Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/xoWDTkjue3Y_lbdDEFEcj099QLg.roa
File: xoWDTkjue3Y_lbdDEFEcj099QLg.roa (raw, json)
Hash identifier: /zjmLtXLjXzJ7pm5NHD8wY2THFplGKfF/ItAEoctFgM=
Subject key identifier: C6:85:83:4E:48:EE:7B:76:3F:95:B7:43:10:51:1C:8F:4F:7D:40:B8
Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Certificate serial: 01878DB1A17C307880B12E55F30951D3E6FF
Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/xoWDTkjue3Y_lbdDEFEcj099QLg.roa
Signing time: Mon 17 Apr 2023 05:30:41 +0000
ROA not before: Mon 17 Apr 2023 05:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57468
IP address blocks: 194.60.240.0/23 maxlen: 23
45.15.220.0/22 maxlen: 22
194.60.241.0/24 maxlen: 24
185.6.210.0/24 maxlen: 24
185.6.211.0/24 maxlen: 24
185.6.208.0/22 maxlen: 22
185.6.209.0/24 maxlen: 24
185.144.32.0/22 maxlen: 22
2a03:1040::/32 maxlen: 32
2a07:3a80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8d:b1:a1:7c:30:78:80:b1:2e:55:f3:09:51:d3:e6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd
Validity
Not Before: Apr 17 05:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c685834e48ee7b763f95b74310511c8f4f7d40b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:85:36:7b:b2:a5:9f:31:29:e7:06:0e:44:
9d:f0:36:67:ac:1a:cf:79:6c:31:92:ec:86:28:05:
06:04:d1:3d:69:ff:a5:e0:f6:eb:a3:0d:71:2a:b3:
c0:ba:6d:70:ea:07:52:fc:c6:46:24:71:62:91:81:
22:f3:1a:9a:c1:6f:c5:d9:40:83:2a:5c:24:83:a6:
91:ee:bb:1c:a5:e1:0c:46:84:2f:a3:f2:fc:46:b5:
81:5d:8a:59:68:fd:d5:1b:94:73:9f:81:6a:5e:87:
0e:0b:59:46:60:5a:6e:e5:59:aa:29:15:9b:d9:73:
0f:d4:2a:cc:f0:dc:ec:2c:54:01:51:db:09:b4:ac:
b4:07:b9:f6:1d:1b:98:73:52:04:dc:cc:cc:41:4e:
47:59:b7:66:8c:d1:a1:40:04:01:cb:1f:d3:9d:a3:
11:46:a5:2a:0f:7a:20:ca:c8:c6:6d:a2:20:ab:70:
ad:0c:45:a4:f2:86:c6:64:35:e4:b4:19:2f:bf:33:
d2:01:cf:0b:f8:1b:c7:d6:35:e7:ff:77:ff:bf:c2:
d5:7d:cc:7b:2d:0c:c9:1f:f5:b6:2a:76:54:49:b3:
0e:d0:11:4d:e8:9c:c7:d8:55:30:c6:a6:0f:db:67:
30:f2:25:43:8d:3a:4b:7b:df:17:6b:d3:77:f3:e1:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:83:4E:48:EE:7B:76:3F:95:B7:43:10:51:1C:8F:4F:7D:40:B8
X509v3 Authority Key Identifier:
keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/xoWDTkjue3Y_lbdDEFEcj099QLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.220.0/22
185.6.208.0/22
185.144.32.0/22
194.60.240.0/23
IPv6:
2a03:1040::/32
2a07:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:5e:c2:70:a8:78:fe:1a:9d:76:51:1c:d3:9c:9e:32:89:7f:
6a:b8:c3:29:74:fe:53:66:af:d0:87:29:a4:e2:66:1c:48:6f:
ee:05:5b:ed:20:42:a3:97:e6:eb:78:cd:d0:2a:22:6e:23:4c:
fe:cb:6e:91:1f:3c:5b:8f:40:b7:4b:67:97:c0:a4:e2:fa:ae:
79:3a:4c:b3:c6:2d:a0:78:b8:58:82:8e:c9:dd:5e:72:c3:db:
76:08:04:cb:25:7e:9b:87:c9:f1:ae:9d:39:af:7f:98:cc:0e:
94:39:2a:89:97:78:5b:63:55:b9:ac:4e:f8:be:33:1d:39:6f:
85:8a:6c:92:dd:7c:0f:7e:c9:8e:5e:7b:e1:78:97:00:26:26:
ec:4d:32:19:7a:75:47:6c:0d:ff:47:17:a1:af:c5:4f:ed:88:
28:92:31:a0:70:71:c1:e8:36:e6:ee:83:e5:94:c8:e6:2c:74:
66:f9:a0:25:ba:5c:07:38:a6:74:72:6b:37:fa:51:37:e2:7b:
2d:8a:c9:60:9b:3d:ef:ac:78:84:61:25:33:a8:78:dc:7e:c0:
52:39:2d:14:d5:a1:c0:57:d1:75:48:c3:d7:9c:19:b6:bb:96:
40:95:b8:91:d6:fb:e4:bd:0f:8d:31:cf:73:44:60:cc:e9:0c:
01:47:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:02 2024 by rpki-client on console-ams.rpki-client.org