Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/XuUM98sgKhmIzHbfHzUI6E7FLSA.roa
File: XuUM98sgKhmIzHbfHzUI6E7FLSA.roa (raw, json)
Hash identifier: WDzZuA1IIotb0fKdC7qb7d6WgIqwLsN/XSwWamCHiyg=
Subject key identifier: 5E:E5:0C:F7:CB:20:2A:19:88:CC:76:DF:1F:35:08:E8:4E:C5:2D:20
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 01856FD4EF55242E478E3A30F274292833A3
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/XuUM98sgKhmIzHbfHzUI6E7FLSA.roa
Signing time: Mon 02 Jan 2023 00:15:03 +0000
ROA not before: Mon 02 Jan 2023 00:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210333
IP address blocks: 185.202.98.0/23 maxlen: 23
185.202.96.0/23 maxlen: 23
213.109.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 13:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:ef:55:24:2e:47:8e:3a:30:f2:74:29:28:33:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Jan 2 00:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ee50cf7cb202a1988cc76df1f3508e84ec52d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:47:5b:69:b7:05:5c:61:52:1c:a0:4b:b9:
8f:16:a5:b9:92:17:7d:f2:ad:77:8c:7e:07:b7:3d:
5e:b8:9f:7a:11:83:6d:33:5b:46:06:79:a4:60:33:
46:ce:87:f8:93:c2:55:70:6c:72:79:1e:94:14:54:
42:23:57:d1:45:2a:b0:99:5f:cc:fa:b4:61:fd:11:
35:28:77:64:cf:b1:5e:8e:80:90:93:4b:7c:4f:d6:
ad:9d:4d:50:4c:89:91:06:c0:4c:1e:cd:57:8b:fb:
1c:9b:af:80:db:4e:93:d4:fa:50:60:ee:6d:a2:e6:
38:7d:9c:ff:82:3d:32:cc:e7:70:72:fa:71:0b:8a:
1d:65:82:d6:a2:ab:76:39:f3:a0:5f:c7:62:70:9e:
49:72:62:aa:04:7c:61:c3:a7:ec:93:bb:91:db:fa:
17:af:82:db:19:18:28:cd:f6:09:de:91:dd:a8:5a:
ca:f1:cd:bb:94:07:28:ed:6c:54:58:ec:b1:92:31:
d4:cc:a0:c5:2a:d5:86:2a:42:be:d0:25:5f:44:e6:
73:28:f4:6e:99:e3:08:33:49:d8:e7:bd:ea:f3:b5:
3c:b4:92:c0:bc:fe:24:d0:40:8c:98:12:f7:fe:63:
6c:a5:94:98:e1:34:18:73:6b:84:1b:45:7a:f9:bf:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:0C:F7:CB:20:2A:19:88:CC:76:DF:1F:35:08:E8:4E:C5:2D:20
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/XuUM98sgKhmIzHbfHzUI6E7FLSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.96.0/22
213.109.144.0/24
Signature Algorithm: sha256WithRSAEncryption
31:cd:53:a0:b2:f0:db:3b:6e:6a:46:41:db:36:e7:59:1a:d7:
b8:1a:5b:46:90:6f:b0:82:72:46:7e:80:62:16:12:a8:ab:5c:
37:a1:c0:a7:f5:c2:15:38:01:36:fe:83:15:dc:d8:5f:f1:0d:
7b:52:21:30:5f:dc:7d:ea:e0:59:1f:10:21:39:50:76:cb:aa:
8c:a8:59:47:71:85:1d:12:03:c4:d9:2e:c3:51:76:7a:35:62:
e3:50:ed:e0:06:66:2c:ec:92:7e:37:12:69:bc:30:94:7c:b2:
1f:cf:e9:4b:05:a0:85:72:35:6f:e1:13:f0:7c:83:f4:fc:cf:
c0:21:c1:a7:ff:21:2c:7d:c0:97:87:27:b2:02:ac:b3:67:02:
1a:46:5b:cc:65:c3:5f:71:80:3d:bb:1c:95:7b:de:8c:7a:28:
d2:c1:50:20:be:cd:31:e3:3d:b3:66:97:1a:51:97:3f:4f:99:
11:52:3f:c4:69:8c:b9:e0:27:ce:dc:c3:2c:07:4d:11:2c:21:
e9:95:e1:9b:a0:00:44:f2:0b:c9:d1:ac:91:14:6f:9d:90:eb:
52:39:17:b1:2a:09:46:57:24:50:6d:35:87:6f:b8:59:ec:78:
07:c8:78:11:ca:18:73:cc:29:f2:c7:77:13:45:3c:9a:00:77:
1c:d0:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:24 2024 by rpki-client on console-fra.rpki-client.org