Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/XqgJBxk-uSyDc9t6vay3En5Uz38.roa
File: XqgJBxk-uSyDc9t6vay3En5Uz38.roa (raw, json)
Hash identifier: 8fce78DpL9C1ZQC2GZwNzKB6JgJtOl0UfWpJQQLGcEM=
Subject key identifier: 5E:A8:09:07:19:3E:B9:2C:83:73:DB:7A:BD:AC:B7:12:7E:54:CF:7F
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E53D427EBDD6D4FF8BE36159034C5
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/XqgJBxk-uSyDc9t6vay3En5Uz38.roa
Signing time: Mon 02 Jan 2023 07:24:45 +0000
ROA not before: Mon 02 Jan 2023 07:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60506
IP address blocks: 81.199.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:53:d4:27:eb:dd:6d:4f:f8:be:36:15:90:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea80907193eb92c8373db7abdacb7127e54cf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:17:73:2c:37:5a:a6:0d:75:85:47:37:d0:
2b:35:2a:1b:64:63:51:42:a6:a6:ee:a0:30:ef:9a:
34:a6:6c:e8:f6:e4:3e:27:17:47:d4:10:0c:5c:e6:
13:92:27:05:b7:04:03:37:d7:b7:2b:38:ef:21:36:
6c:64:61:54:2b:26:c4:0e:a5:46:d7:bb:b8:d4:fa:
83:a4:ba:51:2c:08:a9:79:64:f0:a9:3b:41:ad:3c:
6c:b6:f2:40:69:6d:1d:31:72:a4:77:aa:41:5b:e8:
58:1e:7a:54:fd:9b:54:fc:26:07:97:dc:ad:1a:52:
ff:e2:17:05:b8:40:c4:60:e6:34:7f:3c:13:d6:cf:
8e:e6:56:88:0f:87:ac:54:c4:ee:4a:6b:37:cb:09:
ea:d5:69:35:dd:c9:ec:7e:9c:15:3d:5e:a2:99:85:
d1:0f:ad:84:8d:a0:76:eb:c7:43:49:6f:71:f8:e2:
12:53:b2:aa:a1:cf:aa:63:ac:b1:c2:bc:1c:f2:d5:
a5:f4:4a:44:71:ef:16:fa:b3:94:32:f0:9f:e6:4e:
a8:ee:22:2b:8a:c4:94:79:1c:f2:fe:45:c1:96:37:
43:71:4b:25:de:f4:ef:0e:b6:5d:7f:04:c5:db:55:
e1:92:0f:f5:7b:32:1e:d5:92:52:b4:2a:d2:0b:cb:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:09:07:19:3E:B9:2C:83:73:DB:7A:BD:AC:B7:12:7E:54:CF:7F
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/XqgJBxk-uSyDc9t6vay3En5Uz38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.24.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:50:75:4b:96:75:6f:10:2e:a3:0c:ff:d3:60:27:5c:9a:5a:
cb:b1:e5:41:bd:82:fc:a6:76:80:50:b0:7c:e5:e5:c5:0d:9b:
7e:f1:8e:89:95:7b:9b:d5:40:e9:a0:c1:30:3f:06:97:8e:0d:
fd:e1:ce:e5:28:eb:2d:4c:e2:53:66:9e:f5:9c:c2:26:fb:e8:
17:2d:3f:b1:50:2f:06:e8:09:d7:eb:19:29:a2:9c:bc:c1:ba:
31:29:cb:af:76:b7:fd:74:df:e3:92:7e:51:f2:3b:e0:e7:56:
bc:10:42:be:a3:85:4f:ff:ee:7f:78:7a:75:19:28:6c:cd:2e:
37:27:da:8b:df:fe:7f:0c:d6:52:eb:a9:de:20:e4:5b:1f:82:
31:92:c1:2a:c1:e3:47:25:11:89:a5:74:48:6b:d6:a7:e3:01:
77:2e:34:1d:20:7f:67:e8:45:85:38:32:1d:89:87:ee:75:b8:
34:08:b9:14:09:64:14:ac:49:2c:b6:65:d4:4c:50:04:46:4f:
07:25:48:7a:4f:a9:bf:04:ac:61:be:ce:5d:f2:7c:ef:44:08:
b7:f6:44:a5:a7:c3:06:b0:f2:41:3f:bd:d8:48:70:5d:6c:91:
f8:f9:c5:76:8c:ee:ed:e6:df:36:a4:6e:10:6c:f7:3f:02:10:
6d:6f:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:40 2024 by rpki-client on console-ams.rpki-client.org