Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/xa5tOEw9Nwr1e3jI0FKh4wNKcZc.roa
File: xa5tOEw9Nwr1e3jI0FKh4wNKcZc.roa (raw, json)
Hash identifier: rs3h77S3vwa1fUmxfbwAuMh1nZR5sZiWHU/U1N6Y7Zo=
Subject key identifier: C5:AE:6D:38:4C:3D:37:0A:F5:7B:78:C8:D0:52:A1:E3:03:4A:71:97
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 018857BC1817CC18019B25433591655693E7
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/xa5tOEw9Nwr1e3jI0FKh4wNKcZc.roa
Signing time: Fri 26 May 2023 11:05:24 +0000
ROA not before: Fri 26 May 2023 11:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44957
IP address blocks: 93.151.0.0/17 maxlen: 17
93.179.185.0/24 maxlen: 24
2.33.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:bc:18:17:cc:18:01:9b:25:43:35:91:65:56:93:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: May 26 11:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5ae6d384c3d370af57b78c8d052a1e3034a7197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:b7:d8:f3:81:58:c0:3f:03:e4:91:0e:41:
e4:0f:67:51:3a:84:d0:2a:5a:b6:f8:d0:53:b4:76:
fa:25:4a:ac:78:6d:cb:dd:db:99:51:10:bb:e2:f7:
55:11:d6:84:0a:2e:c1:dc:1f:b4:73:95:c7:c0:29:
ee:cc:36:fe:fa:19:62:7c:07:e6:05:e8:7f:d3:ba:
1c:69:b6:71:6b:86:31:c9:b7:a1:70:ad:97:05:c1:
07:99:27:59:19:fc:e2:87:d7:ac:20:e0:a8:37:f0:
44:a5:a0:b4:76:f4:b3:cf:da:de:3c:07:a3:4b:38:
4a:aa:81:63:e1:cb:03:19:7b:e6:6b:39:c2:69:9d:
6e:f3:bf:ed:f0:f9:84:47:0c:74:39:67:94:08:4d:
e7:d5:20:d8:52:0c:9f:08:9b:a5:e9:c5:32:e8:f6:
69:a2:46:14:63:29:d3:6e:4f:4f:13:5f:e0:0a:ae:
c5:98:5c:b6:51:30:bb:1e:ba:d1:26:f2:05:f2:9a:
76:98:c0:0a:79:89:de:85:8f:f3:dd:b6:a5:bc:32:
d0:a4:5c:cf:da:6c:51:d0:7e:0e:e5:88:a8:f6:92:
51:df:43:43:8a:9f:4b:fc:38:c4:a7:fc:60:3b:a3:
28:59:ac:84:bf:f6:ec:0e:0a:af:60:8a:fa:bb:88:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AE:6D:38:4C:3D:37:0A:F5:7B:78:C8:D0:52:A1:E3:03:4A:71:97
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/xa5tOEw9Nwr1e3jI0FKh4wNKcZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.33.0.0/16
93.151.0.0/17
93.179.185.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:25:18:37:5a:9d:d7:4a:56:8a:9e:72:86:85:ab:ab:cb:b6:
3f:8a:55:d6:49:a1:47:cd:61:e8:72:cc:2e:5e:70:d6:be:80:
2c:3e:33:c0:94:c3:2d:b4:b5:ac:75:9e:f5:cb:23:e5:80:43:
b3:ad:16:76:6f:75:4f:eb:de:51:82:64:0b:ca:ae:47:66:c1:
c6:e8:07:03:41:ec:f3:14:0a:45:b6:62:1a:5a:fd:5f:bb:ee:
d2:09:c7:81:19:f2:77:51:81:b5:8f:37:52:19:cf:90:ef:7b:
95:84:67:77:4a:4a:13:a0:2a:b8:38:45:89:89:8d:df:1d:f3:
8a:fc:75:92:a8:4f:86:57:b7:dc:11:12:25:91:f4:e6:7f:45:
b8:d0:70:6d:82:06:f5:8a:a9:b9:1e:e3:f0:c8:5a:bf:8e:fa:
49:8a:68:31:03:f7:fc:69:b4:da:37:98:f5:ba:c2:b1:a3:ba:
ff:6b:89:e2:32:47:54:03:c3:6b:9d:a9:f4:79:01:76:97:af:
e3:2d:47:a5:c3:bc:d9:90:36:07:9c:2d:81:a6:5e:4f:63:0e:
b0:5e:8c:9c:5a:4a:4c:b1:d7:21:69:d4:13:e3:4a:fd:cf:f3:
49:12:ec:c5:cd:93:8b:8d:e8:0f:3a:e3:16:ba:b8:76:fe:38:
e5:3b:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org