Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/XEUftgk2tTaKyraz-NGaOovOr8Y.roa
File: XEUftgk2tTaKyraz-NGaOovOr8Y.roa (raw, json)
Hash identifier: g7qK3amMcBYA+3zPZ9nSYDdzHXh5rPXkzR3tz2ceqoU=
Subject key identifier: 5C:45:1F:B6:09:36:B5:36:8A:CA:B6:B3:F8:D1:9A:3A:8B:CE:AF:C6
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 01856F26D78FA8C875681787AC6F58FB2D20
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/XEUftgk2tTaKyraz-NGaOovOr8Y.roa
Signing time: Sun 01 Jan 2023 21:04:54 +0000
ROA not before: Sun 01 Jan 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24772
IP address blocks: 195.182.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d7:8f:a8:c8:75:68:17:87:ac:6f:58:fb:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Jan 1 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c451fb60936b5368acab6b3f8d19a3a8bceafc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:a7:25:c7:0b:25:08:84:69:be:98:33:1b:
b4:15:79:52:97:a5:fe:77:6a:b6:a2:f2:3f:fa:0f:
7c:49:20:a1:95:66:25:f7:c6:7e:f1:66:18:8d:25:
4b:fa:c1:e8:06:10:0c:93:e8:2c:e7:f1:64:a5:c8:
da:39:7e:a6:3d:c6:6e:19:91:07:dd:ec:83:fd:21:
6d:27:67:69:e8:ba:ee:df:ef:a7:f9:c7:8b:45:95:
74:e8:b8:c5:cf:0a:f2:97:a0:b3:40:99:ce:3f:f6:
35:43:e7:8d:28:fe:b9:09:1f:08:07:87:d8:a0:2e:
39:40:a3:2b:e9:a7:84:02:ec:4b:18:43:0f:7b:90:
24:b7:dc:b0:d7:8f:c3:6d:57:56:20:06:46:7c:da:
f3:da:35:6d:e0:31:bb:fe:63:f1:14:18:dd:1e:85:
97:20:bc:cc:65:41:db:7e:4f:19:3d:a0:7a:a5:8b:
56:b1:77:88:4a:de:db:14:2a:f9:73:c1:b6:f6:7f:
63:31:17:00:81:84:f8:aa:ea:ab:6f:65:ec:56:5f:
db:75:96:5b:2c:49:00:6b:1b:af:5e:e0:c5:79:45:
8b:af:11:80:3b:48:6d:72:e3:5c:5d:9f:9a:9c:a2:
82:54:39:5e:d3:c3:06:2f:28:b9:1b:6f:fb:f7:74:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:1F:B6:09:36:B5:36:8A:CA:B6:B3:F8:D1:9A:3A:8B:CE:AF:C6
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/XEUftgk2tTaKyraz-NGaOovOr8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.30.0/24
Signature Algorithm: sha256WithRSAEncryption
46:81:88:77:df:d2:98:19:50:10:d0:25:d2:f6:b8:79:a9:b2:
43:64:c3:8d:37:64:ec:0e:f2:04:44:e1:d5:84:65:9e:88:74:
d8:34:a7:50:b6:fe:98:ad:c6:70:a9:a6:4f:82:35:58:8c:8d:
68:60:5f:8d:16:2c:0a:fb:82:70:b5:fd:61:d8:ad:05:1d:03:
00:3b:ed:2f:d5:98:69:bf:17:fa:a0:68:f2:74:88:be:5d:8a:
72:1c:4d:7c:a5:4a:c9:b3:93:b1:da:d5:7e:14:53:92:31:ed:
05:b0:b8:8c:75:f9:d8:9a:f8:a4:21:d2:b7:36:a2:6d:8b:b8:
49:92:ef:45:3a:aa:8c:eb:e6:71:ee:bc:b3:5e:dc:be:94:51:
7d:82:4e:ae:4a:42:b9:c3:c1:53:76:1f:ab:4b:6a:76:c0:55:
39:78:d8:f0:c1:c8:f0:16:f9:56:d8:7c:19:a2:7d:68:69:21:
b6:d1:99:31:d1:7d:2f:1c:48:2e:9a:c4:19:9e:35:16:44:b1:
bb:aa:8b:4c:a8:e8:69:3d:d0:06:f4:a7:1e:93:ac:fa:fd:d2:
db:15:ac:b2:16:f7:46:33:85:7d:c1:02:cb:a5:a1:75:71:0e:
ac:53:0c:34:a3:64:25:d7:d2:8a:a6:2f:3f:c4:a5:74:d4:a8:
33:57:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org