Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xw_xsyYI_beULvnww01YnMJk5DE.roa
File: xw_xsyYI_beULvnww01YnMJk5DE.roa (raw, json)
Hash identifier: BWihnjneGLL9Hkycn0G1wcRfNqnnTC7uEMa1Ky8v02Y=
Subject key identifier: C7:0F:F1:B3:26:08:FD:B7:94:2E:F9:F0:C3:4D:58:9C:C2:64:E4:31
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01859A7779B1D1C105DB5F399139C95DD208
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xw_xsyYI_beULvnww01YnMJk5DE.roa
Signing time: Tue 10 Jan 2023 06:56:39 +0000
ROA not before: Tue 10 Jan 2023 06:56:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.90.0/23 maxlen: 24
88.216.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 07:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:77:79:b1:d1:c1:05:db:5f:39:91:39:c9:5d:d2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 10 06:56:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c70ff1b32608fdb7942ef9f0c34d589cc264e431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:31:fb:22:a8:2b:9d:35:e6:4c:37:9d:0f:
85:74:b9:b7:0c:75:d6:1a:8a:b3:44:7f:36:cf:87:
90:db:cb:3d:02:69:ff:45:04:49:f2:71:94:aa:dc:
35:32:eb:ee:d2:b0:69:9d:28:0a:74:41:91:de:7a:
39:c3:9f:31:29:73:3b:57:84:ce:1c:32:3c:60:d7:
d3:3e:7d:58:04:23:23:ab:f3:60:2e:73:2a:e4:54:
23:44:b4:00:11:44:78:f1:9a:c3:17:89:e5:ec:ce:
5e:96:63:00:8d:e4:3e:34:ae:cd:b9:14:74:e5:06:
85:96:97:f8:52:5e:d6:13:08:50:4f:e1:72:79:73:
8a:2d:bc:ee:62:ce:ab:5b:cc:f7:4b:2e:20:4c:40:
c4:8c:eb:c3:e4:90:fa:bc:e3:10:d5:62:bb:7f:e0:
f4:4e:b1:84:2a:d4:fc:65:ce:eb:c8:ee:b6:5e:03:
c8:bf:40:0c:79:df:fb:e1:92:ee:08:bf:b9:bf:ad:
df:a9:8b:5d:48:4c:55:b3:fd:33:df:62:be:44:40:
5c:e7:83:41:b2:2e:8e:8b:e1:b0:cd:09:cc:e7:d9:
ea:08:30:b0:3e:85:be:f1:71:e7:64:e5:e7:d5:2e:
e3:7f:cc:89:a2:ff:95:92:85:5b:e4:dc:95:e7:ac:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0F:F1:B3:26:08:FD:B7:94:2E:F9:F0:C3:4D:58:9C:C2:64:E4:31
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xw_xsyYI_beULvnww01YnMJk5DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.90.0/23
88.216.135.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5f:cc:48:c9:44:9a:13:d2:6f:9b:af:f4:18:44:71:b7:f8:
72:61:0d:4f:21:4b:a5:b8:6e:97:7a:22:bd:72:a5:d6:5b:6c:
ee:56:42:82:21:1c:7d:5c:7e:c2:7d:15:cc:45:cd:37:ac:03:
a1:5e:04:b3:aa:ad:23:25:e8:44:86:e4:f5:00:fb:3f:91:d9:
0a:d4:50:6d:5e:5c:2f:8f:ec:18:6b:ae:a5:ca:b7:20:68:57:
16:49:99:1f:19:2b:26:f5:fa:64:f9:52:14:dd:c2:53:54:5e:
bd:ca:6c:f6:b1:ce:62:8f:9b:7e:6e:da:fc:1b:45:e4:3c:e8:
41:69:85:2e:3b:c8:98:5f:f6:6e:e8:c3:ba:71:01:cc:52:07:
72:48:ac:41:46:3c:e7:07:f9:0f:9e:d4:77:cf:b8:0e:c0:67:
85:d3:f1:06:38:d9:e1:fe:4a:ee:20:79:33:31:a0:1c:5c:11:
24:49:db:3b:9f:eb:54:85:e7:40:7f:b9:9f:d4:5d:50:90:ff:
8d:31:fd:00:0f:7a:d4:e6:bf:8f:3c:58:aa:f0:d4:1e:4c:3d:
bb:16:6b:85:d9:97:57:ff:d1:9d:78:da:3c:b2:df:37:f8:63:
e6:d6:31:77:92:fa:cf:30:92:90:e4:13:2f:29:bc:1c:53:75:
03:b3:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org