Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/xe1h2-Teez_flAOUxYrQNHydWwY.roa
File: xe1h2-Teez_flAOUxYrQNHydWwY.roa (raw, json)
Hash identifier: awlLhusS8pJYxk5/+Sh1eMvvBGhZZ5egoyTxcmwBVgM=
Subject key identifier: C5:ED:61:DB:E4:DE:7B:3F:DF:94:03:94:C5:8A:D0:34:7C:9D:5B:06
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 018CC9BC8FD42BE8DD841B392F42E6A646D6
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/xe1h2-Teez_flAOUxYrQNHydWwY.roa
Signing time: Tue 02 Jan 2024 10:33:47 +0000
ROA not before: Tue 02 Jan 2024 10:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60207
IP address blocks: 193.105.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8f:d4:2b:e8:dd:84:1b:39:2f:42:e6:a6:46:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5ed61dbe4de7b3fdf940394c58ad0347c9d5b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:01:cc:f0:56:b7:ef:5e:1d:dd:4c:69:96:
1d:f6:5e:fa:ee:bd:a3:f2:7d:c0:e8:0c:ca:da:60:
3a:4f:92:fe:d6:fa:9c:b6:12:fa:af:05:d1:ad:dc:
7f:67:9c:36:77:df:69:a4:1f:96:03:c2:d8:ac:01:
5e:10:c2:f1:2f:13:f5:fc:6e:18:08:0c:bb:99:fa:
42:63:42:b6:4d:82:58:61:72:64:ea:1f:23:13:87:
4a:b2:e5:01:47:09:1e:20:b8:c9:27:d8:c0:8a:50:
ba:1d:45:92:f4:f7:6d:98:d6:fa:57:a7:4b:39:36:
cf:f4:49:50:ac:eb:8d:5d:f4:71:c5:f8:d9:65:63:
07:bb:90:c4:2c:e0:0e:5a:c9:ca:f6:06:2c:3c:f3:
19:8e:d8:f1:c7:0c:e1:85:5f:e8:56:8c:08:ab:66:
61:e9:dc:b7:ef:61:0c:8e:2e:e8:71:d2:a6:c0:f8:
ad:13:b4:68:de:35:ad:00:af:02:ff:e4:d1:2c:66:
9c:0e:5c:f4:dd:e0:90:95:89:34:f5:20:31:d7:1a:
ba:cc:ca:b6:76:55:22:fa:3b:2a:60:b7:a3:52:2e:
b7:3e:7c:ad:d7:45:f6:95:14:3d:ad:97:c0:22:78:
04:8a:78:a3:44:14:ee:69:3d:e2:b0:27:3a:b1:de:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:61:DB:E4:DE:7B:3F:DF:94:03:94:C5:8A:D0:34:7C:9D:5B:06
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/xe1h2-Teez_flAOUxYrQNHydWwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:dc:92:e5:2b:6e:59:1c:7a:ca:34:0f:7e:92:e7:81:5b:9e:
b2:8e:7e:80:91:35:53:93:c4:e7:8f:1a:82:09:0b:ec:a4:22:
aa:28:a3:c9:5d:92:f1:32:f7:9f:23:1e:61:64:13:ae:e3:d9:
a0:95:50:8c:66:79:78:bb:9f:b7:d3:47:04:22:5a:53:d9:9d:
f1:36:f9:36:07:f1:ba:d6:19:17:9e:73:bd:c9:0f:14:da:4e:
54:42:c8:4a:20:e2:8c:79:18:91:63:20:84:82:36:d1:5e:1b:
2d:21:f2:74:5e:25:50:b5:81:d0:bf:eb:c6:f5:f1:c4:a6:b2:
93:d1:95:a4:3d:c5:fd:e3:50:d3:22:ec:f1:06:08:08:2b:d7:
5e:51:a0:fb:70:32:aa:93:f9:87:8d:70:80:78:88:ba:b0:26:
bd:cd:55:3b:17:b6:45:74:3b:fb:84:60:d5:0f:c3:4d:23:66:
50:7d:43:82:47:36:4d:bd:78:6a:af:e3:8f:d7:5c:b6:3c:ba:
7c:f4:d1:e9:d4:d8:e9:85:aa:65:9f:c8:5a:63:d4:e3:aa:64:
62:6e:d3:ab:cc:1c:7c:f1:5c:b7:50:6a:d1:98:dc:0f:06:b1:
9a:46:ae:85:31:ad:22:fe:ad:55:76:90:3c:27:fe:0b:46:94:
e9:5e:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org