Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/XP6w9Zz94OU2YQRvwjPdbWXtm74.roa
File: XP6w9Zz94OU2YQRvwjPdbWXtm74.roa (raw, json)
Hash identifier: nJJosyEK4R+r6v/60WPwVnQ8WwekjKlPTqN0++8JMkk=
Subject key identifier: 5C:FE:B0:F5:9C:FD:E0:E5:36:61:04:6F:C2:33:DD:6D:65:ED:9B:BE
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 01857094EAD8264DFE51F52E14DEA4E186F2
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/XP6w9Zz94OU2YQRvwjPdbWXtm74.roa
Signing time: Mon 02 Jan 2023 03:44:45 +0000
ROA not before: Mon 02 Jan 2023 03:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48943
IP address blocks: 62.116.5.0/24 maxlen: 24
62.116.121.0/24 maxlen: 24
213.235.196.0/24 maxlen: 24
62.116.84.0/24 maxlen: 24
62.116.83.0/24 maxlen: 24
213.235.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 07:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:ea:d8:26:4d:fe:51:f5:2e:14:de:a4:e1:86:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 2 03:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cfeb0f59cfde0e53661046fc233dd6d65ed9bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:3f:e8:9e:5c:92:40:17:47:33:ce:52:7f:
ad:93:b0:a1:7e:c2:96:08:12:bf:2d:a3:7a:cb:e5:
24:59:a2:a4:ba:0c:a5:bb:26:d7:7e:8d:3c:47:f3:
9e:b9:ac:a0:1e:d5:98:24:3c:ef:3c:80:fe:49:f5:
5e:a0:79:6c:66:d2:a7:da:75:91:41:af:69:93:39:
d0:2e:8a:52:a1:8d:48:41:32:5d:3a:92:d0:49:ee:
e9:98:21:95:33:f3:4a:7c:c1:94:77:f2:89:b5:65:
44:a5:95:e1:5a:c5:e6:cb:51:89:33:ed:66:09:97:
f7:4c:be:f5:e2:90:07:59:22:69:45:0b:da:42:ad:
88:fb:ed:37:11:8d:b1:fa:61:82:23:df:da:05:b0:
80:9b:07:7c:9a:9c:ca:d8:e8:18:d3:33:23:13:f1:
f5:eb:e5:e7:a4:41:9a:62:b6:42:49:8f:2f:9d:a0:
dc:e1:11:6b:1f:50:d0:1c:ec:38:46:de:0c:09:81:
af:6a:0c:ea:3e:70:c8:a0:35:98:07:5c:c0:53:34:
ba:55:93:fc:66:49:ff:7e:41:48:fe:19:c6:5e:ac:
a0:26:10:42:1d:af:19:c3:1b:62:32:28:c9:cf:2e:
b0:33:87:b7:a8:29:7c:8f:9e:2d:2e:16:b7:02:2e:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FE:B0:F5:9C:FD:E0:E5:36:61:04:6F:C2:33:DD:6D:65:ED:9B:BE
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/XP6w9Zz94OU2YQRvwjPdbWXtm74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.5.0/24
62.116.83.0-62.116.84.255
62.116.121.0/24
213.235.196.0/24
213.235.234.0/24
Signature Algorithm: sha256WithRSAEncryption
31:39:c4:3c:87:6e:51:15:aa:e7:01:59:14:88:ce:2c:82:b4:
b3:a4:c1:02:df:27:71:1a:11:bd:03:76:75:c9:74:12:9e:fe:
4d:7f:75:31:88:a2:d5:a9:16:44:7a:9d:a8:1c:b1:29:30:d5:
19:bf:4f:fb:e0:92:4c:71:4d:1a:d9:8d:1d:9b:30:ca:bf:c0:
f5:c7:70:1d:58:55:8f:3b:24:4d:9b:3d:a3:0a:01:ae:42:e0:
a4:0b:66:25:85:29:3e:1e:4b:2a:ad:27:36:88:05:76:35:8a:
72:a8:11:ab:f1:50:7a:c3:93:45:52:a6:6c:4a:07:09:7d:ec:
84:87:0d:e2:79:1c:97:03:3e:50:6b:60:ca:8b:2a:8a:2f:02:
73:33:af:b7:ca:fc:ce:cb:72:89:a6:d2:34:c9:87:ce:6b:34:
f9:a9:ba:23:4a:d9:bd:6e:4e:fe:23:76:3f:e3:22:49:a1:f6:
a3:85:f7:7b:69:93:16:52:7f:a7:b4:1d:f8:54:1b:f8:b4:72:
0e:e8:5e:63:6f:b0:69:f0:72:d6:14:11:e0:d9:8a:f4:48:c1:
3d:6e:78:f2:d4:54:6f:fe:97:2a:25:6d:e8:b3:98:c6:35:8b:
89:1a:c0:c9:29:a1:44:40:32:80:eb:37:fd:23:6d:de:7e:99:
28:ac:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:17 2024 by rpki-client on console-fra.rpki-client.org