Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/xpZcul6SUcN2bnIFqxyslO0Ts6g.roa
File: xpZcul6SUcN2bnIFqxyslO0Ts6g.roa (raw, json)
Hash identifier: g63anS30JYPrl/yntP4PQFLX0Zl4AX7t2ydnvpqyr/c=
Subject key identifier: C6:96:5C:BA:5E:92:51:C3:76:6E:72:05:AB:1C:AC:94:ED:13:B3:A8
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 018572033E9453A8AFC39DE24F719E2F7229
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/xpZcul6SUcN2bnIFqxyslO0Ts6g.roa
Signing time: Mon 02 Jan 2023 10:24:53 +0000
ROA not before: Mon 02 Jan 2023 10:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9211
IP address blocks: 195.242.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:3e:94:53:a8:af:c3:9d:e2:4f:71:9e:2f:72:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 2 10:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6965cba5e9251c3766e7205ab1cac94ed13b3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:9f:a5:89:00:98:c3:5c:c6:76:51:99:45:
3c:ba:9e:93:10:a1:e4:bb:9b:77:6b:69:06:a2:79:
44:0f:86:ab:47:0c:aa:70:00:2a:f5:30:de:2a:5d:
e6:9d:18:3a:c1:57:2b:70:0e:38:ac:45:69:cf:df:
cc:ac:07:0e:8a:19:6b:06:5b:85:61:1a:92:ed:2b:
68:62:f1:6e:5d:f6:57:fe:c5:5a:1f:67:51:98:55:
e7:9e:a6:90:0c:3c:5b:93:3f:23:82:66:62:d6:c9:
01:21:11:be:66:c9:67:e5:bf:b0:93:f5:e8:76:8c:
04:cb:f9:ef:50:11:6d:15:80:cf:98:ad:01:f1:fe:
99:db:af:dc:d2:32:08:a6:57:05:d4:b0:b3:d7:50:
e3:81:ac:12:6e:66:1a:55:50:33:29:fd:a5:24:9c:
e1:30:57:cf:ad:99:c2:ea:6d:f7:0e:1b:05:bb:e7:
a5:49:a7:3d:d0:47:2c:fa:39:53:db:e9:0c:c1:42:
19:c8:9e:8c:29:31:75:67:5d:2f:73:07:0c:72:68:
a1:72:7d:8a:c6:fa:34:7c:1c:e0:2a:53:37:a4:52:
83:94:4f:c7:0a:0d:32:5e:66:3d:31:7b:c9:3e:4d:
01:a2:9a:f1:86:01:54:e2:6c:03:88:cf:da:5b:b5:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:5C:BA:5E:92:51:C3:76:6E:72:05:AB:1C:AC:94:ED:13:B3:A8
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/xpZcul6SUcN2bnIFqxyslO0Ts6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
95:72:92:21:0e:98:fb:78:53:6b:52:35:6f:0a:44:05:6f:83:
ba:fc:21:49:75:25:af:36:90:5e:a7:35:85:ff:5d:0c:31:e6:
5b:81:76:f9:3a:e4:71:f2:c1:4c:dd:36:ee:f9:30:4d:42:aa:
e6:61:f6:4f:fb:37:33:75:f9:87:38:4c:9e:56:48:28:51:13:
20:e6:8d:99:ed:73:43:71:91:33:97:a9:6a:38:6f:be:9a:12:
d2:07:c1:cb:55:e1:02:6f:aa:91:66:e5:32:81:8e:5e:54:62:
65:f8:8d:55:10:9b:2a:da:cf:0e:92:ee:b9:95:cf:ea:13:94:
8e:53:ec:99:a4:7a:1d:fb:8e:df:6e:20:ba:b5:15:9f:b9:dc:
fc:91:60:88:68:bc:86:fe:f4:54:69:66:3b:c8:99:bb:7f:a7:
e2:d1:d8:fd:c1:6a:66:a4:d4:cd:6a:2b:6a:dd:37:a3:d2:96:
a6:fe:9a:03:06:bf:bf:44:76:27:fd:49:f3:2a:30:ae:56:96:
02:ec:26:bb:ac:a0:94:63:a8:7f:3c:ba:e2:13:47:58:f2:0b:
9a:22:d0:25:18:fe:4a:b6:f5:46:80:87:c7:0c:0e:5a:b6:5e:
99:c6:b3:45:19:3b:88:98:af:fb:ba:03:fb:dc:70:38:b3:76:
12:2e:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:30 2024 by rpki-client on console-ams.rpki-client.org