Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xwIk0Py66yyLrihz0LusmXBOaBk.roa
File: xwIk0Py66yyLrihz0LusmXBOaBk.roa (raw, json)
Hash identifier: SDy84D17IW8FHj94E4D6b9XhW+8wyAEgh9LWWWMnlQ0=
Subject key identifier: C7:02:24:D0:FC:BA:EB:2C:8B:AE:28:73:D0:BB:AC:99:70:4E:68:19
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018E0DEA959137A78F554733B314DE93661A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xwIk0Py66yyLrihz0LusmXBOaBk.roa
Signing time: Tue 05 Mar 2024 09:21:01 +0000
ROA not before: Tue 05 Mar 2024 09:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46475
IP address blocks: 194.62.249.0/24 maxlen: 24
194.62.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 06 Mar 2024 14:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:ea:95:91:37:a7:8f:55:47:33:b3:14:de:93:66:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 5 09:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c70224d0fcbaeb2c8bae2873d0bbac99704e6819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:e6:17:55:12:b0:2f:92:c7:67:2c:f4:1f:
d5:8d:99:42:c3:5f:cd:e4:77:a0:b9:6f:8e:bd:90:
96:37:01:40:cc:86:73:f1:2b:bb:13:97:b8:4f:1b:
b6:84:6b:a9:d3:58:27:46:3e:17:ff:56:86:e2:cb:
96:d1:73:75:19:5e:cb:25:36:32:53:e7:e3:3d:73:
5e:9f:51:58:32:ae:3e:99:1c:25:04:d2:20:eb:df:
a2:4a:3b:8a:13:b1:b9:2d:07:20:56:6b:ba:c1:d9:
b5:2d:d7:ad:83:41:8c:ac:f6:a0:02:1d:1f:3c:bf:
68:89:05:0d:77:1e:d2:51:bb:82:d8:ad:d7:64:cb:
e1:d9:cd:45:84:0a:02:01:ab:f3:87:17:82:18:f9:
31:45:10:fe:52:7e:f2:e2:08:e2:0c:8b:c6:55:89:
79:01:3b:52:ef:cd:4f:46:c7:89:5e:21:1a:1f:24:
c0:24:77:fd:99:0f:31:5a:21:f3:21:ba:e7:d8:ba:
cc:0b:34:bc:a2:ff:44:a9:ad:4c:78:23:de:ae:b5:
48:63:68:17:5f:b1:b6:f5:86:2b:13:e0:61:59:6e:
db:b8:4c:9f:3e:dc:73:f7:91:fe:e1:70:4d:5f:7d:
82:67:80:9a:21:28:0f:9c:17:72:e8:3e:8a:fc:96:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:24:D0:FC:BA:EB:2C:8B:AE:28:73:D0:BB:AC:99:70:4E:68:19
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xwIk0Py66yyLrihz0LusmXBOaBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.249.0-194.62.251.255
Signature Algorithm: sha256WithRSAEncryption
2c:4d:95:c6:b4:65:94:fe:65:19:40:05:e7:92:35:15:18:0a:
b2:f7:31:60:ba:9c:4c:4f:91:4a:9b:24:e2:af:b4:0d:89:51:
ea:79:da:03:0b:19:e8:e7:d5:a0:a6:01:ce:fa:4c:1b:17:2d:
d5:62:10:2d:64:82:1f:f8:68:9b:de:5d:05:c7:62:05:1f:d0:
45:46:2c:96:bb:4e:37:1a:a9:fd:32:d5:a3:34:76:ba:95:4a:
b2:74:75:74:de:b1:9a:49:e2:36:07:2b:20:50:fe:fb:bf:2d:
e2:26:7d:49:c7:02:b8:40:ee:c3:26:76:60:4c:87:b7:06:e1:
ef:14:2c:86:d7:b8:19:2a:ad:cb:29:23:5f:c9:c2:21:e5:3d:
73:29:26:df:c7:23:94:e3:e8:0c:33:ff:ae:84:16:4a:09:a6:
a4:a3:38:ab:36:6f:6f:ef:77:5a:6f:12:0b:ba:a0:ba:0c:a1:
0c:b5:f9:f3:f5:1b:10:ee:b6:58:b0:2f:21:6a:6e:fd:d6:fa:
23:f1:42:7a:af:b8:d9:aa:70:07:cb:41:41:9f:c4:74:8e:b3:
24:7b:42:ee:c4:73:72:26:d8:fb:e5:8c:62:c3:c9:2d:4b:90:
81:5f:d0:c4:be:e8:21:28:89:09:1f:53:bf:df:7b:2e:7a:cc:
41:9c:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 19:11:47 2024 by rpki-client on console-ams.rpki-client.org