Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/XOxBLT2DDhQYiyB_Ndj-KN6frUs.roa
File: XOxBLT2DDhQYiyB_Ndj-KN6frUs.roa (raw, json)
Hash identifier: /WyZ52PR9sYTugaoZYhxA2YyyiH5YJKZo0eANetL6qY=
Subject key identifier: 5C:EC:41:2D:3D:83:0E:14:18:8B:20:7F:35:D8:FE:28:DE:9F:AD:4B
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01856F4B64D6390B5869B8FFF2CE14643646
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/XOxBLT2DDhQYiyB_Ndj-KN6frUs.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48806
IP address blocks: 80.94.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:64:d6:39:0b:58:69:b8:ff:f2:ce:14:64:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cec412d3d830e14188b207f35d8fe28de9fad4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:cd:31:b5:e9:3d:89:dc:cd:c8:a3:7f:35:
c6:f5:50:82:86:fd:4d:ac:11:10:b8:e7:0b:de:d7:
64:bf:35:ab:ab:b2:57:c5:e9:6c:e6:fa:2d:60:cf:
7d:3b:9a:73:c2:c0:34:5c:ef:7c:69:aa:6a:30:3c:
c3:83:85:fe:be:3f:9c:bc:25:3c:44:92:e2:33:68:
c4:dd:ed:fb:ce:20:8f:39:85:81:1f:ff:f6:91:1c:
18:1a:61:3e:db:6a:d1:84:b8:b5:98:c2:26:c6:10:
2d:95:d8:d9:c6:66:b5:7d:79:67:d5:6f:5c:1f:e1:
58:ca:3f:8e:9b:0b:cc:f1:b6:1f:f0:2d:25:ab:11:
7c:65:0c:0c:c1:c6:fe:10:18:85:b6:5d:79:e2:69:
00:c7:7d:d3:06:34:62:ec:ea:76:b6:82:bf:80:6f:
a0:b2:f7:87:17:fb:24:56:78:63:3a:30:1c:56:72:
8f:e8:23:51:b7:ea:c1:6e:bd:44:f2:bf:80:2c:47:
45:90:f3:d7:54:0d:a9:8b:b8:41:22:2c:0a:36:a9:
e3:e1:97:37:da:41:f3:28:bb:5c:5d:17:6e:25:fe:
03:ee:93:2f:92:40:45:80:39:bf:c2:2f:bb:65:fd:
09:8b:d9:e3:aa:40:9a:82:39:db:61:90:de:10:3f:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:41:2D:3D:83:0E:14:18:8B:20:7F:35:D8:FE:28:DE:9F:AD:4B
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/XOxBLT2DDhQYiyB_Ndj-KN6frUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:21:9d:35:6e:00:17:a5:99:1e:25:2b:4a:3a:cb:67:d3:3c:
10:83:82:1c:71:09:77:ed:9d:1d:50:fe:60:c9:86:64:ab:29:
30:6f:19:97:99:78:6d:74:79:cd:51:14:ad:b6:94:3f:5a:1b:
ac:62:4e:22:f8:66:68:ff:24:20:1b:a5:7d:90:b6:0b:2d:84:
d3:4a:6c:d9:b7:20:d6:cd:83:27:f0:fd:d6:53:31:23:28:0b:
57:e4:76:39:39:62:97:f8:b5:37:10:90:21:0f:27:1d:33:22:
fa:c4:1f:91:50:04:7c:d5:32:61:4a:95:4d:a5:df:c9:61:c3:
bb:80:d6:7f:ca:34:4a:1b:78:68:0e:81:af:7e:74:9c:4c:80:
ee:45:40:89:35:83:84:18:a0:f3:12:f0:cb:26:57:36:5f:1a:
11:46:9c:fa:6a:ee:8f:ed:d2:ed:90:70:b7:bb:0c:b1:42:30:
41:ac:3c:a7:3c:04:20:f4:e9:4c:3e:e0:9b:21:ce:8a:7f:ce:
7c:6c:79:a8:49:ec:aa:d3:aa:c8:87:7b:d1:ea:c1:3c:a0:16:
8c:b7:d1:a1:77:3f:d6:44:9c:84:e4:3c:a5:a2:df:d4:7c:93:
bb:20:a8:23:81:2d:ee:01:f5:3d:c8:45:36:65:f3:94:df:87:
62:d7:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org