Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/xWOAvHT4JHPTSV9Bi-L-LjG2QS4.roa
File: xWOAvHT4JHPTSV9Bi-L-LjG2QS4.roa (raw, json)
Hash identifier: jsPdv0UemY5veIDutyGmbLUzC3dWLlE2xPgGE7azyOo=
Subject key identifier: C5:63:80:BC:74:F8:24:73:D3:49:5F:41:8B:E2:FE:2E:31:B6:41:2E
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 018A84415AD8BEDD262A4BE0C91275E596B3
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/xWOAvHT4JHPTSV9Bi-L-LjG2QS4.roa
Signing time: Mon 11 Sep 2023 12:39:50 +0000
ROA not before: Mon 11 Sep 2023 12:39:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8697
IP address blocks: 86.108.0.0/17 maxlen: 24
46.185.128.0/17 maxlen: 24
79.173.192.0/18 maxlen: 24
185.98.220.0/22 maxlen: 24
92.253.0.0/17 maxlen: 24
217.23.32.0/20 maxlen: 24
149.200.128.0/17 maxlen: 24
37.202.64.0/18 maxlen: 24
194.165.128.0/19 maxlen: 24
213.186.160.0/19 maxlen: 24
94.249.0.0/17 maxlen: 24
2a01:9700::/29 maxlen: 48
2a01:9700::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:41:5a:d8:be:dd:26:2a:4b:e0:c9:12:75:e5:96:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Sep 11 12:39:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56380bc74f82473d3495f418be2fe2e31b6412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:c2:b9:97:cc:b4:e2:f9:9a:3d:8a:62:b1:
bb:02:e3:50:04:e1:9b:9d:85:9e:62:7b:3c:f0:77:
51:a0:f8:3f:06:20:23:5d:c1:75:e9:5a:19:9d:86:
24:6a:83:49:fa:11:59:a7:15:53:a1:2e:76:df:b2:
0c:13:a0:5b:84:fa:cb:c9:7d:46:78:10:d2:16:75:
94:cd:97:59:3e:4c:66:24:45:1a:dd:11:13:67:9e:
4e:f1:f8:8c:f1:14:e7:9e:63:31:29:7d:ba:30:c6:
71:e9:1f:60:07:a1:4e:64:5f:df:ef:56:1b:6a:07:
5a:a4:30:73:65:37:d5:1f:8c:07:eb:ca:e6:a0:a5:
b0:a4:fc:e4:be:47:06:37:fe:7b:68:d1:13:59:c6:
ed:b9:24:48:88:02:d1:70:76:15:68:cd:6a:87:9b:
46:a9:c4:a1:b6:68:30:65:72:8f:f6:f2:84:63:72:
65:28:28:d0:b6:56:a0:15:df:d8:2f:1f:42:67:ce:
47:e6:ee:2b:6d:cc:18:b7:88:7a:e9:5e:aa:f8:02:
10:64:48:a6:23:72:eb:25:97:85:40:7b:c1:d0:12:
30:78:ce:40:92:4f:82:b8:ad:19:a6:d6:43:50:66:
cb:11:8b:a6:81:2b:36:ac:48:10:88:98:b1:c7:35:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:80:BC:74:F8:24:73:D3:49:5F:41:8B:E2:FE:2E:31:B6:41:2E
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/xWOAvHT4JHPTSV9Bi-L-LjG2QS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.64.0/18
46.185.128.0/17
79.173.192.0/18
86.108.0.0/17
92.253.0.0/17
94.249.0.0/17
149.200.128.0/17
185.98.220.0/22
194.165.128.0/19
213.186.160.0/19
217.23.32.0/20
IPv6:
2a01:9700::/29
Signature Algorithm: sha256WithRSAEncryption
a0:55:3a:ff:e4:ad:2e:ec:d3:17:9c:9e:b5:93:29:ca:88:3c:
31:18:1e:86:31:51:e6:a3:32:0f:81:ac:03:01:a8:ff:8b:16:
d1:15:49:79:96:39:3b:5b:90:0c:4a:c5:e8:b5:0e:42:fb:3b:
00:1c:d5:14:45:32:e1:00:66:20:ed:a3:12:ce:fc:92:2c:48:
77:d4:97:6b:44:d9:53:1e:c3:a0:30:31:6c:67:7f:6b:54:cf:
d3:cd:88:d7:c5:4f:b1:26:58:aa:a4:49:69:b9:16:02:06:45:
b5:02:42:66:d9:fd:c2:92:79:28:d3:2a:a9:7a:b6:c6:7f:e0:
26:e2:24:8f:36:e2:82:5d:66:d5:e1:7b:4d:b2:fe:2b:56:db:
9b:d6:54:e0:2d:b2:cb:b3:81:02:ea:81:99:1d:f3:df:6a:8a:
55:7f:33:e9:bf:13:63:64:57:3c:13:70:fb:ea:03:66:73:75:
f5:f8:30:d8:65:46:de:23:91:b0:62:b3:f9:6a:c8:51:71:6c:
e2:2e:ef:72:6b:75:e9:13:63:bf:38:1d:28:00:fc:5c:70:7b:
06:a5:5a:93:90:65:28:f9:77:53:3e:fe:f8:a5:b9:35:fc:6a:
61:6f:85:a6:58:c6:82:1f:90:99:76:79:b7:b3:e6:d1:a4:67:
96:30:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:44 2024 by rpki-client on console.sobornost.net