Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xgYnbHKA-9PzrWjrUv5GDqHM8BM.roa
File: xgYnbHKA-9PzrWjrUv5GDqHM8BM.roa (raw, json)
Hash identifier: /yCaN5+bwIUKKDGUrTOrZ6OeAtSsmIo+VH32K9qJqBg=
Subject key identifier: C6:06:27:6C:72:80:FB:D3:F3:AD:68:EB:52:FE:46:0E:A1:CC:F0:13
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191E46A7A1CD6FF5174A6E3B374ECA7AD88
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xgYnbHKA-9PzrWjrUv5GDqHM8BM.roa
Signing time: Thu 12 Sep 2024 04:07:48 +0000
ROA not before: Thu 12 Sep 2024 04:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 06:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:6a:7a:1c:d6:ff:51:74:a6:e3:b3:74:ec:a7:ad:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 12 04:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c606276c7280fbd3f3ad68eb52fe460ea1ccf013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:15:2c:78:75:72:c0:cf:a2:67:f5:d1:be:
d9:56:e8:e8:63:c5:a0:d0:7e:7f:1a:dd:0f:2e:56:
2b:67:d8:9c:33:48:68:bd:e9:6e:c9:44:cf:b2:a1:
e2:dd:96:55:23:5c:61:03:cc:da:ff:c9:d3:75:bb:
3c:3d:bc:7d:89:50:32:14:e9:6d:a7:90:4e:53:90:
0a:5e:e0:b7:32:d2:5c:8e:c3:15:fb:68:88:c7:31:
d0:69:9a:b5:ec:6d:ac:f7:e7:52:3f:be:c6:4c:3a:
ac:69:c3:87:30:c8:81:b2:26:cf:11:01:3c:47:b8:
47:aa:26:99:54:ce:eb:3f:98:c7:2f:bc:ca:95:d0:
5a:93:f4:57:8d:3d:50:9f:7c:c7:69:7f:b2:6d:18:
b9:5b:97:ec:e2:3e:95:c6:c4:53:2b:75:9d:34:5a:
2b:04:0e:15:e4:a3:f2:2f:3e:78:fe:60:2b:b7:6c:
27:49:ea:cc:ce:59:ef:b9:e1:54:a0:a3:45:5f:94:
3a:48:8e:50:f1:fd:08:23:ce:cd:42:bf:50:76:a8:
50:7f:c0:b4:f6:88:24:d7:ce:b2:7e:26:e7:69:9b:
62:a6:ae:f9:b6:df:ec:93:1f:2e:c6:ce:5b:14:fe:
d9:23:98:aa:eb:49:d6:0a:52:c6:6f:0f:6a:9c:d4:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:27:6C:72:80:FB:D3:F3:AD:68:EB:52:FE:46:0E:A1:CC:F0:13
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xgYnbHKA-9PzrWjrUv5GDqHM8BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
Signature Algorithm: sha256WithRSAEncryption
91:39:b2:50:1a:a7:b4:3d:31:ae:5b:34:ee:92:91:f2:e7:38:
1d:c2:74:54:60:e8:16:29:a2:20:45:c5:e7:b9:d3:3c:b2:57:
2c:51:eb:d4:0c:25:80:f0:be:b2:e3:7e:bd:f6:9d:7f:f9:f2:
c4:f4:3b:c0:8d:b2:a1:01:62:58:89:94:35:19:40:54:ea:2e:
60:38:4d:1f:40:45:46:16:3a:d8:a0:5f:7f:17:13:8c:d5:25:
f7:82:cd:13:9a:cd:ef:8d:8e:5a:63:d7:fa:cd:23:d7:e7:47:
2a:c1:8f:53:c0:63:2b:61:f5:fa:5c:f0:f3:ec:d9:22:d3:44:
15:90:51:73:e7:a8:fb:ed:a4:bf:ba:4f:b1:00:f1:da:6b:05:
8f:86:94:1f:91:01:fb:c2:26:26:db:5e:59:4b:ae:bd:03:db:
e7:69:6f:cc:94:5c:8b:6b:37:d2:ec:97:23:31:3b:fe:31:df:
0e:9d:9a:a8:48:2b:19:22:c3:52:3a:49:92:15:c5:04:d6:8a:
e4:1f:eb:81:2c:d1:6f:bc:fa:1e:7e:b3:63:e2:be:f6:d4:7a:
54:14:cc:6e:3e:6b:3f:0a:92:69:cd:94:5c:63:59:00:9d:97:
5a:7f:ee:e0:ff:ef:8c:dc:36:4c:ab:3e:cf:de:c8:83:44:61:
06:23:a4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:16 2025 by rpki-client