Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/XBS6nNCmEp0qHoBTY5VldAUyn1M.roa
File: XBS6nNCmEp0qHoBTY5VldAUyn1M.roa (raw, json)
Hash identifier: J5jpk7w7phxY3haHLOb5/feTv0XmxO82mY42y6tIWnw=
Subject key identifier: 5C:14:BA:9C:D0:A6:12:9D:2A:1E:80:53:63:95:65:74:05:32:9F:53
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 018C2635AE941E718537130D92F90BC3B74B
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/XBS6nNCmEp0qHoBTY5VldAUyn1M.roa
Signing time: Fri 01 Dec 2023 16:28:21 +0000
ROA not before: Fri 01 Dec 2023 16:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 82.146.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 26 Dec 2023 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:35:ae:94:1e:71:85:37:13:0d:92:f9:0b:c3:b7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Dec 1 16:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c14ba9cd0a6129d2a1e80536395657405329f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:9d:81:c0:83:1c:76:3b:1b:5c:75:2a:d5:
35:91:68:74:84:17:bf:3a:9e:14:e0:4a:d2:42:a7:
7c:0c:1b:29:f1:da:10:66:14:96:30:f6:c7:15:e0:
94:60:39:39:b3:ba:56:37:a2:6a:4f:17:0f:50:aa:
04:6f:7f:a9:55:27:98:48:01:99:74:be:35:d3:8b:
d9:c3:77:ba:c7:eb:fa:d1:03:ae:a4:83:a8:e3:6d:
94:b8:39:5c:53:f0:bc:c9:96:14:fa:58:e1:1b:0b:
dc:e2:0d:19:cf:f4:4b:77:ee:bb:29:c5:73:01:40:
30:03:04:5e:61:22:29:a6:3d:ec:32:f8:11:0d:a4:
e6:f4:58:70:f0:48:62:f8:11:4c:6c:05:c0:d1:ca:
c3:c1:44:51:9c:86:68:d5:a0:3c:4f:31:82:5e:10:
64:a8:3a:25:0d:5c:0a:d0:fd:cd:42:ed:b4:c7:24:
2c:9a:1f:3b:26:55:8b:eb:6a:73:7c:20:99:d1:1a:
bf:6f:33:db:e8:2b:8d:82:3c:82:12:7a:0d:5d:50:
92:34:44:3e:37:c0:7e:ae:aa:e1:f9:ac:4b:58:e1:
2b:5d:f0:30:d4:ea:7e:7d:e0:a1:89:74:b1:23:6c:
5c:45:41:97:56:d2:c9:20:b6:86:ef:20:c4:8e:40:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:BA:9C:D0:A6:12:9D:2A:1E:80:53:63:95:65:74:05:32:9F:53
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/XBS6nNCmEp0qHoBTY5VldAUyn1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.16.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3f:e0:56:1d:e9:65:7e:04:90:ea:fa:3c:b4:30:30:19:59:
c3:b9:78:b0:ee:8b:8b:73:07:0f:03:17:9b:f7:05:cf:cc:94:
05:05:7e:e4:d0:7f:3a:1f:5e:7c:c6:bd:31:3d:78:b8:d7:1d:
97:81:89:c5:42:3a:a6:82:bd:0c:18:13:6b:42:c3:d7:75:85:
18:a6:72:ee:d0:3c:9b:66:db:06:7e:8e:c6:23:b7:9c:d3:17:
3a:ab:13:b5:7d:4c:62:6d:07:bf:b8:a7:05:40:24:a7:47:a0:
ef:1f:9f:8f:da:68:1b:69:c4:0d:5a:dd:15:bf:c6:e6:e0:46:
b2:7e:e5:f6:dd:e1:54:2a:7b:3d:4b:cc:cd:43:a7:16:39:07:
79:eb:d7:d6:23:b1:69:3b:c6:37:d9:9d:12:f0:bf:4f:6a:87:
7f:fd:64:92:61:4a:64:cd:58:1b:68:1a:e5:50:0e:96:5d:cf:
b1:e8:01:fa:f6:c9:b4:a2:56:72:e5:1e:6b:1c:ef:6d:08:53:
b1:8e:8b:9f:62:ac:59:64:6b:30:8c:ae:a9:c5:b2:2d:09:3e:
59:38:8c:23:36:c0:fd:25:57:46:b6:91:fb:2b:de:c3:ae:2b:
66:6b:42:d9:8e:8e:7e:52:22:07:39:81:a2:e9:7e:e6:a4:0a:
e2:3d:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:24 2024 by rpki-client on console-fra.rpki-client.org