Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XH1qM6RztOBsvbcnsdDkeA5tiQ0.roa
File: XH1qM6RztOBsvbcnsdDkeA5tiQ0.roa (raw, json)
Hash identifier: NqydQHVU4klptUjtm3Z+XadDpP6jANrEjmnAT5wIfTs=
Subject key identifier: 5C:7D:6A:33:A4:73:B4:E0:6C:BD:B7:27:B1:D0:E4:78:0E:6D:89:0D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CE492BC8D4D42FDAAABC33CEDF88E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XH1qM6RztOBsvbcnsdDkeA5tiQ0.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57580
IP address blocks: 217.107.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e4:92:bc:8d:4d:42:fd:aa:ab:c3:3c:ed:f8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c7d6a33a473b4e06cbdb727b1d0e4780e6d890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:af:4b:4b:37:28:f0:b1:8a:a3:9c:7c:9a:
71:7a:9e:a5:44:3a:42:9b:e7:32:4b:90:e6:f2:4c:
95:ac:2b:30:2d:7a:c4:20:a4:55:a3:00:38:6c:80:
29:dd:8a:52:7e:50:93:87:7f:3d:92:15:7a:79:5b:
c5:02:cb:c2:98:0e:71:5e:ed:25:72:99:b0:0c:85:
31:52:24:a9:3f:e9:2d:6c:73:e7:3a:fe:85:0b:d5:
92:15:db:3e:bb:54:16:17:77:4a:f6:ae:0d:af:2b:
b8:35:2a:98:e0:17:50:bf:74:8f:5b:72:e3:6d:10:
a8:12:45:ec:10:69:fd:98:96:7e:26:e0:b6:79:38:
59:28:93:73:32:ca:78:98:2a:93:63:a1:2a:6e:41:
15:f7:27:ae:12:16:b4:a5:b2:d5:12:2e:e7:dc:ea:
41:bf:8c:10:f4:a0:81:3e:5e:3b:f6:6f:d0:32:a8:
8d:83:dc:9c:9c:f9:1d:24:be:66:ab:a3:a1:b7:23:
ff:33:cc:cd:0b:3a:44:ee:f6:f9:d3:ba:fc:ab:aa:
d9:60:3b:18:a8:cd:71:e9:81:a5:fa:a4:33:3a:78:
76:bd:e3:93:06:52:6a:59:83:07:31:f0:30:04:5e:
8d:cc:0d:0c:33:c1:ce:71:61:77:91:04:93:d5:5c:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:6A:33:A4:73:B4:E0:6C:BD:B7:27:B1:D0:E4:78:0E:6D:89:0D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XH1qM6RztOBsvbcnsdDkeA5tiQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.107.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6b:93:ac:25:96:46:f1:e5:de:79:8f:2a:39:83:7b:0d:72:
52:52:f0:9f:e2:4a:d3:ad:14:19:5a:26:10:82:0b:5d:76:00:
bf:cf:c3:0e:9e:ff:cb:77:56:1c:d9:8b:d9:ec:55:25:e7:fe:
eb:3e:76:40:97:f8:3c:c2:20:68:25:86:64:62:0f:16:2e:e3:
66:12:c9:d3:b1:10:09:79:fe:b0:09:c5:56:bc:e6:69:e3:f3:
a0:d3:07:25:6d:89:c7:6f:b6:64:33:24:46:78:2d:1a:9f:4c:
7a:d2:5b:2b:1a:35:ae:d2:00:24:36:a6:a8:ad:a8:e2:96:bd:
27:6e:07:90:27:45:af:bb:74:49:53:a8:fb:4c:e4:e8:83:f7:
eb:5e:e7:4a:3e:e3:86:96:be:a3:7e:1d:d2:bc:4f:86:78:3d:
76:bf:85:7d:95:33:35:95:1a:13:24:41:0e:8b:20:29:1c:e2:
82:c0:f2:61:ff:a7:c8:21:7a:6e:2b:e4:c0:14:c8:01:0f:dc:
13:ab:1b:d0:c2:0c:3a:da:3a:15:7f:d0:c8:30:db:62:5c:f4:
1f:30:7c:27:63:a5:dc:49:d6:17:06:e1:24:fe:74:92:8f:85:
60:7c:2c:01:b4:81:dc:75:d7:ec:d0:88:4c:d0:b0:e7:8e:f7:
ec:20:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:25 2024 by rpki-client on console-ams.rpki-client.org