Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/xmmAcMinttS2Jctw484XJ2RlsVA.roa
File: xmmAcMinttS2Jctw484XJ2RlsVA.roa (raw, json)
Hash identifier: L12IdwHFQUWjVscAiWq6pRFJyVza7TRLvqhwx0e6gEQ=
Subject key identifier: C6:69:80:70:C8:A7:B6:D4:B6:25:CB:70:E3:CE:17:27:64:65:B1:50
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018F958B49CEFCAB114520605C08E08B51D4
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/xmmAcMinttS2Jctw484XJ2RlsVA.roa
Signing time: Mon 20 May 2024 10:28:04 +0000
ROA not before: Mon 20 May 2024 10:28:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.108.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 08:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:8b:49:ce:fc:ab:11:45:20:60:5c:08:e0:8b:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: May 20 10:28:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6698070c8a7b6d4b625cb70e3ce17276465b150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:f9:76:05:bf:7b:f3:7e:47:02:e1:2a:de:
3e:ff:5c:10:bc:2a:5d:e8:a9:3d:3a:9a:f4:6f:b2:
fd:21:fc:c4:be:5d:ec:cb:46:36:02:e5:7a:0d:54:
bc:0c:c4:08:c5:4e:ff:86:11:c1:a8:fb:a3:87:1f:
e2:68:9b:c0:80:80:85:fd:ca:22:80:ac:38:d9:98:
a3:b9:00:5f:69:2c:1f:4e:f1:31:f8:c4:4f:5f:d0:
89:d1:e1:ed:23:ea:7f:f5:0e:70:2b:b9:f3:80:0b:
40:ab:80:c1:72:d4:4b:ca:6f:7e:04:85:93:5c:15:
71:d9:49:53:33:16:fa:48:bc:86:ef:83:80:06:05:
6a:ce:e1:ab:a8:99:20:e1:ae:a5:fb:35:64:be:d3:
dc:cd:66:f6:2d:1f:a6:ec:05:58:82:3f:7c:11:65:
16:00:99:b1:93:f6:d1:4d:a4:a0:a0:55:82:64:0b:
2d:74:58:be:03:96:5e:bf:28:32:82:bc:8c:35:d7:
4e:64:3b:89:c5:b1:ce:4d:2b:34:7e:0e:84:c4:ca:
59:02:53:f8:fd:0f:b2:92:84:6a:fa:29:a6:dc:05:
c6:5c:e5:da:5f:f3:69:ab:37:6a:ed:5c:6b:ca:51:
e5:cc:34:c2:54:58:77:92:08:37:d4:c7:b3:89:3b:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:69:80:70:C8:A7:B6:D4:B6:25:CB:70:E3:CE:17:27:64:65:B1:50
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/xmmAcMinttS2Jctw484XJ2RlsVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
75:bb:83:d8:f1:35:27:eb:e7:5a:dc:b6:cc:90:f9:1e:47:3d:
f2:bc:9b:8b:66:ec:9e:12:8f:07:e0:16:75:3e:9b:4d:01:ea:
66:d3:6f:e4:e6:cb:31:5d:fc:ab:d5:29:35:62:86:38:5f:00:
be:7c:7a:d3:86:a6:ab:bd:d7:33:dc:29:cd:aa:34:47:c6:03:
61:9c:ab:1a:cb:9f:41:fe:ae:0c:4c:7d:b7:ff:58:d1:d1:bd:
8a:53:fe:84:65:a3:4e:65:d1:a7:43:97:35:5b:31:f9:c4:03:
ed:08:24:7b:c5:be:f3:f1:66:31:d0:d9:3e:da:ee:d0:a8:de:
a1:a9:e5:90:e6:bc:13:b5:bc:59:df:4d:09:03:73:f2:ea:29:
8a:9b:a6:94:a0:73:d3:d1:41:17:38:80:de:ed:a9:6f:c2:5d:
63:37:d8:5b:66:96:02:20:f4:52:74:92:a3:ea:65:dc:a8:64:
35:8a:86:45:0d:98:36:dc:43:28:6d:b9:cd:00:d2:1e:a4:d2:
fa:b1:70:a8:5a:f1:f8:d2:17:cd:58:e6:8e:7a:44:74:d1:43:
35:6d:c2:2a:94:74:4c:c5:bc:67:5f:25:4e:e1:ec:c2:5c:07:
6e:8e:2e:00:4a:ac:a5:f0:04:f4:d8:83:be:4c:ce:e8:99:89:
5a:7e:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org