Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/X3wZJSEp1Izp4eL234kdxoCET_4.roa
File: X3wZJSEp1Izp4eL234kdxoCET_4.roa (raw, json)
Hash identifier: eVBJucwxvNDb6yCKzpxd5qT+xFR2hOb4Dk34il7pO1E=
Subject key identifier: 5F:7C:19:25:21:29:D4:8C:E9:E1:E2:F6:DF:89:1D:C6:80:84:4F:FE
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01888F94C68085B3D09412BBCF28AC9F6BE4
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/X3wZJSEp1Izp4eL234kdxoCET_4.roa
Signing time: Tue 06 Jun 2023 07:21:11 +0000
ROA not before: Tue 06 Jun 2023 07:21:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 14:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:94:c6:80:85:b3:d0:94:12:bb:cf:28:ac:9f:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 6 07:21:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7c19252129d48ce9e1e2f6df891dc680844ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ae:23:08:ca:0a:a1:fa:0b:41:9b:bb:56:18:
87:a7:6a:f9:46:2e:a9:55:27:f7:b3:30:8a:0b:0d:
e4:c6:54:97:64:2f:0d:c1:72:50:20:6e:6e:06:0c:
60:28:28:93:7a:05:28:5f:71:06:2a:84:db:15:6d:
59:70:fc:7b:5b:5a:76:74:0b:59:98:31:6b:d2:b0:
09:f9:a2:57:74:70:b3:20:f2:8f:5e:50:c9:91:18:
87:7e:61:c9:b0:be:12:2e:3e:d1:bf:9c:b4:a1:40:
0e:53:0e:89:51:53:37:69:dc:5c:f1:7f:16:37:b0:
ca:11:fd:32:9f:50:eb:03:73:2b:98:1e:2f:dd:f8:
a0:94:ef:4e:db:ea:45:2e:3e:29:56:90:2d:c5:e7:
11:81:4e:cd:2f:09:b0:d8:71:57:fc:90:a7:ef:db:
8a:02:69:00:f7:4c:ea:14:e5:6f:14:b5:ea:75:6e:
44:29:94:3b:6e:e6:a9:64:3a:9c:01:3f:4c:87:fd:
cd:e2:60:91:78:6a:5d:f4:23:97:3b:59:29:03:c6:
c3:5e:2b:e9:93:cb:55:fb:ca:35:45:9b:66:1a:a6:
54:e7:4b:bd:10:74:8c:73:cb:c0:8e:5f:35:a9:27:
fb:c0:b9:36:af:90:84:12:d6:a3:c5:1f:54:11:90:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7C:19:25:21:29:D4:8C:E9:E1:E2:F6:DF:89:1D:C6:80:84:4F:FE
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/X3wZJSEp1Izp4eL234kdxoCET_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7a:a8:b1:d6:20:4c:7f:f6:91:b0:aa:67:96:aa:16:ec:1f:
fb:04:de:2d:30:64:cd:c4:21:0d:56:43:a3:7d:49:fd:ba:14:
b4:8e:a6:dd:1c:5f:14:b7:40:51:f7:06:b1:be:68:e6:8c:87:
d0:d5:ec:00:09:5f:58:a8:cf:a1:18:f8:9f:21:47:8c:c0:c4:
72:fd:7d:d7:6a:5e:37:4c:1b:cf:29:d4:08:b1:e4:95:7f:f9:
7e:a4:43:b4:e6:4d:0a:69:13:0e:3b:1b:fd:11:d7:7b:78:cb:
49:5d:e2:00:be:4a:02:0f:44:56:1c:81:65:9d:aa:05:7e:9d:
ed:75:15:09:86:43:0b:8a:bb:6b:af:f0:72:9d:67:01:31:b3:
72:32:91:25:f4:f2:53:af:f5:b5:7b:1f:5f:7e:19:fe:5c:4a:
89:d5:9f:c9:96:63:74:c9:73:f4:87:5d:45:6b:4e:48:55:69:
36:4a:09:bf:e4:ac:bb:4e:b0:df:4a:6e:34:c1:1e:94:20:fb:
5d:f4:64:40:97:9b:2c:62:9b:7c:64:78:a5:33:b8:6c:4e:e8:
3f:7f:c5:b0:15:cc:2e:69:21:9c:9d:67:83:6b:1d:65:b1:9d:
1a:17:c4:17:1d:36:5d:d7:5e:59:77:eb:b5:f4:4c:34:9d:03:
e6:8f:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org