Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Xb1H46wmVYiO0pzsWAQzQKYN-iQ.roa
File: Xb1H46wmVYiO0pzsWAQzQKYN-iQ.roa (raw, json)
Hash identifier: Y3qE7ZtOoxvwVRkPgIGYTfcvnLXyRHpZkshO85X2Bjg=
Subject key identifier: 5D:BD:47:E3:AC:26:55:88:8E:D2:9C:EC:58:04:33:40:A6:0D:FA:24
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018BB2F93082BFFA5D21A77DECEC7027747A
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Xb1H46wmVYiO0pzsWAQzQKYN-iQ.roa
Signing time: Thu 09 Nov 2023 07:25:57 +0000
ROA not before: Thu 09 Nov 2023 07:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197393
IP address blocks: 193.138.152.0/22 maxlen: 22
185.138.68.0/22 maxlen: 22
2a07:bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:f9:30:82:bf:fa:5d:21:a7:7d:ec:ec:70:27:74:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Nov 9 07:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dbd47e3ac2655888ed29cec58043340a60dfa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:d4:2d:a3:4c:c7:12:f3:b3:fb:d7:21:e2:
ba:4e:cd:dd:fb:82:d9:40:6d:6a:94:fb:3b:36:10:
ba:ba:6f:bf:35:84:9b:8b:72:c2:f6:88:8b:c5:67:
60:86:5c:a7:40:88:43:c2:a6:de:5b:fe:33:d2:02:
84:f5:b6:54:2b:69:e9:e6:4f:3a:2d:02:08:ca:2b:
f0:c0:c0:67:8d:fe:d1:c3:de:89:e8:72:29:e0:68:
1c:74:6f:02:8f:0f:32:b4:fb:e7:ed:95:83:f9:2e:
0f:c9:77:ce:54:1f:53:ea:5d:6d:02:59:b2:2c:27:
24:12:95:46:a6:ab:f1:32:48:c5:37:f1:e3:70:1f:
8d:d1:87:79:bf:a3:df:ed:63:16:10:f7:59:09:54:
1f:22:15:c4:0f:61:e3:30:1e:86:89:41:90:dc:02:
0a:29:68:ce:1e:3d:45:05:b0:12:3c:50:23:d6:61:
9b:21:02:fd:dd:ad:2a:c9:f6:f0:60:d8:85:b2:26:
3e:1d:4b:56:72:cc:40:fb:28:a3:d9:8e:4e:69:9d:
49:b3:88:d1:87:fd:f4:11:7c:39:27:27:c6:a4:cf:
b2:74:b2:0d:2c:96:0c:82:cf:f7:a9:9d:73:b4:18:
74:7d:b8:2e:af:63:a6:e2:9e:9c:c4:69:56:c3:8b:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:47:E3:AC:26:55:88:8E:D2:9C:EC:58:04:33:40:A6:0D:FA:24
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Xb1H46wmVYiO0pzsWAQzQKYN-iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.68.0/22
193.138.152.0/22
IPv6:
2a07:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:b6:db:fb:a9:18:67:74:25:69:6a:d9:b1:0d:50:eb:dd:b7:
64:ff:89:86:84:af:7d:33:98:c0:a0:f3:34:08:7b:9c:da:0b:
8b:1f:74:76:1e:fc:5f:2c:84:65:2a:6d:31:a4:35:08:7d:45:
65:c5:d5:df:c3:41:80:7e:29:7d:a4:c3:72:a8:f6:dd:09:dc:
75:d6:22:4f:2c:00:a1:9c:8a:c8:54:2f:c6:f6:f3:6f:98:5e:
ec:26:64:43:9e:1b:04:94:1d:b2:e7:7c:1c:bf:51:38:b0:0c:
b6:c0:6c:43:79:f6:a4:77:c7:08:fd:d3:1f:30:b1:78:54:1d:
9b:15:6e:e3:e0:ff:ef:c1:ea:ae:a3:98:f0:96:b6:40:63:81:
c1:14:08:02:5b:76:81:40:68:0b:9d:c3:74:55:22:c5:16:6e:
52:57:83:ae:ba:00:9f:28:94:5a:ac:d9:de:2e:0e:c9:8f:2e:
3b:dc:58:0b:a6:7d:cb:67:2d:49:1c:3e:bb:11:94:93:6e:fe:
ce:3d:67:c6:e3:3e:30:5c:4d:cf:81:da:b5:49:01:f7:bb:a2:
ca:57:03:89:d7:c1:1c:ed:4a:f1:79:09:43:f7:e7:c9:20:68:
f4:44:66:a7:9d:f8:17:60:e2:7a:2b:6f:26:a9:32:0d:37:f0:
c9:61:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:32 2024 by rpki-client on console-fra.rpki-client.org