Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/XYAMGsVkiRHUfkBOZj2IFKGbato.roa
File: XYAMGsVkiRHUfkBOZj2IFKGbato.roa (raw, json)
Hash identifier: NaXBr6Sbq7r7ZqbmhyxN/ue1CbPmiGEAoRv9UrJDy6Y=
Subject key identifier: 5D:80:0C:1A:C5:64:89:11:D4:7E:40:4E:66:3D:88:14:A1:9B:6A:DA
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0185C3BF1AE7ABFD1F266C22FCDBFC98FAAF
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/XYAMGsVkiRHUfkBOZj2IFKGbato.roa
Signing time: Wed 18 Jan 2023 07:19:19 +0000
ROA not before: Wed 18 Jan 2023 07:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 45.8.98.0/24 maxlen: 24
94.198.221.0/24 maxlen: 24
94.198.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:bf:1a:e7:ab:fd:1f:26:6c:22:fc:db:fc:98:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 18 07:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d800c1ac5648911d47e404e663d8814a19b6ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:b5:b4:25:4d:b6:29:04:82:f5:13:80:0a:
f6:76:f5:ad:48:71:b2:1b:40:e3:e7:37:a1:9a:fe:
22:df:77:4a:f2:22:79:a1:79:99:c3:61:34:0f:df:
bd:7b:31:b2:57:6f:56:6b:99:ff:07:ab:50:05:41:
58:f6:16:06:2a:15:cb:16:c2:7d:1b:fc:3a:bb:5d:
bf:dc:2e:b9:b3:88:a4:0d:da:24:48:37:a5:e8:b8:
74:0e:8a:b3:4b:6b:86:72:66:1a:ac:a3:a6:d3:4b:
79:50:7e:1a:e6:2c:da:e4:6e:ac:e2:16:59:36:80:
a4:b5:05:7d:e7:bc:62:53:30:f8:d8:b6:fe:b5:3a:
ef:cf:02:56:31:fc:05:da:98:f2:af:c5:33:44:f8:
a6:8b:5c:37:9f:96:5c:8b:e7:eb:58:50:75:a0:8a:
34:59:fb:16:aa:e7:36:02:db:30:38:ed:3f:9d:3c:
09:f4:75:14:f1:e2:9c:fe:64:dd:53:b2:7c:e9:f0:
8a:4b:1c:d4:98:e5:f7:e4:ed:07:41:7a:6a:fe:bc:
37:c6:f9:ae:b7:ec:83:4a:1e:c0:b6:df:7d:09:89:
cb:72:7a:b5:55:c3:67:43:02:57:67:11:fd:6a:8a:
fb:ae:c5:d8:f8:5c:15:01:cd:95:ae:e3:09:1b:e5:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:0C:1A:C5:64:89:11:D4:7E:40:4E:66:3D:88:14:A1:9B:6A:DA
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/XYAMGsVkiRHUfkBOZj2IFKGbato.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.98.0/24
94.198.220.0/23
Signature Algorithm: sha256WithRSAEncryption
92:3d:68:ea:a1:60:4b:13:75:6c:ff:34:62:38:b6:38:bd:91:
b5:bf:f3:ff:42:fd:85:a6:aa:6e:3b:a7:84:be:50:91:f0:e6:
31:98:cc:5c:e3:4f:a6:11:a9:a0:65:b5:46:3c:93:d2:d0:56:
8c:b9:b6:0f:c6:4a:4a:f8:d5:da:36:e0:ad:56:92:6e:e4:b8:
4a:90:00:dd:a7:21:1b:f6:7c:61:3c:cf:f4:aa:ed:a0:36:c6:
86:06:41:ba:70:1f:44:90:e4:63:39:ab:3b:e4:12:1c:b7:10:
e4:40:3a:22:dd:17:2c:d0:6f:58:37:8b:d3:7c:b2:0c:58:e7:
30:0e:28:35:e0:63:8b:09:53:d0:1a:75:c9:9b:ba:dc:26:40:
74:4a:aa:eb:9b:62:8c:2b:96:01:e6:d6:d1:68:f0:9b:69:54:
d4:81:0a:7d:71:94:b7:be:0d:a3:12:84:63:dd:89:72:ee:f2:
41:83:72:f2:c1:b7:46:60:0e:39:35:46:81:91:7c:28:d1:38:
9a:ae:ae:cc:bb:e2:21:75:c0:86:40:4b:34:8a:17:95:50:83:
39:eb:7f:85:60:24:45:a7:d2:1c:55:f4:af:5f:75:2e:ba:6b:
71:c8:ba:22:1a:ed:0d:bb:5c:d3:0e:38:a0:e5:b8:84:99:d1:
f7:29:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org