Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Xs0sM9NjfGu_3D3GRhOJgs5dhj0.roa
File: Xs0sM9NjfGu_3D3GRhOJgs5dhj0.roa (raw, json)
Hash identifier: zV6TKrrc13NBX3FYCRMYnlQ6dQaNMkEZ4/Bf0118dfw=
Subject key identifier: 5E:CD:2C:33:D3:63:7C:6B:BF:DC:3D:C6:46:13:89:82:CE:5D:86:3D
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AD38C133356468C4877260D2E4EFEDB3E
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Xs0sM9NjfGu_3D3GRhOJgs5dhj0.roa
Signing time: Tue 26 Sep 2023 22:11:27 +0000
ROA not before: Tue 26 Sep 2023 22:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15755
IP address blocks: 185.96.171.0/24 maxlen: 24
94.103.40.0/24 maxlen: 24
185.35.21.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.203.34.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:8c:13:33:56:46:8c:48:77:26:0d:2e:4e:fe:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Sep 26 22:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ecd2c33d3637c6bbfdc3dc646138982ce5d863d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:b4:9c:40:0e:13:14:62:57:c5:6b:46:8a:
87:5b:f1:09:e0:e4:d5:ea:84:73:c8:78:11:6d:43:
be:45:c2:38:c9:56:4c:4d:fc:b7:cd:f6:b3:b4:f6:
41:78:fe:96:0a:e7:76:14:c5:71:b9:e5:23:59:7d:
ba:30:21:8f:b7:0b:08:95:1b:af:ec:de:c6:16:3a:
67:b6:12:29:d0:e4:4c:3b:28:a9:15:b7:b2:ef:bb:
73:db:95:ba:b3:41:7d:10:7c:e1:d8:bf:e9:b9:0f:
96:2e:8d:cc:29:a1:a6:ac:9b:61:91:e5:f5:3e:14:
48:87:dd:1e:da:3d:41:6c:9c:72:c8:d6:49:8d:5e:
e4:0d:ba:df:40:60:0b:5e:3d:f8:33:ae:be:39:e5:
25:52:fc:29:d7:1e:02:8c:d9:49:59:2a:29:96:f1:
77:96:29:b9:ac:1c:70:57:06:b9:72:b2:2f:8d:29:
01:c4:72:1b:53:52:0a:44:f6:3b:c9:55:5c:9e:97:
e8:63:06:c6:4b:56:b0:ab:d1:63:a6:c9:37:e9:b6:
86:e3:6c:f0:25:3a:16:d6:bf:b5:2e:bf:06:a5:92:
1c:33:bf:eb:32:02:66:af:09:ef:96:44:91:1c:3a:
ba:5a:f3:41:e5:1d:e3:9e:ce:86:7e:c6:d2:c1:cb:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:2C:33:D3:63:7C:6B:BF:DC:3D:C6:46:13:89:82:CE:5D:86:3D
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Xs0sM9NjfGu_3D3GRhOJgs5dhj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.40.0/24
185.35.21.0-185.35.22.255
185.96.171.0/24
185.203.34.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:60:a8:21:79:d9:fd:80:c5:ce:36:30:04:27:d0:42:55:32:
25:f8:ee:dc:af:bf:ca:54:93:f0:48:40:f9:7a:5d:f1:32:7c:
43:5f:be:eb:92:56:a9:d1:16:72:0b:82:1e:12:fc:56:2f:b4:
89:dd:ec:ef:d2:ca:82:cb:4a:d1:6d:bf:be:ef:5e:70:ea:03:
81:32:3b:b6:54:96:b4:6d:ba:f8:44:03:26:2f:6c:c2:7d:56:
97:29:23:a7:fd:67:80:75:28:e6:3e:98:d6:fc:10:5d:0c:4d:
ce:8f:7f:3d:cf:28:17:67:6b:ed:f1:44:68:31:56:60:11:37:
f1:e0:99:fc:0a:8d:1a:82:6e:3a:e6:e3:46:07:99:65:a9:94:
b7:f7:5b:81:95:f8:3c:92:82:bc:cf:8b:c4:f3:7d:29:a9:8c:
41:4c:ad:e6:8d:23:d0:3e:13:28:7b:a1:da:56:76:96:e9:a8:
58:fc:f6:4b:93:69:cd:ad:93:9c:1b:df:65:da:cd:df:31:41:
5a:01:c3:68:9c:e0:25:d2:8b:f9:00:91:ff:ed:60:71:36:bd:
56:76:bc:dc:13:14:d7:2b:6c:1a:38:89:ca:17:fc:cf:fb:89:
5d:a4:ab:58:e7:ba:b2:a3:37:85:80:19:99:b5:e4:9b:61:f6:
e0:c7:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net