Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/XX9NeT8qdIzRuYXkq84D5UkjdBc.roa
File: XX9NeT8qdIzRuYXkq84D5UkjdBc.roa (raw, json)
Hash identifier: tPEU+Hdc87zHwzLTYzjOa3xFzW+OvXYWPp2zCGJYg74=
Subject key identifier: 5D:7F:4D:79:3F:2A:74:8C:D1:B9:85:E4:AB:CE:03:E5:49:23:74:17
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 01856FDDC186CF0A54F905D69DF699B9B4D1
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/XX9NeT8qdIzRuYXkq84D5UkjdBc.roa
Signing time: Mon 02 Jan 2023 00:24:42 +0000
ROA not before: Mon 02 Jan 2023 00:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.10.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c1:86:cf:0a:54:f9:05:d6:9d:f6:99:b9:b4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Jan 2 00:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d7f4d793f2a748cd1b985e4abce03e549237417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:30:08:81:22:a0:d5:bb:f8:b7:4e:6f:c2:
f3:d4:6c:6f:98:d0:cc:0f:cf:ce:46:c0:5b:d7:fa:
dc:b2:1c:1f:fb:ed:1a:70:3a:47:6e:9e:3d:c7:a4:
05:a1:6e:78:d6:a7:d1:78:46:39:b1:78:b3:69:fe:
17:e7:e0:ca:c1:7a:1a:95:be:43:c3:26:bf:f8:39:
26:5b:48:1e:a7:a8:f7:df:72:8a:80:4f:cd:ae:b1:
fb:33:4b:76:53:27:3f:b0:db:d2:b0:11:94:bb:0c:
67:52:3f:3e:ef:3b:45:1a:9b:eb:f7:41:44:59:26:
5d:7b:3b:c9:8c:be:99:6a:9c:03:7f:a7:83:f3:fb:
3f:4b:5c:ec:f7:c6:d0:9d:b4:d3:20:09:a5:2e:9b:
ce:61:6a:00:cb:72:89:74:c6:cc:05:de:31:72:54:
f6:58:1f:60:91:c2:52:43:9e:f0:5b:b2:5e:a0:2d:
bb:bc:93:af:a1:b8:01:1b:06:9a:95:08:c4:8a:7e:
05:3f:86:7d:8a:2e:61:6b:8d:cc:9b:61:3a:de:0e:
61:88:c1:14:21:87:94:9c:5d:ff:f5:98:d4:f1:ed:
a4:6e:35:57:7d:84:d2:b9:0d:38:2f:cf:9e:f0:12:
d1:f5:39:78:25:8a:13:43:08:7f:2c:eb:2a:00:cf:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:4D:79:3F:2A:74:8C:D1:B9:85:E4:AB:CE:03:E5:49:23:74:17
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/XX9NeT8qdIzRuYXkq84D5UkjdBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:71:c9:9c:5d:9e:2b:dc:30:ca:b7:34:9d:9e:61:20:b9:3b:
e2:3d:11:6c:a5:95:c0:b6:9f:1d:48:97:bf:0d:6c:68:a6:14:
4d:2a:ae:2d:f5:bd:02:7c:40:70:74:c8:22:bf:05:1f:cc:a8:
3b:07:10:8d:41:e5:6c:dc:78:2f:0c:a6:17:1b:1f:1c:a9:66:
d1:49:d1:a0:b2:c6:db:2f:a8:d1:71:9d:b8:5e:3f:37:59:95:
ff:95:4a:fe:05:92:40:cc:09:ef:27:ba:4e:41:38:b9:62:be:
d0:a4:6e:c5:70:7b:f5:b7:aa:63:fc:89:5d:2e:ec:9f:0e:d8:
9f:83:33:4c:d8:e9:17:d2:9e:f3:57:74:c3:b6:a4:24:ee:c8:
6d:16:b9:8d:04:7e:66:48:2c:43:9e:ba:af:a1:5f:d1:5a:95:
26:ee:78:4e:e1:33:f4:35:26:14:ef:a1:8a:d7:be:bd:91:10:
93:4d:87:b7:ce:e5:a3:03:b4:34:b4:bf:9f:89:ba:39:fc:23:
6c:c9:92:7d:b8:a2:61:59:e6:3a:33:57:8b:eb:0c:dd:5e:e9:
88:23:2f:ed:86:5c:d9:5b:f9:a1:5f:5a:f8:10:2a:7b:a9:28:
18:a6:0d:e4:c5:66:4e:f3:fb:32:83:76:c7:9a:0b:a6:8d:2d:
82:1d:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:53 2024 by rpki-client on console-fra.rpki-client.org