:53:e1:40:7e:08:3f:1b:88:b1:80:87:
2a:0d:0e:6b:a9:fd:8e:76:1e:29:59:fe:4b:a7:64:d9:2f:84:
6a:3c:90:d0:71:ce:e1:39:84:a1:29:99:de:a9:68:64:a0:fa:
95:e9:1d:f0:8f:0a:a6:8b:7a:a1:48:ca:02:27:e7:72:f8:fd:
83:81:ba:fe:cc:38:af:c9:da:34:60:08:43:d0:94:6a:88:f7:
12:08:17:df:c1:ca:17:8d:0d:55:e7:da:82:01:12:52:e8:03:
20:ec:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org