Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/xmdbNuxJvNEta5m4GDAgc5fd7EI.roa
File: xmdbNuxJvNEta5m4GDAgc5fd7EI.roa (raw, json)
Hash identifier: +2iEut72KywY0yPqAZnHWR37k8CRj5xsSskjNQXLhEw=
Subject key identifier: C6:67:5B:36:EC:49:BC:D1:2D:6B:99:B8:18:30:20:73:97:DD:EC:42
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 018571FA11D61B732E9D93FA3A0E99704118
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/xmdbNuxJvNEta5m4GDAgc5fd7EI.roa
Signing time: Mon 02 Jan 2023 10:14:51 +0000
ROA not before: Mon 02 Jan 2023 10:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209815
IP address blocks: 194.31.136.0/22 maxlen: 22
2a09:1380::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:11:d6:1b:73:2e:9d:93:fa:3a:0e:99:70:41:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Jan 2 10:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6675b36ec49bcd12d6b99b81830207397ddec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cf:30:3e:a9:08:7b:d5:76:4f:f0:34:55:a4:
42:5a:d2:2f:2a:0b:c3:05:71:e5:81:b5:b0:d7:96:
f4:64:4b:aa:0d:f1:a0:90:6a:18:a4:20:47:2a:38:
b3:f1:9c:5a:a1:52:1b:a2:f1:7f:4c:b8:50:a4:91:
b2:c1:fb:e5:f8:0d:40:ea:7b:c0:e9:b3:c0:f0:a4:
10:17:24:54:65:ca:77:c0:08:97:f7:fc:fb:55:59:
b7:49:ac:09:35:8c:b2:20:43:24:4c:1b:0d:26:12:
f9:fa:19:e1:85:5b:77:ea:48:92:9e:38:b4:7f:e2:
59:9b:08:cb:aa:6d:85:77:c6:d6:ab:0e:85:3e:bf:
66:41:53:da:4f:ad:d5:01:07:74:d5:ff:c5:45:fb:
10:2d:a3:e2:ce:85:36:53:96:04:47:9b:42:8e:99:
db:7e:a2:18:96:9d:b5:aa:23:74:0b:b9:dd:3f:c1:
c8:18:64:ea:92:87:4d:ca:70:ba:51:84:3d:c0:27:
61:2a:58:72:c5:58:f1:f0:ba:97:7e:1f:02:8e:1a:
92:c0:8d:4d:74:e7:ba:e7:df:47:39:b4:7d:23:94:
4d:7a:6d:b6:1d:58:b2:b9:34:de:b6:78:9e:3f:1d:
29:45:97:73:6b:ec:85:e7:e3:a7:94:8d:02:72:9a:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:67:5B:36:EC:49:BC:D1:2D:6B:99:B8:18:30:20:73:97:DD:EC:42
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/xmdbNuxJvNEta5m4GDAgc5fd7EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.136.0/22
IPv6:
2a09:1380::/29
Signature Algorithm: sha256WithRSAEncryption
91:46:43:d6:df:30:92:00:a5:d9:01:53:f7:40:19:e1:77:65:
33:fd:ca:f0:a1:6d:8c:d3:ac:9d:84:9c:6e:72:d0:81:0c:a7:
09:fb:e2:75:36:c2:90:f0:44:94:6d:aa:5c:62:e7:95:ad:96:
61:35:98:16:e3:59:4f:3e:d9:41:ed:d6:93:7d:61:fe:27:f0:
71:92:33:2c:1d:0b:39:0e:b7:8c:59:ce:66:29:89:97:a1:6f:
78:df:e7:1c:51:25:73:32:65:d8:a0:63:d3:4d:9e:98:25:75:
df:7b:0e:f1:ff:23:bb:81:06:e0:ba:40:a9:b6:9e:db:ce:4c:
62:fa:38:b9:09:bc:de:67:31:1f:49:23:2f:e7:da:0d:e0:0b:
68:d9:19:f0:72:5d:5e:17:17:a7:1a:6e:87:4a:30:41:ca:1a:
59:25:f1:76:60:40:c2:6a:12:c5:b7:02:12:e3:c1:f7:09:39:
08:09:46:2a:28:2b:e6:b3:09:93:47:a8:3f:36:aa:bb:95:18:
c2:43:7a:4a:27:c1:66:76:a4:b7:d1:96:59:0f:8d:92:b7:3c:
de:b9:b3:9b:d7:73:0c:bd:4d:3c:b9:24:7e:b4:13:8c:eb:d8:
43:9e:e0:d4:58:6b:45:ca:4a:a4:37:3a:02:1e:24:5a:f6:ea:
40:99:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:41 2024 by rpki-client on console-ams.rpki-client.org