Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/Xp6vfsXpJ6A3H8U6XIPyFbb1NHE.roa
File: Xp6vfsXpJ6A3H8U6XIPyFbb1NHE.roa (raw, json)
Hash identifier: cHPh/ZAI3GtHviWv1s5W477/a1AInJC6WkCGXWiBtXA=
Subject key identifier: 5E:9E:AF:7E:C5:E9:27:A0:37:1F:C5:3A:5C:83:F2:15:B6:F5:34:71
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 018BB43A8A18AB772767195BAC8EE823A56C
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/Xp6vfsXpJ6A3H8U6XIPyFbb1NHE.roa
Signing time: Thu 09 Nov 2023 13:16:57 +0000
ROA not before: Thu 09 Nov 2023 13:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57752
IP address blocks: 185.54.36.0/22 maxlen: 22
185.167.220.0/22 maxlen: 22
185.17.56.0/24 maxlen: 24
185.17.56.0/22 maxlen: 22
185.17.57.0/24 maxlen: 24
45.130.236.0/22 maxlen: 22
45.130.236.0/24 maxlen: 24
45.130.238.0/24 maxlen: 24
45.130.237.0/24 maxlen: 24
45.130.239.0/24 maxlen: 24
185.234.48.0/22 maxlen: 22
83.136.148.0/23 maxlen: 23
83.136.150.0/23 maxlen: 23
176.118.172.0/22 maxlen: 22
109.205.64.0/21 maxlen: 21
2a03:dc00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:3a:8a:18:ab:77:27:67:19:5b:ac:8e:e8:23:a5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Nov 9 13:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e9eaf7ec5e927a0371fc53a5c83f215b6f53471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:f1:5c:4e:61:77:48:59:b6:be:7f:68:a7:
b6:c5:58:8e:27:7e:0c:1e:d4:3c:f4:da:dd:bc:f0:
20:c5:11:80:d0:8f:e2:ef:ec:e0:7d:fd:be:f0:0f:
8a:e2:a9:a6:b4:67:03:08:3f:ee:b0:3b:73:3c:75:
95:fe:38:ee:09:0e:6f:05:77:a8:c2:20:b7:91:de:
c7:3c:20:f6:5a:46:a8:49:d3:0b:32:ec:43:f5:bf:
74:e0:1f:e7:0a:cf:bd:9e:87:1c:f6:f5:f5:21:dc:
b7:84:b9:08:d5:e3:d5:5d:f2:61:de:16:2b:40:ef:
c9:fe:d3:cd:61:73:a2:8b:da:2a:2b:b1:b2:8c:cc:
fa:22:03:81:42:94:5a:5b:d2:26:eb:e7:68:a5:46:
42:cb:4e:b8:7c:8c:f7:5e:4c:2f:69:11:59:30:a4:
27:c8:33:a3:4b:9b:62:66:ec:2e:07:49:39:01:cf:
31:d2:7c:5b:51:0e:78:0a:18:25:bf:d3:42:95:ee:
b1:0d:e4:23:b5:db:21:8d:8d:30:d8:a7:b9:5a:63:
a7:69:8c:b9:81:c9:50:f7:4f:44:05:4e:fc:c6:b3:
37:85:ab:c1:0b:75:fc:83:15:b9:d1:c3:42:9f:05:
f6:8c:2d:22:eb:9b:03:47:5f:98:f9:87:6a:19:91:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:AF:7E:C5:E9:27:A0:37:1F:C5:3A:5C:83:F2:15:B6:F5:34:71
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/Xp6vfsXpJ6A3H8U6XIPyFbb1NHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.236.0/22
83.136.148.0/22
109.205.64.0/21
176.118.172.0/22
185.17.56.0/22
185.54.36.0/22
185.167.220.0/22
185.234.48.0/22
IPv6:
2a03:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
82:2d:fc:a2:11:b0:a0:7f:b1:ae:c9:5e:75:76:82:3c:e6:79:
9a:f2:75:b3:4c:4e:33:10:dc:c3:3e:c6:36:ca:6f:8d:f7:90:
06:9e:5f:c7:41:89:23:41:2d:04:77:ad:83:11:20:e0:74:12:
1e:d6:69:df:56:77:b3:0c:ac:3a:0a:63:70:15:50:07:9a:01:
8b:b3:81:84:c9:dc:f3:1f:8c:b9:4a:df:c1:b9:08:88:7c:2c:
52:5f:b5:0a:a6:e4:0c:00:a5:dd:2a:c6:8c:17:60:29:ec:f0:
c7:cf:42:5b:36:b8:4d:5d:74:df:81:ff:89:13:54:20:a9:22:
4a:4d:62:e5:4e:f2:89:82:61:1e:0f:53:68:e0:d0:6f:ff:41:
fc:dd:9e:08:a5:7d:7a:bd:bc:15:ca:05:a0:1c:f4:10:da:6a:
31:f9:70:5a:92:60:55:3e:03:cc:ec:34:96:60:97:a8:be:2e:
bf:c1:99:4f:c8:0c:01:67:44:41:ae:4f:ef:60:33:1b:ef:1e:
85:08:2f:1a:4c:63:24:7c:c5:e9:e3:09:c7:27:e5:69:04:ce:
b4:19:1f:4a:5c:ca:5f:ab:9e:59:65:db:a1:7b:d6:d0:dc:9e:
07:67:ac:c6:0c:c2:e3:51:78:04:df:9f:22:76:75:64:82:a0:
1f:9f:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net