Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xjfWc0TtEJ_OW_Fjb4lBjmOBlys.roa
File: xjfWc0TtEJ_OW_Fjb4lBjmOBlys.roa (raw, json)
Hash identifier: IEnMf7gqNKJXA/mBVa4Hm0kBAS2Fb5QzA1/THkGD0fc=
Subject key identifier: C6:37:D6:73:44:ED:10:9F:CE:5B:F1:63:6F:89:41:8E:63:81:97:2B
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 0185F2D55FF2C605A11648ACEE7726C01B57
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xjfWc0TtEJ_OW_Fjb4lBjmOBlys.roa
Signing time: Fri 27 Jan 2023 10:45:48 +0000
ROA not before: Fri 27 Jan 2023 10:45:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 81.20.41.0/24 maxlen: 24
2a00:1fd0:ae00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Nov 2023 13:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:d5:5f:f2:c6:05:a1:16:48:ac:ee:77:26:c0:1b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Jan 27 10:45:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c637d67344ed109fce5bf1636f89418e6381972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:34:50:94:07:95:d4:f6:37:32:96:7e:0d:
64:6f:91:89:78:a9:e1:4f:a2:77:a7:22:46:06:f0:
df:be:e9:a4:2b:ad:fd:16:30:9b:b2:0f:66:64:33:
d3:18:89:89:ae:79:16:0a:95:2d:f2:04:b8:7d:f4:
83:de:a7:34:44:17:a0:ee:1c:7d:c2:90:28:38:dd:
16:79:ac:3b:6e:f1:f6:a1:cb:3c:4f:3c:ff:3d:8f:
4e:dc:88:bd:1a:43:7d:cf:51:d5:bf:53:a2:90:71:
e2:41:82:c0:35:68:78:2f:cb:78:81:50:c7:08:c3:
79:8d:ac:91:c3:27:b2:9f:66:b3:26:a0:65:c5:67:
44:ab:f6:3d:d9:e7:39:c4:cb:3d:48:0e:9e:ff:82:
94:7a:d1:4f:99:37:9c:b9:ba:c4:9d:30:47:e0:ff:
e6:aa:c2:64:92:2a:49:fa:3f:1e:9f:e2:53:17:4d:
e9:a0:92:93:3e:9e:38:ca:a7:b9:81:b4:71:a0:66:
36:28:f6:6a:04:7a:54:90:a6:2f:94:a2:a5:05:b8:
85:33:a9:ee:a3:57:88:e1:40:12:5b:33:9c:65:3f:
a5:33:f1:af:37:ef:f0:8d:14:df:72:91:a2:96:41:
5c:6f:9e:a5:72:14:d8:d6:a5:f2:0c:10:6f:c9:e8:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:D6:73:44:ED:10:9F:CE:5B:F1:63:6F:89:41:8E:63:81:97:2B
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/xjfWc0TtEJ_OW_Fjb4lBjmOBlys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.41.0/24
IPv6:
2a00:1fd0:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
68:47:8b:ce:2a:d3:c2:55:2f:32:78:99:d4:f4:13:d1:e3:44:
1c:89:fe:de:56:81:be:da:b4:b8:64:5f:8f:31:5a:58:71:9b:
98:b8:aa:5d:22:c3:4f:1c:12:d8:b0:9b:3f:71:98:94:b3:2e:
43:21:d0:f9:18:fa:67:5f:c4:7d:fa:7b:74:2b:05:7c:93:87:
b9:80:0f:c4:16:c6:0d:5d:22:60:83:53:ca:56:49:64:67:8e:
8c:a2:da:66:d3:2d:c9:16:60:fa:f7:29:77:7d:3e:41:f0:56:
0d:b3:5b:31:54:33:57:19:2d:ff:c6:1f:6a:00:26:ff:aa:0b:
6f:bc:b3:93:c5:23:d4:13:d3:36:25:46:1a:35:3e:09:27:2d:
99:10:f0:dc:ee:6e:1e:cb:46:0c:47:c9:ad:e1:e5:ce:94:bd:
61:65:0c:3b:e1:0c:45:df:ea:17:e2:ed:f5:a5:1c:f5:57:ab:
a3:c3:da:4b:31:00:6b:fc:a4:29:bb:ad:7a:33:ec:df:21:b2:
a8:35:ec:98:d0:9e:d5:a4:2f:6d:ef:a1:83:e6:f7:58:ad:10:
1f:09:2c:00:aa:f1:94:fc:15:e2:ef:50:0e:47:eb:49:8c:4d:
8b:1c:ed:2e:cb:be:45:fe:ff:11:95:38:f7:f2:04:7f:37:c4:
8a:5c:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:18 2024 by rpki-client on console-ams.rpki-client.org