Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/xvUCB_rt8gxTEhAJnfK_g3pJdKI.roa
File: xvUCB_rt8gxTEhAJnfK_g3pJdKI.roa (raw, json)
Hash identifier: 8XcWy5STiMuuRDCIP/hxNRR9OZxLgvzqs9ZfmrotZqY=
Subject key identifier: C6:F5:02:07:FA:ED:F2:0C:53:12:10:09:9D:F2:BF:83:7A:49:74:A2
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 01856CAF1A254EDA64E8A7B03ABFF10E6584
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/xvUCB_rt8gxTEhAJnfK_g3pJdKI.roa
Signing time: Sun 01 Jan 2023 09:34:52 +0000
ROA not before: Sun 01 Jan 2023 09:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31631
IP address blocks: 185.249.80.0/22 maxlen: 22
2a0c:140::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:1a:25:4e:da:64:e8:a7:b0:3a:bf:f1:0e:65:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Jan 1 09:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6f50207faedf20c531210099df2bf837a4974a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:97:d9:d5:9f:01:06:5b:02:55:3d:96:e0:
72:9e:f3:13:03:b5:00:b1:9e:c1:10:50:0e:7a:40:
46:c1:47:9c:2b:a6:5d:fa:76:24:b2:3a:c1:a5:61:
56:b4:b3:52:d0:d0:1e:c4:5a:b6:0c:7e:53:d4:6e:
42:ec:c9:80:1b:1d:35:4e:30:35:e7:59:ee:b9:33:
67:77:13:af:25:a5:cc:1f:c1:c0:e0:1c:22:8b:21:
fc:8e:df:a6:1e:2b:a0:7c:55:99:65:d3:d4:94:9b:
f8:6b:5d:c4:a9:86:5b:c8:03:b8:e4:e4:ab:da:a6:
d3:79:00:ac:0c:cc:50:3e:73:38:8a:e1:c4:c7:9d:
d5:25:64:f8:d6:12:81:63:df:6e:d0:0b:f2:b8:5a:
ec:2c:4f:67:89:34:ff:a3:7c:c5:38:1b:32:7f:27:
ff:3a:3d:9a:7b:d9:b3:2c:db:02:0b:c2:fc:2a:8e:
30:f4:f9:9d:7d:da:3f:f2:82:b0:e7:a6:f2:b6:02:
2e:5a:a8:af:e4:b2:74:b0:60:1c:77:3f:82:41:43:
2e:9d:42:2b:02:58:c4:ff:0d:e0:cb:a6:55:6d:59:
1e:eb:a5:0e:a5:a1:5d:f8:c1:06:72:6e:e1:39:57:
ad:e8:b0:0f:f2:7a:11:7c:d8:fa:48:6b:df:75:bf:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:02:07:FA:ED:F2:0C:53:12:10:09:9D:F2:BF:83:7A:49:74:A2
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/xvUCB_rt8gxTEhAJnfK_g3pJdKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.80.0/22
IPv6:
2a0c:140::/29
Signature Algorithm: sha256WithRSAEncryption
21:60:5c:34:7d:78:42:55:f2:7d:8f:27:a4:df:69:f7:42:1c:
67:e7:be:3d:fa:71:7a:7f:8f:7a:0f:cf:9f:6d:3d:b5:67:c8:
1c:24:da:a7:a7:09:59:94:0d:30:4e:c4:1d:88:58:f7:10:57:
b0:9e:64:ad:37:e6:56:42:2a:17:26:14:d5:0c:9d:33:72:41:
d5:a9:3a:bc:d5:45:a1:88:77:2c:b6:c2:71:0f:36:6d:d3:0e:
37:87:74:6d:8a:5a:79:8b:24:91:af:a5:90:aa:3d:3d:67:a2:
ac:a5:ae:75:58:31:a7:fe:f5:cf:4b:70:c9:c3:dd:5d:30:c9:
12:32:32:f8:c9:13:61:3c:ec:a9:70:bb:7d:92:42:76:6e:06:
be:ce:40:03:86:b1:21:9f:11:da:b3:a8:96:ec:d5:5d:ed:f1:
ae:17:6f:d8:ac:97:bb:50:02:7d:36:c4:61:79:63:7a:73:ad:
dd:67:40:29:9c:e4:f8:39:c5:a3:48:26:2f:84:71:bd:e0:7d:
9b:9b:88:38:bb:66:85:5f:69:f0:04:5d:f3:9e:c6:b7:3e:cd:
3b:e8:34:f6:cf:6c:1d:19:11:42:e3:02:df:af:3a:b4:9c:6a:
4c:0d:b8:5e:8a:ff:9a:22:42:a7:1b:4a:f9:34:22:d4:6c:22:
7a:f4:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:23 2024 by rpki-client on console-fra.rpki-client.org