Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/xbVYSmjTn35dCNXJPBL90btMGu0.roa
File: xbVYSmjTn35dCNXJPBL90btMGu0.roa (raw, json)
Hash identifier: e2VnuZ26uiPkzftwDy1UnBrzztjo/zrpzLVxqK7sVTk=
Subject key identifier: C5:B5:58:4A:68:D3:9F:7E:5D:08:D5:C9:3C:12:FD:D1:BB:4C:1A:ED
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AB6A6C50D2C9613C0FB676B402FA14EC4
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/xbVYSmjTn35dCNXJPBL90btMGu0.roa
Signing time: Thu 21 Sep 2023 07:31:37 +0000
ROA not before: Thu 21 Sep 2023 07:31:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43519
IP address blocks: 213.248.254.0/24 maxlen: 24
2a01:618:400::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Sep 2023 08:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:a6:c5:0d:2c:96:13:c0:fb:67:6b:40:2f:a1:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 21 07:31:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5b5584a68d39f7e5d08d5c93c12fdd1bb4c1aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:43:d2:30:d5:88:03:18:6f:6f:68:12:17:
5a:0e:d4:0c:a8:96:b4:c1:ad:a4:b7:71:89:64:ea:
2d:40:e7:fe:cf:20:f3:5c:90:f5:18:08:1e:0c:7f:
80:94:65:b5:4a:82:62:81:15:6e:87:c0:bc:ed:5d:
84:ad:b8:38:d9:be:5d:5b:05:2d:01:ef:36:4d:b6:
99:69:6e:fb:88:50:0a:5d:88:51:84:63:c6:fa:64:
6c:87:61:97:5d:04:e3:6a:12:4f:38:41:d1:d6:1c:
a8:a2:05:ed:b8:06:19:b7:60:0f:91:af:ff:50:9d:
13:e8:c8:fb:aa:21:b6:68:0e:f3:a0:21:92:aa:13:
bd:dd:5e:0b:ea:d1:9e:f0:e4:3e:e8:21:e8:c0:05:
53:97:59:b1:21:80:d9:48:1f:b8:13:d6:f5:95:ec:
33:0c:3a:2f:69:12:54:97:e2:81:3f:e2:50:11:e1:
52:5e:0a:a7:89:06:bd:17:e9:27:54:95:b0:11:89:
0f:e6:22:e6:80:be:c5:be:91:94:56:ac:16:45:c8:
6d:ea:e8:b0:c2:1d:ad:08:cf:1a:db:28:48:5c:b0:
5e:2d:cc:58:e7:07:cf:5f:8c:48:aa:59:d3:cb:4c:
3a:94:12:e5:bf:85:65:f1:ce:82:44:15:3f:86:12:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:58:4A:68:D3:9F:7E:5D:08:D5:C9:3C:12:FD:D1:BB:4C:1A:ED
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/xbVYSmjTn35dCNXJPBL90btMGu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.254.0/24
IPv6:
2a01:618:400::/47
2a01:618:404::/48
Signature Algorithm: sha256WithRSAEncryption
82:a2:d1:0c:ab:70:84:ef:11:fc:a8:9a:15:4e:9e:a1:67:53:
8a:32:f6:1d:c0:08:7c:9c:ee:c3:b6:ad:13:81:5c:97:18:2d:
31:a9:93:75:10:bd:97:e1:33:94:1b:3c:d2:34:d0:ab:6c:9d:
71:59:e4:ba:11:98:68:08:95:41:1b:55:da:22:01:a7:c5:07:
75:76:dd:0c:ba:94:01:b3:58:71:44:08:79:47:5d:96:04:9a:
1e:36:22:5e:84:9c:2e:49:67:47:57:dc:46:75:59:4e:f0:b8:
ad:aa:33:83:e9:26:d8:f6:98:bf:9e:ec:61:af:79:49:42:5a:
9f:d5:78:11:47:c8:ea:35:6a:51:c2:c5:62:03:1d:7f:38:e3:
eb:2b:06:f9:df:a0:0b:56:1f:fa:14:49:ee:ef:19:05:b2:d5:
4f:9a:06:e0:43:c4:20:83:50:c3:c5:b1:b2:f8:9b:28:d6:cc:
63:88:6b:f7:f0:94:3e:c4:5a:1f:90:81:f7:a9:1f:4c:7f:24:
24:65:f6:68:5c:c2:98:d0:2e:31:45:dd:c3:1c:1c:23:0f:26:
30:27:89:a5:a4:be:48:c4:27:31:bf:e3:c3:b3:ab:8f:b5:d7:
21:27:36:65:f1:1a:93:8e:f2:d1:a8:05:47:26:49:d8:f1:59:
21:5d:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org