Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/XqDsaxBpti_sWYmL1RuJb2GNQR8.roa
File: XqDsaxBpti_sWYmL1RuJb2GNQR8.roa (raw, json)
Hash identifier: qNawWRC+CEy+h+vWTR9VakUPaHc0O7tdIIIV/nSykaU=
Subject key identifier: 5E:A0:EC:6B:10:69:B6:2F:EC:59:89:8B:D5:1B:89:6F:61:8D:41:1F
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 0191BC76B7C8079230A6ACAD89999D381E54
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/XqDsaxBpti_sWYmL1RuJb2GNQR8.roa
Signing time: Wed 04 Sep 2024 09:56:22 +0000
ROA not before: Wed 04 Sep 2024 09:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42605
IP address blocks: 193.33.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:76:b7:c8:07:92:30:a6:ac:ad:89:99:9d:38:1e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Sep 4 09:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ea0ec6b1069b62fec59898bd51b896f618d411f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:e1:0e:37:c0:f8:f3:0b:9d:92:6c:41:9b:
4c:11:18:5a:41:0a:22:c4:e9:9b:60:a6:88:2c:e2:
8b:e8:03:bb:77:06:46:71:f9:51:ab:92:fa:24:df:
af:b2:36:ec:08:67:3a:94:34:6d:6d:10:a1:20:3f:
be:3a:1b:4b:d6:09:88:7d:6b:5f:25:29:c0:2a:70:
57:e8:7a:f2:62:b3:3c:3b:1c:60:1b:e0:ff:05:0b:
8b:ec:b2:93:a6:db:c5:c4:02:94:ee:ce:83:79:25:
9e:a4:ab:82:e3:84:5a:0e:99:21:65:51:5a:3b:33:
92:e2:51:5c:f3:4c:e3:65:37:8e:2d:47:2c:7b:22:
ae:d3:f4:6a:62:d6:9b:f4:4b:12:61:fb:20:05:a3:
65:94:20:4d:0c:ee:b8:3d:a1:21:a8:d2:32:47:a5:
97:bf:66:0c:8e:05:b6:74:e6:6a:a0:41:9e:c8:f4:
b6:01:d0:7e:bf:37:87:86:67:54:cb:b4:e8:61:79:
c1:74:41:b2:cd:f5:32:d7:ce:be:7b:f3:a6:ca:cb:
8f:ae:6c:cd:89:b2:be:b7:d0:4f:1d:bf:73:1d:34:
4a:b1:b7:1f:c4:7a:30:dd:60:55:cc:0d:3a:ec:64:
25:70:e8:8a:44:35:8e:ea:3e:68:2f:15:ac:36:f3:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:EC:6B:10:69:B6:2F:EC:59:89:8B:D5:1B:89:6F:61:8D:41:1F
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/XqDsaxBpti_sWYmL1RuJb2GNQR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.158.0/23
Signature Algorithm: sha256WithRSAEncryption
50:5b:d1:7d:78:d2:7b:ac:72:71:57:dc:b8:11:ed:d9:c6:26:
32:3c:27:04:40:c5:00:8a:d4:bf:5e:ab:39:6c:35:51:fc:03:
0f:51:e8:76:8b:a6:c7:fa:ca:0e:75:c6:0f:79:93:50:bb:eb:
98:06:9a:12:30:aa:67:2e:35:d2:6d:a3:25:1f:e6:e2:5f:43:
dc:fa:5d:f6:4a:7d:ec:89:2d:ad:0b:3b:c3:5d:48:29:4b:18:
c4:95:81:b3:18:16:ec:05:79:11:b6:dc:ae:42:f1:22:33:2d:
61:6b:99:69:9c:64:de:ef:c8:16:fd:34:aa:69:76:b5:c4:22:
a7:20:e3:1f:5d:66:9f:d8:af:25:5d:0f:8c:92:29:cc:2a:49:
80:58:4d:dd:16:f4:b1:df:3c:eb:48:4a:41:07:40:79:6e:59:
37:64:cb:43:15:a5:bd:b9:67:f4:74:00:86:f3:8e:ff:ad:3f:
a5:a1:1c:21:85:a1:54:e5:02:b2:3d:69:37:5b:fc:d3:9d:b6:
da:9a:2f:1a:7f:12:4e:c9:f2:d1:9d:da:f5:7f:35:27:73:11:
37:fb:73:7d:a6:e4:4d:86:58:71:4b:18:90:0a:b5:48:7d:dc:
eb:c3:bd:3d:93:3e:26:4c:a4:ed:7a:8d:c5:5e:12:c6:b9:c4:
9b:9b:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:48 2025 by rpki-client