Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/xIBDhjTP5O-E09EjwvMDC4D05WY.roa
File: xIBDhjTP5O-E09EjwvMDC4D05WY.roa (raw, json)
Hash identifier: 0GCIIXPUPoA4jdkGmBs161Ify3TfovC0Vg1j8TO0rLM=
Subject key identifier: C4:80:43:86:34:CF:E4:EF:84:D3:D1:23:C2:F3:03:0B:80:F4:E5:66
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01856FE6F17F99A7A7A83DDA8EE0F7FB0E54
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/xIBDhjTP5O-E09EjwvMDC4D05WY.roa
Signing time: Mon 02 Jan 2023 00:34:44 +0000
ROA not before: Mon 02 Jan 2023 00:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.133.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:f1:7f:99:a7:a7:a8:3d:da:8e:e0:f7:fb:0e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jan 2 00:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c480438634cfe4ef84d3d123c2f3030b80f4e566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:53:ed:7b:7a:b4:37:32:9e:2a:64:3b:5e:
6c:d5:12:f5:de:03:e7:99:e6:68:2c:ff:e8:81:fa:
a7:d7:d6:2c:a0:2c:a1:f1:b7:9a:ed:f5:9c:19:8b:
d4:15:71:30:f7:96:88:47:da:b2:af:bd:33:1c:e1:
ed:b9:e3:ed:b9:47:08:88:fd:0f:a7:21:08:30:f4:
7f:40:e0:dd:8d:69:11:0b:6f:bf:ed:08:ce:74:54:
9c:73:5a:c4:46:21:84:b2:72:fb:68:b2:9d:66:3a:
29:9e:19:7a:35:43:78:50:eb:e7:c0:41:c6:ec:73:
e5:20:ee:39:ae:1b:5d:e9:9d:cc:d6:27:3b:33:1b:
4e:77:d9:0a:0c:bf:85:df:65:d9:9f:12:8e:a0:61:
80:66:a2:99:18:d5:16:6c:d9:2e:a7:8b:31:83:aa:
85:88:6d:1b:1c:4f:c1:5e:00:2e:a3:5a:31:08:44:
77:e6:cd:c4:e6:c4:71:c0:1b:e8:41:04:a8:3e:02:
b6:c2:86:f0:ea:05:03:b0:1b:ed:dd:76:df:33:3f:
8d:1c:c7:aa:1d:ee:aa:a3:24:89:3b:af:95:8f:6e:
c4:7e:da:dd:c4:66:f0:89:eb:fe:c3:c6:d1:a5:40:
70:9d:c9:0b:28:56:06:e1:44:b4:e3:e6:74:fa:a3:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:43:86:34:CF:E4:EF:84:D3:D1:23:C2:F3:03:0B:80:F4:E5:66
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/xIBDhjTP5O-E09EjwvMDC4D05WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.70.0/24
Signature Algorithm: sha256WithRSAEncryption
46:00:d0:8d:c0:25:35:d8:1b:d8:72:dd:fd:a4:c4:53:cf:f5:
8f:66:94:f4:f5:8b:19:f2:f3:a8:ab:34:93:75:9b:6d:a9:b2:
5c:ef:3a:4d:2d:63:ee:6a:92:a6:c6:92:cd:ec:96:cf:c8:00:
82:89:8f:40:0e:51:33:1f:b9:18:8b:ff:4f:32:90:a3:33:6c:
10:03:0b:a2:9e:64:0d:22:d6:f8:c8:81:ec:e2:89:8e:e7:25:
60:8c:b7:89:e1:4d:82:38:99:ab:12:0f:9f:be:ae:42:49:e0:
7b:3a:66:42:1a:ac:80:91:5e:91:a2:28:e9:bf:f4:23:db:66:
9d:7d:90:bb:47:ef:39:56:cf:1b:cf:a6:60:5e:92:a7:16:1b:
c4:db:22:78:81:0c:46:03:e8:7b:1a:f8:58:3e:21:7f:55:41:
65:18:8c:27:63:a9:1a:63:1f:fa:61:93:f5:2e:3f:83:29:7e:
98:97:7d:52:d6:f6:ea:07:44:b8:e3:ca:c0:8f:3a:ee:b6:12:
8f:2d:fd:91:e2:db:97:50:b1:f0:ac:06:71:0f:db:78:73:5d:
04:72:10:9f:2f:de:b4:07:85:0a:49:30:62:15:f6:b2:28:a7:
aa:28:a3:8a:c5:53:bd:51:d4:01:e0:3d:f4:3d:76:7a:e3:5e:
d7:ad:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org