Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/XKAZTXmy0VQgc-WUtgHmBSH017c.roa
File: XKAZTXmy0VQgc-WUtgHmBSH017c.roa (raw, json)
Hash identifier: /6hQ+BfJc2LIqKIzQWnjNUIGUCaCtkKVHIaPIhqlVQs=
Subject key identifier: 5C:A0:19:4D:79:B2:D1:54:20:73:E5:94:B6:01:E6:05:21:F4:D7:B7
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 01859637D2C5ED3FE7416522DB527543E4BE
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/XKAZTXmy0VQgc-WUtgHmBSH017c.roa
Signing time: Mon 09 Jan 2023 11:08:38 +0000
ROA not before: Mon 09 Jan 2023 11:08:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57773
IP address blocks: 91.198.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:37:d2:c5:ed:3f:e7:41:65:22:db:52:75:43:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Jan 9 11:08:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ca0194d79b2d1542073e594b601e60521f4d7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:8b:7e:1b:1d:6b:1b:bd:7d:dc:11:ff:43:
97:3e:fe:4e:8c:54:b2:03:b6:c7:af:82:2b:54:7c:
3a:50:bf:09:5f:6c:4a:eb:52:07:c9:bd:86:83:4e:
d5:1d:64:40:06:65:3f:77:30:aa:dc:49:bf:44:6b:
74:ba:22:f6:8d:d4:b6:cf:27:b3:0b:7f:24:12:68:
f0:d4:04:94:2d:a2:13:12:07:5e:79:59:7a:34:76:
f2:b6:18:b0:26:0c:85:14:28:8e:eb:d6:f3:3e:eb:
4b:39:0f:d7:84:67:0f:9f:45:c2:b6:7f:6a:fc:b0:
87:cb:bd:86:40:fd:e9:46:b2:f2:94:1c:0b:b8:2e:
93:9c:43:c0:1b:6b:e0:e9:a7:8d:c2:90:37:fc:22:
ab:64:13:a8:2a:ce:d6:1f:b5:f3:0a:f3:9a:a4:79:
c6:c2:d0:75:04:c1:7f:bb:e0:1c:3f:21:ee:ca:e9:
30:19:51:df:99:d5:9a:f2:b4:68:bd:ab:c0:0c:35:
e2:e2:d3:73:fe:c6:dc:a3:60:29:20:e4:af:d7:a2:
52:54:28:78:32:49:ea:ec:6e:06:af:70:2a:ed:50:
d6:3a:1f:69:48:51:70:b8:07:04:de:b4:0a:91:93:
c4:f3:97:fd:e7:3d:dd:33:3c:5a:12:24:4d:af:af:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:19:4D:79:B2:D1:54:20:73:E5:94:B6:01:E6:05:21:F4:D7:B7
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/XKAZTXmy0VQgc-WUtgHmBSH017c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a1:d1:26:11:90:79:52:79:f7:d9:f7:5e:ca:1e:c4:41:30:
8f:89:9f:51:31:49:65:b9:e1:0e:3f:b5:70:0d:5e:d6:07:c6:
de:ee:6c:f5:7a:9c:2f:6e:2c:61:ff:e6:4b:06:a6:07:1c:42:
96:f2:22:fc:65:75:d9:b8:e1:a5:72:a7:68:0c:34:0e:22:b6:
49:1b:e7:56:10:64:59:84:92:86:b7:d6:65:5b:e4:fb:24:e2:
83:6a:b0:98:eb:71:73:21:63:72:a6:ce:87:32:79:2c:74:19:
fa:71:9f:2a:ff:6b:5a:54:0b:ab:9c:11:5f:30:7e:07:6d:ba:
72:e2:ca:fa:92:8e:cf:aa:34:f0:df:5c:5d:af:dd:47:30:84:
1d:25:c8:e6:f0:6e:ea:35:ef:b2:5b:b2:1e:0b:67:b9:da:75:
71:2d:bc:d1:7e:64:df:c0:47:be:2e:f8:f8:c9:b6:2b:98:75:
1e:9b:e8:56:2f:32:85:d4:f0:d5:34:28:c5:df:bb:d4:72:ba:
6f:69:95:76:6f:e7:52:ac:98:51:48:f2:e0:fd:1f:29:3f:78:
88:76:ac:29:7c:6d:16:89:a0:0c:72:28:dc:a9:d3:87:37:8e:
90:59:d5:8d:c3:b7:92:a8:c8:95:1a:b8:80:7f:c6:85:48:53:
18:c1:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:08 2024 by rpki-client on console-ams.rpki-client.org