Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/cp-lJH4Rw71g7gCknXBkNIiPnlQ.roa
File: cp-lJH4Rw71g7gCknXBkNIiPnlQ.roa (raw, json)
Hash identifier: 7XfV4UyiUVui+6/PKDtkFhDq8miBsyfxjBaR+MkyWXw=
Subject key identifier: 72:9F:A5:24:7E:11:C3:BD:60:EE:00:A4:9D:70:64:34:88:8F:9E:54
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01856FE6F2C98D93C1CCBA4C2E2EB40DD050
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/cp-lJH4Rw71g7gCknXBkNIiPnlQ.roa
Signing time: Mon 02 Jan 2023 00:34:44 +0000
ROA not before: Mon 02 Jan 2023 00:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51452
IP address blocks: 185.133.68.0/22 maxlen: 22
185.133.68.0/24 maxlen: 24
185.133.69.0/24 maxlen: 24
2a05:2440::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:f2:c9:8d:93:c1:cc:ba:4c:2e:2e:b4:0d:d0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jan 2 00:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=729fa5247e11c3bd60ee00a49d706434888f9e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:e3:52:77:eb:0b:2e:d5:ec:84:66:7a:61:
22:3c:e7:98:7b:f2:42:ad:65:d1:ec:9f:95:3a:76:
bd:dc:cb:c5:1f:8a:5c:e0:6d:f9:0f:a9:83:1e:82:
1e:2c:ed:14:e9:64:82:52:58:bb:cb:d8:10:d7:83:
21:9d:9e:4f:fe:c8:42:26:43:d9:49:91:a9:d0:76:
c0:78:a8:01:31:72:ea:2a:5d:63:42:2b:65:df:6e:
25:c7:86:eb:dc:f1:ba:9f:95:7d:1e:b3:74:95:17:
cd:2a:01:2e:cf:14:3c:23:27:bb:d9:a7:23:b2:0a:
bd:c1:de:83:10:a5:ff:7f:25:47:3b:ad:b5:c5:1a:
4e:01:b4:f3:bb:3f:d2:40:09:9b:2a:b8:9b:5e:d2:
5a:bb:9f:99:94:f7:77:b0:2c:4f:05:58:f9:84:bb:
d1:07:a2:f6:cf:a6:ff:d7:b7:af:67:89:30:1e:f7:
6e:d3:2a:f0:f1:5b:ba:13:9a:2e:86:03:0d:33:62:
97:d3:42:72:73:92:ef:12:b6:72:8c:4c:3f:7f:44:
cf:79:32:ba:0f:66:bc:fc:6f:2a:9c:25:9a:3b:27:
80:ce:b0:c4:b8:d4:c7:ce:db:8d:92:65:4d:50:94:
f3:3a:a9:ef:2d:65:1e:7a:2f:81:a5:df:42:59:90:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:A5:24:7E:11:C3:BD:60:EE:00:A4:9D:70:64:34:88:8F:9E:54
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/cp-lJH4Rw71g7gCknXBkNIiPnlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.68.0/22
IPv6:
2a05:2440::/29
Signature Algorithm: sha256WithRSAEncryption
73:89:b8:98:bd:a7:58:39:c6:1b:1d:82:ad:cf:36:72:cd:c4:
97:61:aa:f8:88:40:ba:03:3a:82:f6:d2:44:50:f4:9b:dd:a0:
26:e2:99:c8:5d:e6:e7:b6:4b:49:7b:be:b1:b6:1d:b6:84:b1:
ee:48:8b:75:24:af:64:79:03:3a:a8:21:d9:9c:45:20:55:b7:
fd:b8:d0:bb:96:15:f2:35:e0:f3:f9:6c:b6:3a:f2:d4:62:96:
a3:33:72:a6:bc:fc:a7:1b:52:01:e8:a9:07:2a:fe:2f:bc:3e:
d5:42:b8:d8:21:cf:d0:8b:7b:40:03:4a:e1:ef:b9:cb:1d:8b:
ad:f9:f5:0a:61:fc:35:89:e7:60:f2:9f:cb:a4:5c:54:1f:14:
df:76:03:14:dd:86:a1:05:fb:5a:6c:72:07:13:40:6f:82:11:
60:ba:2e:24:72:e1:1e:68:46:dc:00:d8:65:ea:99:4a:b3:96:
a2:3b:41:e0:3e:ac:74:42:3b:49:fd:97:1a:d0:95:61:40:e1:
f4:8c:1e:76:8f:bf:e8:f4:fb:35:65:4f:73:37:00:9d:12:7e:
40:3e:a8:6a:bb:13:d5:81:06:3f:02:e1:a4:4f:bb:5b:8e:43:
9c:c3:de:aa:5d:a3:ea:6e:5f:30:15:e8:d2:74:08:f2:41:61:
75:22:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:44 2024 by rpki-client on console-ams.rpki-client.org