Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XtK1qjcMq_sVtAwZ7bo2vuKUuEw.roa
File: XtK1qjcMq_sVtAwZ7bo2vuKUuEw.roa (raw, json)
Hash identifier: TJz1tD/TLTdVEhV+eYeY5W5teqRgN7KqBtvx9txfYz8=
Subject key identifier: 5E:D2:B5:AA:37:0C:AB:FB:15:B4:0C:19:ED:BA:36:BE:E2:94:B8:4C
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01917486E2DFD6D005C25F4800099DF7914A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XtK1qjcMq_sVtAwZ7bo2vuKUuEw.roa
Signing time: Wed 21 Aug 2024 10:41:22 +0000
ROA not before: Wed 21 Aug 2024 10:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 2a06:b440::/29 maxlen: 32
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 09 Sep 2024 20:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:86:e2:df:d6:d0:05:c2:5f:48:00:09:9d:f7:91:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Aug 21 10:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ed2b5aa370cabfb15b40c19edba36bee294b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:47:89:1a:77:61:09:ce:ea:e3:28:10:75:
80:9c:b9:3f:0c:79:34:fe:68:71:a2:98:1e:0d:26:
fb:0c:fc:34:8c:ea:93:b8:1d:2b:7d:b7:9c:17:d0:
a5:96:85:2d:88:20:c7:be:59:cd:c3:55:44:21:68:
be:84:57:51:77:8e:0d:d6:b5:40:66:2c:97:e8:c5:
43:6e:9a:5e:bf:e2:5d:df:34:6d:a5:a2:da:8d:89:
91:d4:b6:57:34:60:79:8f:91:a6:26:2e:d5:ce:83:
55:c7:30:47:e5:fe:db:37:2e:4d:1a:99:6c:7b:f5:
65:02:e4:ce:b6:b3:02:00:1a:2e:7f:3c:68:97:33:
05:4d:ae:28:95:ed:55:5f:23:4a:f3:06:ea:b9:95:
ce:79:73:f3:8b:02:dc:c5:cd:fa:fa:c4:54:d5:91:
de:c1:30:25:43:9c:86:bd:ea:44:5a:1f:6d:3a:27:
c9:0f:68:d3:1e:af:4e:36:7f:0f:b8:c0:9a:e3:70:
ea:41:4e:67:bd:73:b4:07:88:3a:be:9f:8f:3a:87:
73:97:63:7d:7e:d8:14:c0:8a:f6:7a:9b:21:40:49:
82:7e:26:27:67:38:d5:12:3b:e4:2e:86:44:48:92:
5a:59:97:2e:d6:c0:ff:6a:76:f3:c4:91:ba:0f:99:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D2:B5:AA:37:0C:AB:FB:15:B4:0C:19:ED:BA:36:BE:E2:94:B8:4C
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XtK1qjcMq_sVtAwZ7bo2vuKUuEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b440::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:0e:9b:a0:a5:89:86:ab:b3:a5:31:04:ad:be:f9:27:63:a4:
bb:12:1b:fb:81:e9:18:80:82:14:13:c6:c4:8d:78:fc:24:1f:
05:39:4d:f4:92:86:00:ae:0f:41:f5:df:a1:12:8f:28:d5:e8:
d5:5f:eb:fe:91:d0:17:a9:a9:cb:5e:ef:b6:d4:8c:24:b2:70:
e8:a1:b4:4c:76:9c:27:50:4a:42:ac:ef:11:88:7e:31:ea:c6:
da:4f:3d:62:98:50:4c:33:bd:50:85:c6:44:d7:3a:87:c1:29:
1c:24:cf:4f:de:53:39:16:a4:9c:af:68:fe:bd:bb:fc:bd:25:
63:16:07:aa:60:3a:9e:49:25:aa:d8:49:69:da:76:ec:f1:0a:
32:27:f0:90:75:65:7d:6f:b4:81:bb:ab:b9:47:1e:0d:75:4d:
e7:44:a8:d3:31:21:36:1d:ad:29:4f:ff:16:04:a3:42:55:0d:
92:93:40:7d:90:b7:41:c1:51:48:ab:5a:d4:4c:c1:d9:6c:70:
be:e2:d4:09:5d:5e:0f:6f:fb:f9:55:5d:1f:aa:39:1e:c2:30:
bf:c9:b9:5f:db:1e:3a:c7:ca:66:43:fa:26:a1:86:e2:4d:6d:
56:ae:cd:6e:5b:a9:9a:9d:ba:b3:ce:ac:4f:0d:67:ee:dd:57:
47:18:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 22:24:27 2024 by rpki-client on console-fra.rpki-client.org