Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/XpJNKMkDYO1tDF_aaopBZMxjk24.roa
File: XpJNKMkDYO1tDF_aaopBZMxjk24.roa (raw, json)
Hash identifier: pF+t4RWta++0elPH1fGKB1rwO+Dw6suqqkFXAE3k7vQ=
Subject key identifier: 5E:92:4D:28:C9:03:60:ED:6D:0C:5F:DA:6A:8A:41:64:CC:63:93:6E
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 01856ECB758AC6CE6452668267F5B3750106
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/XpJNKMkDYO1tDF_aaopBZMxjk24.roa
Signing time: Sun 01 Jan 2023 19:25:05 +0000
ROA not before: Sun 01 Jan 2023 19:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48954
IP address blocks: 85.91.40.0/22 maxlen: 24
195.88.100.0/23 maxlen: 24
37.48.240.0/21 maxlen: 24
185.83.120.0/22 maxlen: 24
2a00:7640::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:75:8a:c6:ce:64:52:66:82:67:f5:b3:75:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Jan 1 19:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e924d28c90360ed6d0c5fda6a8a4164cc63936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:4c:69:4f:79:90:73:f2:bc:82:b4:d2:69:
ed:23:ac:7b:7b:25:f0:87:39:21:a9:61:9c:0c:15:
c6:00:d4:b1:10:c1:a6:6b:94:6d:d1:c2:85:b2:bb:
d7:83:01:63:83:1f:98:8b:7d:0a:e3:87:c2:1b:94:
7a:a1:4e:49:c3:34:d2:7b:ba:77:41:82:2f:d1:70:
3b:4b:33:33:41:84:b0:ab:71:2a:4b:d0:c6:27:94:
23:88:41:52:d6:e8:5b:fb:72:44:67:d1:61:fc:7d:
1b:52:50:7d:97:a0:55:e7:89:e6:f3:02:85:3c:b8:
e4:ae:7e:ed:c7:86:ce:de:6a:b4:20:bd:56:c0:6f:
4f:a1:8d:af:4b:08:d0:83:d4:ec:89:d4:5c:5e:d8:
09:d0:90:de:07:cb:0a:a3:75:d4:fc:1a:6c:af:13:
c2:43:c4:42:3d:ba:47:11:0f:9f:b9:6d:a1:0f:67:
75:49:c7:64:e3:7a:e1:39:e3:de:ed:03:c1:12:30:
30:a6:59:87:f2:7b:0d:7c:55:f0:7c:31:c3:fe:a3:
88:c3:d2:89:09:53:d4:5b:18:8d:12:59:2c:f2:89:
03:59:6f:1c:b7:d3:7a:4b:38:53:b1:c1:92:16:48:
a9:37:bc:ef:e1:4a:01:39:dd:4d:07:b0:87:15:9e:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:92:4D:28:C9:03:60:ED:6D:0C:5F:DA:6A:8A:41:64:CC:63:93:6E
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/XpJNKMkDYO1tDF_aaopBZMxjk24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.240.0/21
85.91.40.0/22
185.83.120.0/22
195.88.100.0/23
IPv6:
2a00:7640::/32
Signature Algorithm: sha256WithRSAEncryption
b5:9d:99:27:f1:3e:91:76:20:16:df:68:94:53:f9:7b:e5:6c:
62:92:42:d8:34:ff:fe:50:85:4c:d0:02:71:73:5f:ef:3a:81:
19:15:61:97:3b:36:89:88:a5:e5:38:24:1e:a4:c8:9e:b6:79:
f4:d6:9b:91:28:28:8d:fd:4c:05:53:f0:a6:55:3c:58:f2:70:
18:e6:f9:91:4b:58:f3:83:fc:94:b2:3c:57:e8:d1:91:f8:ee:
99:a2:bf:81:00:c4:e3:16:84:a0:64:99:b6:d9:25:24:48:fa:
e8:6c:cc:aa:7e:bc:ed:60:21:40:1a:a2:67:41:5c:ba:6e:2d:
6e:ad:6e:40:23:39:1f:6a:a9:5b:42:57:e9:7e:ab:0b:d8:9e:
35:83:70:5d:3d:53:79:02:a1:00:8a:62:36:b4:df:7b:25:16:
d2:7a:d5:1f:ac:b4:e0:46:fa:fd:f3:1b:ba:14:9a:71:6e:f9:
44:1c:30:fd:15:74:0b:58:99:8e:8c:1b:ff:1a:ce:51:c7:d5:
76:d1:fa:f1:2e:41:52:cd:48:24:fd:59:7e:52:2c:2c:82:25:
59:67:11:46:79:8f:0e:f0:16:4e:7f:69:81:cb:da:de:7c:63:
22:13:cd:0b:7c:74:3e:df:8c:01:85:90:1f:72:32:66:f2:61:
19:69:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-fra.rpki-client.org