Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xCG7dG3k1I2Q3utO--xUiyRWwbE.roa
File: xCG7dG3k1I2Q3utO--xUiyRWwbE.roa (raw, json)
Hash identifier: byYqGn0NwMeOZ7w1ZR3tbIRbqYQXAOEfPiIs92SHsDE=
Subject key identifier: C4:21:BB:74:6D:E4:D4:8D:90:DE:EB:4E:FB:EC:54:8B:24:56:C1:B1
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01871E81F7E7E2993118E6B1E9915FB10105
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xCG7dG3k1I2Q3utO--xUiyRWwbE.roa
Signing time: Sun 26 Mar 2023 15:20:46 +0000
ROA not before: Sun 26 Mar 2023 15:20:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 83.171.244.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 27 Mar 2023 13:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:81:f7:e7:e2:99:31:18:e6:b1:e9:91:5f:b1:01:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Mar 26 15:20:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c421bb746de4d48d90deeb4efbec548b2456c1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:3f:21:e7:39:a0:63:57:a2:52:fe:4c:ed:
e1:0a:ce:ba:01:19:2b:a8:cf:9c:15:53:6c:5d:c3:
3a:c4:ee:9d:d5:55:81:05:fe:52:b5:e8:ac:54:a0:
be:78:20:9b:e4:d4:8e:e5:e4:86:86:26:03:99:60:
df:63:d2:aa:6e:78:f7:7c:1b:99:31:1e:a5:32:f7:
0b:91:96:3a:ef:5e:1a:08:e5:3e:1d:86:f7:0d:43:
ec:83:8b:e5:2e:d5:0f:e7:40:a8:59:15:6e:17:cf:
14:9d:5d:fb:9f:ad:19:e6:12:78:71:f6:08:e5:2a:
1c:04:30:ac:f3:ca:c9:2d:b7:e8:fd:6f:f1:a1:7c:
9f:37:77:47:ec:ad:b5:bb:dc:12:1c:ef:e4:f1:e4:
f8:88:15:46:28:14:1a:8e:3d:17:ef:c2:5d:8e:41:
6d:09:71:56:63:9b:7c:e3:a2:0a:c6:b5:18:c0:c4:
46:c0:b4:c7:a9:1f:c8:4f:43:c7:4e:87:48:ce:09:
5d:8b:eb:3a:44:42:58:93:3f:af:ac:a1:e4:47:e6:
c7:36:cb:b4:22:85:88:0f:ef:bf:e9:36:34:4c:3c:
6e:74:12:d9:52:9e:2b:24:7a:35:2d:2e:70:16:b6:
fe:ae:e1:63:e2:0e:71:36:b3:a5:0a:ce:2e:9b:3b:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:21:BB:74:6D:E4:D4:8D:90:DE:EB:4E:FB:EC:54:8B:24:56:C1:B1
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/xCG7dG3k1I2Q3utO--xUiyRWwbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
193.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:fb:8d:2a:fd:3f:3b:61:76:e1:f7:da:7b:aa:5a:5e:fc:eb:
8d:bd:7e:dd:b6:1c:bb:f6:e4:41:1b:22:41:59:75:98:0f:b1:
f6:b3:f5:70:1d:f8:24:b2:1f:c1:27:c7:bb:b7:f0:91:46:20:
22:f6:dc:0c:29:66:23:be:5d:d3:76:e2:1a:ec:45:73:12:7d:
5b:69:2b:ce:55:67:45:f4:4f:8f:67:04:3a:90:1b:3b:23:3d:
4e:6d:99:db:42:d9:de:4f:90:d0:3c:77:a3:ae:dc:96:a8:e2:
db:2a:3b:b1:a1:0e:6b:63:81:d9:73:e3:34:6b:3d:3b:c0:5c:
5b:b2:86:38:f0:a5:7c:5e:55:3d:0e:b1:5a:15:42:89:bb:ad:
89:fc:5c:bc:e1:65:b3:79:2d:ac:ff:71:34:42:23:a5:77:a4:
a4:86:87:76:6e:d5:47:13:5e:e2:47:9f:04:0c:ac:d3:9e:e6:
c8:2a:ec:3c:43:52:d5:76:ab:2f:7c:bb:fe:dd:ea:54:5a:81:
9d:e6:4d:8c:43:28:eb:c2:c9:b8:4b:3a:41:57:2d:d4:a8:38:
57:40:34:2c:ce:a2:39:86:2b:11:87:4e:7c:f1:ef:f1:6d:50:
4b:4e:0c:ed:8e:f8:db:5c:93:11:a5:35:f1:ff:84:2f:20:3f:
db:fd:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org