Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/_ux1huYF1EEUvfZ0pY6LWMx_X_0.roa
File: _ux1huYF1EEUvfZ0pY6LWMx_X_0.roa (raw, json)
Hash identifier: ++hdDh5jTRHtEXu0x/xkQ+Dxims8RRMt/0F+E83Kx/4=
Subject key identifier: FE:EC:75:86:E6:05:D4:41:14:BD:F6:74:A5:8E:8B:58:CC:7F:5F:FD
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 018572D5CAC7186C3D197D95F850118A6624
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/_ux1huYF1EEUvfZ0pY6LWMx_X_0.roa
Signing time: Mon 02 Jan 2023 14:14:51 +0000
ROA not before: Mon 02 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41765
IP address blocks: 185.233.48.0/24 maxlen: 24
185.233.50.0/23 maxlen: 23
185.233.48.0/22 maxlen: 22
193.33.46.0/23 maxlen: 23
188.65.168.0/21 maxlen: 21
31.172.164.0/22 maxlen: 22
185.4.63.0/24 maxlen: 24
193.37.150.0/24 maxlen: 24
2a02:2288::/29 maxlen: 29
2a02:2288::/32 maxlen: 32
2a0c:d500::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 09 Jan 2023 15:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:ca:c7:18:6c:3d:19:7d:95:f8:50:11:8a:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Jan 2 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feec7586e605d44114bdf674a58e8b58cc7f5ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:46:41:e8:46:9a:b4:fd:5a:35:08:18:21:
ef:d2:de:99:92:64:6d:99:d6:a4:26:a6:75:8f:96:
9c:28:61:6c:58:c7:f5:a7:d9:33:45:99:1b:ee:e3:
14:79:0e:19:c6:11:35:16:fb:ce:13:0a:82:f4:f4:
1d:ce:e9:6f:54:4a:56:97:2e:51:41:f2:7b:84:23:
4a:ab:cb:65:0e:2c:64:79:14:15:63:1f:b2:d0:21:
3b:f5:9e:2e:27:3e:6e:7b:3c:1a:37:f9:01:d5:4e:
da:7f:8b:cc:a6:be:d3:44:b0:e6:9c:df:0c:12:e9:
9e:30:70:91:12:c9:c8:6c:df:b8:4b:88:af:92:52:
b2:16:3d:69:34:d5:16:46:21:c9:e1:07:b8:fc:e1:
a0:58:25:ba:6c:e4:83:1a:db:74:0e:89:85:12:fc:
3f:34:b0:a5:dc:b7:d5:5d:44:75:18:1c:a8:60:03:
92:6a:43:72:98:a2:a4:30:a3:cb:26:b7:f1:a5:e3:
e0:22:6e:20:8f:e8:c6:5e:50:b3:3a:b6:41:67:64:
af:81:9e:f0:51:c0:d1:11:33:46:96:18:fa:a6:41:
51:60:a4:7f:54:b1:3c:54:f4:56:2c:25:8f:32:c3:
0c:1f:ab:b1:1c:fe:a0:dc:96:70:98:4e:59:d4:20:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:75:86:E6:05:D4:41:14:BD:F6:74:A5:8E:8B:58:CC:7F:5F:FD
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/_ux1huYF1EEUvfZ0pY6LWMx_X_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.164.0/22
185.4.63.0/24
185.233.48.0/22
188.65.168.0/21
193.33.46.0/23
193.37.150.0/24
IPv6:
2a02:2288::/29
2a0c:d500::/29
Signature Algorithm: sha256WithRSAEncryption
5b:f8:15:52:97:04:7a:3d:39:3d:61:30:25:b5:ef:cc:7e:92:
cc:fe:c9:37:1a:c6:69:b4:50:a6:66:fb:c9:51:8e:06:4d:d4:
4d:b5:b3:fb:1c:ab:fe:9a:74:07:21:95:3b:eb:1e:e2:99:e6:
ef:79:95:ea:30:f5:79:66:a8:aa:85:35:8d:8c:04:49:92:0a:
72:f3:65:80:67:34:7b:d8:07:8a:24:ae:8a:bb:39:96:ab:76:
86:77:fb:c4:14:fd:d8:68:87:c0:2b:6b:b5:62:a1:fc:96:60:
da:da:1f:1e:9d:dc:af:5b:7a:5d:87:8b:e3:7d:07:a0:31:ed:
00:95:46:55:5f:20:c4:fd:5c:25:08:a1:e3:4d:ec:23:49:68:
7d:cb:c5:1a:91:01:65:b5:d0:ef:57:32:af:38:b0:28:9e:06:
30:e7:a6:2a:99:3b:ed:26:7a:04:b9:8e:9c:60:7f:52:da:55:
1e:03:32:96:30:50:5e:e2:cd:47:1c:89:0b:fb:77:41:7f:16:
a1:89:9a:9c:9e:04:f1:e4:50:03:df:3c:be:11:dd:a7:22:be:
f5:2f:1e:f8:e6:c8:bf:8b:0f:f4:d2:ff:ca:98:f8:d5:5d:75:
0a:90:ae:d7:27:8d:1d:3d:9c:73:5b:b1:15:db:86:32:ed:a9:
ba:de:a1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:39 2024 by rpki-client on console-fra.rpki-client.org