Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/xxs5AIKZSc4KtB0Ghf9TGZzYcRo.roa
File: xxs5AIKZSc4KtB0Ghf9TGZzYcRo.roa (raw, json)
Hash identifier: t5TJD1LqYjFXH1cf2+z1HX4gandnyeIzOoSkzjULSe8=
Subject key identifier: C7:1B:39:00:82:99:49:CE:0A:B4:1D:06:85:FF:53:19:9C:D8:71:1A
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 0185728C7360F1136D19A78F240289B2EFD0
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/xxs5AIKZSc4KtB0Ghf9TGZzYcRo.roa
Signing time: Mon 02 Jan 2023 12:54:45 +0000
ROA not before: Mon 02 Jan 2023 12:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 159.253.82.0/24 maxlen: 24
159.253.81.0/24 maxlen: 24
159.253.84.0/24 maxlen: 24
159.253.80.0/24 maxlen: 24
159.253.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:73:60:f1:13:6d:19:a7:8f:24:02:89:b2:ef:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Jan 2 12:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c71b3900829949ce0ab41d0685ff53199cd8711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:8b:64:c7:ed:39:ce:42:73:9a:c3:3e:71:
9d:b2:a0:23:1d:b8:68:f3:39:48:a8:31:48:0f:05:
02:5d:15:79:b9:1e:75:c8:da:78:24:0e:4b:ab:47:
67:8a:ed:fc:9a:a6:2d:ce:07:b7:b0:77:e4:63:da:
28:56:c4:3e:2f:3c:ef:80:a7:eb:f3:74:dd:2b:b2:
07:ea:bc:ad:5b:b3:a9:69:fb:25:b3:dd:e9:81:0b:
d9:52:ac:48:c8:53:c0:4f:43:f1:55:a4:c1:e7:5e:
44:be:1c:07:f4:76:e8:a0:a8:3a:d3:71:7a:47:7d:
f1:5e:02:c6:90:c8:99:97:f5:ac:a3:ae:3f:3b:22:
4f:b4:59:01:b6:7f:5f:e7:bf:da:90:2a:37:27:48:
e9:2e:24:c9:54:f9:40:5d:a2:26:75:25:f5:b3:85:
8f:35:ca:b1:67:93:98:aa:8c:34:63:dd:c2:16:b2:
54:2f:ee:bf:3f:bf:95:1b:31:73:86:5f:9c:ba:82:
1a:73:83:57:bb:f0:09:bb:71:3c:97:80:f4:ef:5e:
57:3c:73:28:4c:43:56:c5:86:56:a7:ce:50:97:ee:
6f:18:93:2e:4e:c7:5d:df:41:d4:96:6a:18:72:59:
22:d3:c6:84:52:0f:fd:48:22:94:22:eb:16:f5:18:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:39:00:82:99:49:CE:0A:B4:1D:06:85:FF:53:19:9C:D8:71:1A
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/xxs5AIKZSc4KtB0Ghf9TGZzYcRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.80.0-159.253.84.255
Signature Algorithm: sha256WithRSAEncryption
9a:f0:b7:cd:43:3c:f1:02:42:d1:0a:82:b7:af:94:cc:85:b7:
e8:7a:bd:c0:05:5f:f8:c0:d1:ed:24:68:2c:aa:e6:62:54:8d:
48:95:08:2e:76:80:0a:d5:21:9a:2e:31:26:ac:ce:a1:b4:7b:
b9:a3:ba:53:0d:46:c6:1a:e9:27:f7:37:d0:f7:c3:e6:45:0f:
d3:68:79:7c:5d:6a:94:11:fe:08:8e:1b:c9:8d:5d:38:47:f0:
a7:b6:aa:71:8b:f0:49:ac:b9:c0:40:7e:34:96:ec:61:da:cd:
de:68:ab:85:7d:0e:b1:71:23:a1:7c:4c:7d:62:89:4c:13:a5:
7a:6c:de:dc:46:48:dc:30:46:a3:5f:c6:ba:95:c1:6b:98:45:
d5:b9:c9:63:6a:bb:ff:c0:87:c2:2c:d3:a6:3c:48:04:35:ed:
13:fb:46:f0:4c:14:19:a8:a2:73:d5:4a:6b:ac:16:63:79:4b:
af:8c:b9:b4:52:77:81:60:bb:71:6d:f8:10:0a:1c:04:d5:a7:
52:9b:6d:b6:77:39:32:24:69:c1:f3:8a:b0:f4:06:0e:b6:94:
30:70:8d:f7:df:12:1c:3c:aa:ff:7c:ff:d3:66:3a:d6:f8:6a:
75:80:5f:b7:be:1a:86:8b:a5:85:6d:2c:5c:89:e1:79:e8:6e:
e3:5e:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:18 2024 by rpki-client on console-ams.rpki-client.org