Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/XQKWXF4lODIb9-qKddXHjKrSqgA.roa
File: XQKWXF4lODIb9-qKddXHjKrSqgA.roa (raw, json)
Hash identifier: C558ZzKaVrBoO/14OW58xV4OGS4+B/xiSWlyrORYm1U=
Subject key identifier: 5D:02:96:5C:5E:25:38:32:1B:F7:EA:8A:75:D5:C7:8C:AA:D2:AA:00
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 018CC2DB1DFF81DB325D6ABFEE2521A3BA96
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/XQKWXF4lODIb9-qKddXHjKrSqgA.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395363
IP address blocks: 185.173.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 22:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1d:ff:81:db:32:5d:6a:bf:ee:25:21:a3:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d02965c5e2538321bf7ea8a75d5c78caad2aa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:79:5c:da:d2:88:dc:49:a6:e9:bd:3e:ef:
94:3e:41:8a:6f:4b:2e:e9:bf:46:7e:bc:d6:6f:5b:
ec:19:86:ed:17:88:1c:4a:2b:a3:c8:a1:bf:25:d9:
e2:78:fc:48:45:16:91:4e:89:15:bd:e7:94:6b:ea:
18:83:65:58:b2:c0:3d:71:75:e2:d4:e3:1d:52:8d:
fd:4c:57:ee:3c:34:89:78:7e:d7:f2:80:75:93:75:
2d:98:93:f0:f1:e9:cd:25:9b:23:89:32:ec:6f:f7:
ec:05:73:2e:35:06:68:90:d0:da:e8:cc:47:c3:fe:
6f:77:10:af:0c:40:12:3e:1d:3f:7b:f6:07:a9:fe:
26:61:9c:22:87:34:ce:2b:4b:3a:68:97:26:82:4c:
4f:9d:e4:f0:49:95:0f:82:04:a6:4c:82:22:b5:4e:
2d:3a:a2:2e:5e:dc:06:14:46:00:1e:87:f9:b7:61:
3b:7d:ab:cc:94:b5:47:cb:fb:8e:74:ea:aa:15:89:
04:29:2f:a2:8f:44:8a:c4:67:5e:79:cf:7e:a8:50:
6a:bb:43:8a:9a:72:08:49:b7:2a:54:00:ff:3f:c9:
53:0c:ae:f0:17:4a:61:b8:57:48:d2:2b:90:df:c3:
aa:9a:d3:8f:44:07:ce:51:f0:34:4b:15:71:65:c5:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:96:5C:5E:25:38:32:1B:F7:EA:8A:75:D5:C7:8C:AA:D2:AA:00
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/XQKWXF4lODIb9-qKddXHjKrSqgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:31:7c:d9:52:0e:d5:23:a7:b5:3c:d8:86:bb:4a:1e:b6:10:
5a:9e:1f:40:83:43:89:cf:ea:66:2e:5d:8a:c5:3d:59:f7:97:
7a:7a:f2:94:73:58:25:e6:2b:ac:b7:a4:40:c1:c4:09:d3:c2:
7e:d6:9d:5a:28:78:f3:4b:c4:3f:39:8f:81:1c:75:34:2b:c3:
be:27:8b:5d:38:1c:4d:51:d2:83:36:93:11:8f:34:9f:1d:19:
39:df:db:08:07:fd:4e:e4:3b:b3:8f:c8:15:4d:7f:8c:33:54:
43:09:3a:c9:52:9b:73:cd:6d:c5:3b:e1:df:92:88:cb:f3:c1:
a2:a0:bc:00:08:35:fb:33:d4:8a:8b:62:ad:e4:de:78:d4:11:
74:75:91:fc:dd:f9:99:01:32:da:c7:85:2e:cf:2b:20:12:06:
b6:9b:85:eb:dc:da:be:cf:39:3b:bd:90:39:44:54:a9:f3:b4:
8f:bf:77:84:ce:22:61:a7:2f:e7:00:65:6b:4e:5d:ca:96:c0:
7b:4f:b1:14:d2:7a:d5:02:7a:99:42:c5:92:10:db:43:bd:51:
2d:f5:b7:a5:c1:d0:ad:ae:b2:34:95:96:b2:bc:83:fa:2a:6c:
df:49:77:18:13:65:40:02:f5:50:23:05:e2:15:83:d5:3e:ee:
52:2b:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:48 2024 by rpki-client on console-ams.rpki-client.org