Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xjzt_K5AHIlQDSAl3lF8incBITk.roa
File: xjzt_K5AHIlQDSAl3lF8incBITk.roa (raw, json)
Hash identifier: m30+Q5BJOFRpa9JuTefwoQmygrGe6jgJZ4KdYDABAe8=
Subject key identifier: C6:3C:ED:FC:AE:40:1C:89:50:0D:20:25:DE:51:7C:8A:77:01:21:39
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019044812D94D51A40A5DEC04218560C1924
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xjzt_K5AHIlQDSAl3lF8incBITk.roa
Signing time: Sun 23 Jun 2024 09:50:34 +0000
ROA not before: Sun 23 Jun 2024 09:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215292
IP address blocks: 185.216.71.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 06:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:81:2d:94:d5:1a:40:a5:de:c0:42:18:56:0c:19:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 23 09:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c63cedfcae401c89500d2025de517c8a77012139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:37:b2:a7:32:db:0d:72:45:a2:7f:c5:c3:
72:ac:d8:b7:f3:60:49:5a:38:1c:af:63:bb:35:9f:
4b:36:e2:0f:d4:5a:da:5e:13:29:3a:26:25:d3:f1:
95:8c:0a:f7:94:3d:f6:40:54:ca:97:7e:e2:8f:c3:
69:9f:81:d2:44:0b:40:cf:a6:24:99:ea:3d:15:ef:
33:f5:15:9b:07:d9:e1:39:99:a9:0e:a8:fb:77:77:
41:c7:fd:46:ec:7b:9d:e0:3c:03:0d:d3:40:34:94:
c7:8c:dc:db:d8:42:f5:46:2a:4a:1e:4b:be:34:99:
03:fe:e2:06:a1:ff:16:21:45:45:26:4b:44:a4:e2:
df:e2:ea:1d:e5:e6:c0:d6:47:59:eb:47:d6:23:32:
70:5f:2c:d1:33:b2:b9:94:c5:a9:bc:e4:85:f9:7c:
9d:cb:3e:30:51:0c:18:0d:93:4e:c6:93:b1:fe:f3:
31:95:bb:d2:b6:b0:7d:99:8f:99:da:dc:9f:a3:72:
5c:98:17:f2:7d:bd:72:7e:53:2e:6b:4e:5c:19:c6:
f4:1a:34:83:b6:56:f6:dc:03:fb:13:df:e1:60:b8:
c5:80:46:9d:01:68:72:fd:ad:87:98:d7:2d:9d:7e:
23:2c:30:c7:45:32:83:0d:2f:42:c1:6b:be:de:cc:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:ED:FC:AE:40:1C:89:50:0D:20:25:DE:51:7C:8A:77:01:21:39
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xjzt_K5AHIlQDSAl3lF8incBITk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.71.0/24
193.25.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d4:71:24:be:e9:d1:61:0d:76:dc:91:e9:57:90:42:77:2d:
94:d4:ff:70:45:0b:65:50:02:bc:23:b1:aa:bb:5e:71:9a:20:
4b:8e:21:38:6a:be:a4:ce:7f:09:8b:66:fc:91:b2:f2:6c:4d:
56:57:56:87:63:99:41:90:34:ab:8b:72:2d:77:6d:1b:9e:ab:
fc:71:25:fc:9a:52:37:aa:5d:ff:5f:11:9e:13:2a:c8:23:ef:
a9:90:31:77:9d:3f:d2:87:1a:d2:78:ed:ac:6e:55:78:70:05:
3f:19:5c:32:5a:be:f9:6b:58:93:c6:24:91:b1:c3:9c:49:78:
75:ff:d4:a1:0d:3d:c3:34:0f:24:d4:aa:49:cf:f3:21:30:80:
78:4e:fd:1c:1b:16:a1:73:b3:fd:15:1e:36:c4:0f:a0:4b:55:
97:60:dd:12:7b:a7:fc:fe:a9:25:47:42:7b:55:9f:a9:ae:8b:
fe:b2:fc:2f:8e:a8:f4:3e:10:c1:a0:02:ec:29:36:18:40:85:
dd:9c:17:ca:d8:e5:9c:d5:5a:d0:38:81:7c:9b:b0:99:f2:b6:
8e:84:0f:d3:1b:17:68:09:62:94:bb:bf:45:01:1c:b5:1c:7b:
24:48:3b:20:41:8f:50:dd:79:dc:92:71:9c:52:ae:be:e9:64:
52:8d:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 08:22:49 2024 by rpki-client on console-ams.rpki-client.org