Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/loXRRawISEHOhWjqk3cQ0aGAWak.roa
File: loXRRawISEHOhWjqk3cQ0aGAWak.roa (raw, json)
Hash identifier: NcBJiqBOTsZTCsURctg3HvHg+E3NC7dd49YiYg0oOVs=
Subject key identifier: 96:85:D1:45:AC:08:48:41:CE:85:68:EA:93:77:10:D1:A1:80:59:A9
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EA73A147B9652EDF4655A4C5A5ABC3842
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/loXRRawISEHOhWjqk3cQ0aGAWak.roa
Signing time: Thu 04 Apr 2024 03:49:45 +0000
ROA not before: Thu 04 Apr 2024 03:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42610
IP address blocks: 85.172.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 10:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:3a:14:7b:96:52:ed:f4:65:5a:4c:5a:5a:bc:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 4 03:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9685d145ac084841ce8568ea937710d1a18059a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:83:49:0b:0c:98:4d:0d:10:84:ad:92:57:
ba:29:fa:0a:cb:bf:d2:65:6f:4a:d3:4e:c3:c8:06:
ca:19:1f:ac:4f:bb:cb:b1:83:9d:49:b3:a2:5b:40:
c2:2a:10:4c:68:2d:76:29:c7:84:41:63:5b:d3:6d:
97:fe:fa:8f:80:15:8b:5b:66:90:c7:52:fa:3e:b3:
19:aa:58:73:6c:af:3d:f1:c3:17:28:dd:c9:06:3c:
23:b2:9a:97:f0:91:ee:53:ef:df:ed:8f:3e:f7:26:
df:94:35:4a:5c:15:35:22:82:4b:87:41:11:29:dd:
9a:2d:f2:93:15:97:44:6a:d2:38:e7:40:a8:1b:71:
a2:bf:2f:e6:60:15:78:e0:f7:9a:1a:ab:2f:40:15:
d6:4d:bd:bf:05:f4:76:6f:b1:a2:3e:4d:61:9c:bf:
f4:d4:bb:7d:4f:9f:bd:ae:ab:d3:29:53:7d:cf:da:
4b:d9:51:99:01:b7:a2:e3:d9:3f:9b:31:de:af:a3:
0f:33:68:18:6c:09:a0:ef:63:d8:4c:6f:47:9c:be:
0a:4e:75:9c:bd:1f:1e:c4:84:3c:dd:d6:1d:15:5a:
37:07:87:8c:21:13:fb:09:2b:ac:1f:63:99:18:a2:
f8:10:8d:ae:1f:6c:02:4b:cb:62:e5:5d:f9:74:55:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:85:D1:45:AC:08:48:41:CE:85:68:EA:93:77:10:D1:A1:80:59:A9
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/loXRRawISEHOhWjqk3cQ0aGAWak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.172.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4d:6c:74:8b:cb:dd:09:f1:76:d0:83:05:88:f3:68:a0:0c:
9c:af:61:ae:81:9e:03:58:b5:7f:7f:0a:d4:1e:09:24:d5:fe:
ab:99:6b:f5:10:16:98:2c:d0:09:00:b7:28:80:ed:d5:53:16:
31:88:ca:4e:bd:b1:df:23:20:72:3e:9a:c7:0b:a0:ba:06:33:
fc:4b:bd:44:ed:6c:63:47:86:aa:85:b6:bd:c1:29:75:9a:41:
5b:e5:5c:b5:5a:a8:c2:b9:04:13:81:02:28:44:f0:ff:10:aa:
67:d8:68:67:1d:5d:f2:9e:9b:9b:ea:7d:f3:87:3a:8c:e5:70:
27:02:b7:e8:58:07:d7:7a:7d:2b:2e:3f:66:a5:51:5d:50:27:
ea:4a:b2:5f:b0:0c:59:d1:ee:95:59:39:f8:91:d9:8a:44:76:
be:5d:69:cf:d1:09:b2:95:65:db:6c:00:b3:06:a8:eb:0b:f9:
49:fd:d6:fc:55:ab:bf:de:2f:ff:bc:86:01:b9:6a:d2:74:08:
43:f9:7e:d0:c9:1e:c8:97:78:c9:ce:3d:c7:9a:91:6c:a1:90:
87:05:43:12:5c:0a:2e:6c:69:10:e2:74:e3:b7:f5:70:cd:6b:
af:5d:d8:5f:f9:91:a1:ac:b2:65:14:63:03:0e:f1:72:bd:e4:
e8:92:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:26 2024 by rpki-client on console-ams.rpki-client.org