Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XS32T7SDbj183mq39K9CP5ceDhc.roa
File: XS32T7SDbj183mq39K9CP5ceDhc.roa (raw, json)
Hash identifier: LRjNUIOSqLrybv2i3uceazGPMnSKTYvmQVl8zdNyhi8=
Subject key identifier: 5D:2D:F6:4F:B4:83:6E:3D:7C:DE:6A:B7:F4:AF:42:3F:97:1E:0E:17
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01909DE20903CAA44D2902B744C1D5D66338
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XS32T7SDbj183mq39K9CP5ceDhc.roa
Signing time: Wed 10 Jul 2024 18:22:34 +0000
ROA not before: Wed 10 Jul 2024 18:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6
IP address blocks: 149.126.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 12:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:e2:09:03:ca:a4:4d:29:02:b7:44:c1:d5:d6:63:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 10 18:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d2df64fb4836e3d7cde6ab7f4af423f971e0e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:54:d2:e6:be:bb:c5:34:ce:53:b2:9d:9a:
72:80:52:7a:8d:d8:c4:ea:63:79:35:78:31:4b:31:
c7:44:55:da:8c:38:02:f9:71:6a:e3:41:ae:1c:46:
ea:be:3d:ef:fb:bb:8b:e9:8f:e3:4b:e9:fc:7d:f7:
9f:4f:f4:96:70:06:f6:04:57:3e:70:0a:4b:5d:9d:
a3:bb:c1:eb:aa:bd:27:27:0e:40:ee:5e:1d:bd:e4:
6a:6e:90:b1:36:c6:29:60:24:dc:65:bd:dd:15:b1:
2c:3f:5e:66:db:e1:ab:bc:01:07:0d:7b:ce:62:a8:
c5:21:03:74:72:5b:88:97:23:b5:1d:87:30:6f:f0:
4b:f7:4e:f3:4e:71:07:61:2c:c3:e6:51:da:64:d2:
81:d1:84:b5:47:3e:b2:ca:10:d2:52:7d:a5:7f:76:
5f:8d:5d:95:69:98:e2:6d:45:48:0b:90:38:5d:21:
ea:57:b7:14:71:66:e9:83:76:2b:4b:11:a2:01:b0:
00:1d:81:33:83:08:4c:00:a0:78:21:88:0f:77:83:
ef:ca:96:2e:f1:e2:33:98:6a:07:2f:6e:f5:a5:a6:
79:55:9c:fd:80:2e:6c:a5:f4:3e:11:d0:38:7f:40:
29:fe:3b:85:97:c9:70:84:ab:d3:ca:3e:a2:c8:6d:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:F6:4F:B4:83:6E:3D:7C:DE:6A:B7:F4:AF:42:3F:97:1E:0E:17
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XS32T7SDbj183mq39K9CP5ceDhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.214.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ab:b1:42:ad:43:e2:35:23:81:65:38:1f:5d:cd:1c:bb:f2:
00:dc:ed:88:ee:15:9a:52:a9:f0:20:ee:76:66:b3:18:07:39:
c0:5e:78:cd:1f:b4:d1:85:38:a4:1c:7d:49:9c:80:d1:9d:af:
ea:33:06:a0:b6:f2:fe:cd:5b:c1:2e:5c:2e:a8:c2:95:c8:e9:
a4:f8:85:cd:b7:18:c1:e3:b0:49:36:08:42:59:b2:50:19:28:
1f:2a:84:4b:6c:f1:f4:25:df:56:f7:af:66:19:c8:39:c8:6e:
a8:5f:84:12:a0:a0:bc:52:f8:1a:59:f9:cb:e3:3d:ea:7e:1b:
d5:28:af:e7:75:58:9b:30:4e:b4:e8:f5:e1:2a:5a:f2:00:34:
60:52:84:42:bf:3d:69:30:74:eb:91:c5:5b:a2:de:90:80:ae:
85:6d:71:38:d8:82:88:6e:fa:fb:f5:a6:9a:97:7c:a0:01:2b:
c8:44:c0:24:2e:6f:c8:92:25:ca:ae:94:2d:19:2b:c8:b3:56:
92:c4:38:32:2f:28:5e:a5:1d:a3:a5:f9:8e:80:80:15:9a:49:
88:bb:32:59:4b:bf:99:cc:33:82:b1:68:d5:5d:0f:82:32:00:
57:06:7d:2b:fa:2f:5d:c2:79:d4:8b:96:c4:66:6a:42:df:e0:
13:07:d7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:26 2025 by rpki-client