Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/xnBYwz6Esm7ovxIN97imOB_B10k.roa
File: xnBYwz6Esm7ovxIN97imOB_B10k.roa (raw, json)
Hash identifier: aw1F5u5Y+BgUtyOqQILUHV37xpMQk1rdk44Kukk437k=
Subject key identifier: C6:70:58:C3:3E:84:B2:6E:E8:BF:12:0D:F7:B8:A6:38:1F:C1:D7:49
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 01856C53B244D0CBF905860CE71EDB4319EC
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/xnBYwz6Esm7ovxIN97imOB_B10k.roa
Signing time: Sun 01 Jan 2023 07:55:02 +0000
ROA not before: Sun 01 Jan 2023 07:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213087
IP address blocks: 134.97.3.0/24 maxlen: 24
134.97.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 09:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:b2:44:d0:cb:f9:05:86:0c:e7:1e:db:43:19:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jan 1 07:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c67058c33e84b26ee8bf120df7b8a6381fc1d749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:ee:34:96:25:3d:37:45:40:98:d5:75:e5:
e6:44:cc:54:94:95:98:48:15:45:9a:1a:7f:f2:28:
6f:a2:95:77:7e:48:e6:cc:ff:be:96:45:21:08:3a:
2a:f9:0d:c2:2e:68:e8:59:3c:22:11:b7:e8:99:3f:
1c:b0:79:b0:c6:94:ad:5e:2e:48:f9:48:67:66:92:
f4:ae:35:f0:1a:3b:61:3b:0f:1b:32:83:d1:d0:5a:
01:72:7d:40:ec:03:48:e7:c8:e9:30:45:e8:a1:25:
6b:de:b1:f9:61:08:08:67:f6:07:8a:2e:01:43:4b:
6f:73:56:c0:28:27:2b:89:1d:61:8a:b1:74:4e:c2:
c4:3f:35:9c:45:5a:67:f6:7f:e5:30:cb:f7:07:64:
18:97:d3:70:7b:4b:0f:c6:4b:61:f4:34:e0:a2:a6:
a4:94:f9:89:5c:12:84:ee:79:e0:da:53:63:9c:d9:
23:f6:6f:10:ea:43:cc:9b:92:f3:c8:21:9b:67:6f:
62:c8:c7:69:e1:0e:e8:a0:3d:f9:a0:91:6e:c1:7c:
b8:87:01:78:ff:04:d8:df:da:3b:23:89:4a:48:bb:
1c:21:af:92:89:26:1f:96:8d:20:39:06:f4:6a:c2:
1a:72:4a:c2:74:7a:c3:e7:18:d5:d0:82:1c:03:da:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:58:C3:3E:84:B2:6E:E8:BF:12:0D:F7:B8:A6:38:1F:C1:D7:49
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/xnBYwz6Esm7ovxIN97imOB_B10k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.97.2.0/23
Signature Algorithm: sha256WithRSAEncryption
45:93:76:5c:1c:a9:30:42:fd:9c:19:87:3a:30:3f:cf:ed:50:
a4:b1:52:86:60:1c:0a:cf:6d:f2:95:22:b3:a8:eb:a3:2b:d8:
ff:55:df:61:93:77:81:05:f9:95:a7:3c:f4:f8:fd:ae:d3:28:
61:7d:e8:e3:e7:da:7c:b2:2e:12:51:c6:4d:4e:39:d5:0b:99:
e2:31:e1:52:09:35:8c:12:37:7e:c3:8e:ad:74:6a:97:13:1b:
2a:f5:ae:1d:b2:48:98:2b:4d:94:40:e1:7f:53:ec:10:67:8a:
82:2b:cc:12:c9:1d:c4:72:8a:77:e6:8a:f9:be:14:d1:35:5e:
72:a9:60:24:5a:84:94:23:9c:d8:39:a6:83:5b:53:aa:4d:4c:
07:3e:8f:94:72:20:78:81:8c:02:6a:ab:27:ab:7d:3e:13:c7:
3e:cb:ae:fd:6e:4c:ee:1c:73:37:36:ea:cb:b7:49:98:22:3d:
04:b3:39:e1:d8:7d:06:fb:e3:12:99:07:13:51:fb:0d:ef:fa:
2c:dc:d7:5a:0f:2b:e2:c2:ad:40:53:20:c8:42:1e:e9:56:f5:
2c:17:6c:cd:9d:58:e6:50:c4:dd:a3:3a:61:59:c0:1a:ce:70:
04:b0:98:53:e3:77:83:8f:72:4c:95:ad:74:4d:bd:3c:e4:5b:
b6:e7:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org