Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/xjMwNI6TBcWR8fo5wSHR1ro_DZM.roa
File: xjMwNI6TBcWR8fo5wSHR1ro_DZM.roa (raw, json)
Hash identifier: DTXAQ8ATbvB17NyXsW2o6oo3giBTibxTkZ2zlIOPGnI=
Subject key identifier: C6:33:30:34:8E:93:05:C5:91:F1:FA:39:C1:21:D1:D6:BA:3F:0D:93
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 018571309EF6B93F1F09E957F0E638EA4E30
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/xjMwNI6TBcWR8fo5wSHR1ro_DZM.roa
Signing time: Mon 02 Jan 2023 06:34:49 +0000
ROA not before: Mon 02 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.107.65.0/24 maxlen: 24
89.37.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9e:f6:b9:3f:1f:09:e9:57:f0:e6:38:ea:4e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Jan 2 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63330348e9305c591f1fa39c121d1d6ba3f0d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:c4:43:7b:9d:1c:4f:a7:18:d9:76:81:34:
d1:95:57:70:c6:1d:fb:89:56:e2:bd:e7:2e:79:6d:
59:12:12:e1:b1:71:9f:95:cd:46:26:6e:b6:35:e4:
0a:2c:e6:67:14:8c:9b:65:04:4a:71:1f:aa:f6:02:
f4:ec:a8:4f:89:ad:7b:08:83:8c:06:59:0a:c9:7f:
33:9e:c3:b4:a5:a3:60:8a:99:e8:e5:48:7e:5e:6e:
97:6f:36:e0:2f:0e:19:62:75:d3:99:b9:77:fa:3f:
68:43:cb:e2:ba:09:82:ad:81:5a:27:7d:0d:41:46:
db:e5:fd:42:84:a9:6c:7d:0c:4c:90:88:4c:34:c3:
7f:44:81:9f:cc:10:8f:4f:54:d7:7e:19:9b:1f:c7:
34:8f:64:db:de:f9:7c:6c:3f:a2:75:13:06:65:ee:
35:0a:d1:c5:1a:db:95:b4:99:e3:15:76:a3:5b:8e:
d2:8f:e9:b9:c9:da:69:9e:88:fb:84:c6:68:a6:2a:
ef:8e:17:45:b7:0c:99:96:45:d4:80:35:1e:85:d4:
a2:2b:3b:cb:5f:23:3d:88:58:a9:ec:f4:15:14:27:
5b:7d:2e:0f:2f:ac:f6:07:29:92:6f:29:8c:86:23:
f8:59:12:b9:5c:1b:06:bc:76:4e:08:7f:da:97:a6:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:30:34:8E:93:05:C5:91:F1:FA:39:C1:21:D1:D6:BA:3F:0D:93
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/xjMwNI6TBcWR8fo5wSHR1ro_DZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.140.0/24
193.107.65.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b7:4b:41:4c:e9:d2:b6:b4:55:ba:bd:9a:b8:f5:48:b1:1f:
91:8f:85:83:ed:ee:03:17:90:2f:4e:41:47:42:20:9d:b9:65:
18:a4:0c:e8:a1:07:58:32:98:c8:61:0d:b5:2b:a6:4a:d8:f2:
cd:d6:eb:d8:6a:7e:75:b2:1b:51:06:d3:29:21:0b:a4:70:dd:
b2:17:e0:6d:92:38:3a:a3:83:b7:4d:73:d5:98:43:b9:89:a3:
81:b7:1f:eb:6c:c3:d7:d1:b6:17:e5:d0:88:5c:86:f5:ef:e5:
b7:07:21:ea:38:bb:4e:8e:f6:7f:da:b5:3b:cf:21:20:61:e3:
31:17:c9:d5:9f:f6:d5:72:52:d9:ec:c2:e1:a0:f5:50:d8:51:
e8:4f:b9:7c:d1:aa:10:aa:d0:b6:8c:86:0d:7a:4c:91:47:10:
14:a3:db:7d:d8:d3:1d:b0:40:ef:9d:0b:89:d5:8d:c0:51:54:
68:87:71:f2:e5:ab:b0:db:2f:21:bf:d3:42:95:f1:5f:24:70:
df:fa:b7:a0:8c:0b:33:10:55:9e:0d:c4:e1:04:5d:79:83:9c:
47:b8:c1:bb:11:e1:39:56:cf:78:c0:88:1c:cd:53:43:84:8a:
9d:5e:85:7a:b1:4d:5f:27:19:4e:2a:74:e0:d6:43:49:1c:9e:
eb:9b:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:17 2024 by rpki-client on console-ams.rpki-client.org