Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XoNdIBFQ7Q1ARg6A1H3YRdV3VqE.roa
File: XoNdIBFQ7Q1ARg6A1H3YRdV3VqE.roa (raw, json)
Hash identifier: Jp+MTdODSNpj6UnAAvsZNLf37GabUNRuJSlgc1QwUis=
Subject key identifier: 5E:83:5D:20:11:50:ED:0D:40:46:0E:80:D4:7D:D8:45:D5:77:56:A1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CDB4846D97111132A61B5B61FB0AE
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XoNdIBFQ7Q1ARg6A1H3YRdV3VqE.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24810
IP address blocks: 89.248.112.0/24 maxlen: 24
89.248.123.0/24 maxlen: 24
89.248.122.0/24 maxlen: 24
87.117.177.0/24 maxlen: 24
87.117.184.0/24 maxlen: 24
87.117.183.0/24 maxlen: 24
87.117.190.0/24 maxlen: 24
87.117.188.0/24 maxlen: 24
81.23.144.0/24 maxlen: 24
81.23.145.0/24 maxlen: 24
87.117.165.0/24 maxlen: 24
87.117.162.0/24 maxlen: 24
87.117.160.0/24 maxlen: 24
87.117.161.0/24 maxlen: 24
87.117.166.0/24 maxlen: 24
87.117.164.0/24 maxlen: 24
87.117.170.0/24 maxlen: 24
87.117.171.0/24 maxlen: 24
87.117.168.0/24 maxlen: 24
87.117.167.0/24 maxlen: 24
81.23.149.0/24 maxlen: 24
81.23.147.0/24 maxlen: 24
81.23.148.0/24 maxlen: 24
81.23.159.0/24 maxlen: 24
81.23.156.0/24 maxlen: 24
81.23.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:db:48:46:d9:71:11:13:2a:61:b5:b6:1f:b0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e835d201150ed0d40460e80d47dd845d57756a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:39:a5:4a:f3:c8:dc:40:8b:03:58:fb:2b:
88:02:87:dc:7e:6f:5b:40:77:f3:4c:bf:14:12:2f:
50:8b:0e:3d:50:73:d7:0d:80:76:1e:a3:1f:e4:5d:
f4:5c:a1:39:07:74:92:1a:bc:ec:e4:39:93:48:22:
b5:aa:d8:61:63:09:31:bf:69:80:a6:a9:d1:ee:de:
84:09:c5:76:3b:f0:d1:68:ff:44:49:0f:bd:05:49:
e0:60:96:66:47:50:1e:c6:a8:f0:53:4c:7c:39:0a:
bc:13:03:8d:d8:40:ea:3c:be:b5:f1:03:8c:e7:7b:
f4:df:73:c2:03:a3:e9:9b:3b:64:08:c4:df:e6:77:
7c:c3:6e:69:41:25:36:8d:02:4a:e6:79:78:f1:35:
ab:cf:a7:52:1b:82:b2:73:92:ad:94:4a:1b:46:ef:
3d:ea:d6:0c:a5:89:f6:17:c7:88:63:42:89:f7:c7:
b1:0f:79:3d:84:a9:3d:15:c3:78:59:18:b7:f0:f2:
bf:fa:8e:83:cb:66:e3:12:ac:bc:95:93:e8:b9:47:
42:54:25:eb:f9:27:92:83:81:0b:e6:b8:ca:64:05:
4f:67:1d:bf:f2:db:76:bb:04:f1:c5:d4:42:4a:8a:
aa:eb:ef:c2:fc:51:bc:c2:e3:24:46:78:85:10:1a:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:5D:20:11:50:ED:0D:40:46:0E:80:D4:7D:D8:45:D5:77:56:A1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XoNdIBFQ7Q1ARg6A1H3YRdV3VqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.144.0/23
81.23.147.0-81.23.149.255
81.23.156.0/24
81.23.158.0/23
87.117.160.0-87.117.162.255
87.117.164.0-87.117.168.255
87.117.170.0/23
87.117.177.0/24
87.117.183.0-87.117.184.255
87.117.188.0/24
87.117.190.0/24
89.248.112.0/24
89.248.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:31:07:f1:6e:05:9a:15:78:ae:ea:bb:c5:47:b3:7c:b1:a3:
15:aa:2b:3a:65:e7:fb:a9:40:3d:cb:f0:6d:ec:f6:66:5e:c7:
ae:3f:0a:e0:6e:fe:b1:4a:ec:34:07:98:e8:23:26:51:cb:2a:
3f:f3:03:ba:f1:6b:4e:45:d3:b6:96:ed:bc:d2:f8:73:33:85:
88:90:c1:21:48:aa:5c:52:0d:0b:ce:e2:c9:ba:d3:7a:91:95:
0f:07:c1:9d:4c:bf:0a:ab:41:f2:c2:30:88:22:00:09:91:3f:
e1:51:8e:f4:fd:86:57:bd:64:be:bf:1c:3b:9d:d7:6b:8b:da:
e5:42:6d:93:10:9e:2d:c9:7a:f4:a3:9e:c3:0a:08:bb:41:38:
86:d6:24:5f:c3:a2:ed:b6:28:7b:84:b4:78:d9:a6:3f:58:a6:
1b:fa:e4:46:66:d2:36:4d:82:f1:5e:2e:a9:38:32:cc:87:8e:
bb:31:b7:d4:01:1c:1f:d3:d6:28:f6:78:4d:b2:eb:59:75:6a:
80:52:c1:1e:ca:67:58:f7:6c:9d:5e:40:70:0d:0e:57:b3:b3:
1f:71:08:e6:54:9c:34:be:fc:72:50:86:6d:2f:ba:71:c6:73:
52:07:a1:01:5c:e4:75:fb:cf:29:55:22:2c:80:c5:b0:ae:09:
0d:d4:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:25 2024 by rpki-client on console-ams.rpki-client.org