Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/XU55AnCJ4e8-gcm2CREXDT-4Ijo.roa
File: XU55AnCJ4e8-gcm2CREXDT-4Ijo.roa (raw, json)
Hash identifier: WQc9tQYGJ6+XpngSKYdiudyKIiVB714fpbywqEyQLeo=
Subject key identifier: 5D:4E:79:02:70:89:E1:EF:3E:81:C9:B6:09:11:17:0D:3F:B8:22:3A
Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial: 018CC3B6A04E8E9D88FF3D736FDA5DA55B2B
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/XU55AnCJ4e8-gcm2CREXDT-4Ijo.roa
Signing time: Mon 01 Jan 2024 06:29:34 +0000
ROA not before: Mon 01 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35007
IP address blocks: 91.201.120.0/22 maxlen: 22
185.221.80.0/22 maxlen: 22
195.225.36.0/23 maxlen: 23
195.160.184.0/23 maxlen: 23
93.157.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 08 Apr 2024 11:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a0:4e:8e:9d:88:ff:3d:73:6f:da:5d:a5:5b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Validity
Not Before: Jan 1 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d4e79027089e1ef3e81c9b60911170d3fb8223a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:a3:75:c4:dc:29:a0:47:27:b7:72:d6:92:
b8:d9:df:cc:cc:74:18:8c:b1:92:7b:e6:eb:08:fd:
14:8f:5c:c9:96:d1:c0:b4:90:7b:3d:57:9a:3e:84:
b3:e4:e5:0d:f2:d8:9a:5f:f3:37:33:15:58:b2:b0:
a5:89:b0:9f:14:6e:75:0d:57:03:9c:81:64:5e:98:
c8:b3:b2:a3:5f:6a:12:a8:90:c2:fe:4a:23:1c:0f:
9f:84:cb:cc:24:0a:d5:56:1f:1b:d4:2e:59:e8:b2:
52:9e:b1:fd:70:e4:36:db:f0:73:ea:b5:5d:d8:cb:
5e:f7:1c:38:bb:37:c5:23:57:de:91:ad:2f:e5:9c:
82:6d:6a:2e:ae:fb:07:bf:af:6d:57:6d:44:51:a3:
41:7d:88:d9:5e:a3:a9:c0:17:8b:08:32:76:ba:32:
e5:0d:24:52:09:ac:96:ab:ea:ee:f6:66:2b:7e:83:
40:5a:b1:50:a2:ee:13:24:18:01:84:11:5f:c6:7e:
0d:78:f3:90:a2:fb:c1:c6:41:ce:aa:b6:6e:99:5f:
64:58:7e:41:6c:38:43:2f:02:03:a0:db:00:30:81:
4a:fb:57:38:53:a2:42:d4:3c:e8:16:1d:3d:7b:3b:
87:c6:3a:2a:22:7a:d1:d9:50:45:22:e7:1c:c8:9a:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:79:02:70:89:E1:EF:3E:81:C9:B6:09:11:17:0D:3F:B8:22:3A
X509v3 Authority Key Identifier:
keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/XU55AnCJ4e8-gcm2CREXDT-4Ijo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.120.0/22
93.157.112.0/21
185.221.80.0/22
195.160.184.0/23
195.225.36.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:94:c7:4c:6a:c1:b1:59:dc:20:f0:31:3e:fc:fb:58:c9:c1:
c1:f9:1e:ee:01:ab:83:d9:87:32:ef:a6:1e:70:69:e2:a6:7d:
65:31:b5:7d:2e:db:7f:0f:e7:63:29:b0:27:35:c5:29:8b:f6:
a5:ff:2a:14:0b:2c:1b:e8:95:b3:e1:51:7b:6c:e5:ac:e9:27:
fe:db:d2:68:28:95:57:10:49:a0:a0:d2:57:e1:d8:84:22:c0:
0a:aa:ce:a5:5e:b3:30:94:40:f4:dc:01:1c:cf:8d:71:6e:8a:
20:fa:eb:49:2f:3f:63:c8:97:36:45:1f:5b:45:12:f1:6d:33:
86:20:bf:05:a4:40:69:47:7c:e3:35:75:0e:23:98:a6:fc:88:
eb:ff:a3:50:51:4c:9e:cc:0b:d3:44:10:07:e4:14:50:a4:92:
1c:44:b3:58:c5:ef:a8:a0:16:58:c3:56:82:fd:6d:ad:f3:f6:
d6:0a:1e:5a:cf:7b:d1:1f:21:d1:fc:a7:18:33:4e:25:66:80:
c4:d8:6d:e2:02:62:f2:ec:f4:9d:d7:c4:09:83:87:77:1a:e2:
8b:03:59:e6:bb:9d:81:0b:f2:8d:07:f7:8d:17:f0:af:1c:c1:
7c:ee:05:1c:7d:55:e9:e8:88:ee:0e:22:46:ec:8f:fe:91:e0:
2c:de:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:09 2024 by rpki-client on console-ams.rpki-client.org