Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/SXnxftRGEmFc-0D-JXMwfoklenE.roa
File: SXnxftRGEmFc-0D-JXMwfoklenE.roa (raw, json)
Hash identifier: /wAJ+KV6AK1o768f6GuVYHPeY3PoFOCSRUoKisEZmSw=
Subject key identifier: 49:79:F1:7E:D4:46:12:61:5C:FB:40:FE:25:73:30:7E:89:25:7A:71
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 018B22F9D0A67FC6F79A98A0F8FAC4FA43A1
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/SXnxftRGEmFc-0D-JXMwfoklenE.roa
Signing time: Thu 12 Oct 2023 08:21:19 +0000
ROA not before: Thu 12 Oct 2023 08:21:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43558
IP address blocks: 87.239.120.0/24 maxlen: 24
2001:678:a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:f9:d0:a6:7f:c6:f7:9a:98:a0:f8:fa:c4:fa:43:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Oct 12 08:21:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4979f17ed44612615cfb40fe2573307e89257a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:d4:d8:44:a2:df:b5:c5:42:3a:25:fc:52:
ca:86:a0:3d:bc:bc:6f:f5:b1:1d:df:27:6a:7a:ef:
b5:b6:ae:48:c1:40:cc:5d:0e:3e:9e:29:8c:fb:e1:
67:47:b2:02:a5:c5:ac:b0:bb:cc:ae:ca:97:da:92:
8d:ad:bc:5a:5c:70:a7:a9:35:17:45:21:48:57:a7:
a8:08:f4:f9:f9:b4:39:af:c3:f1:3f:47:3b:d8:e0:
fb:97:06:0d:55:31:01:59:39:0f:99:31:78:58:4d:
dc:03:44:19:c6:35:d5:54:0b:06:b3:b3:dd:d4:3a:
f8:16:71:6f:27:7b:d1:86:9b:76:e4:1c:0b:28:bd:
d1:ce:b3:9f:2c:34:0c:85:2a:ed:01:54:5c:d4:4b:
38:06:9c:b2:fd:f8:2b:bd:31:2d:21:43:12:ab:f4:
4d:90:4a:14:ce:0d:d6:97:bc:bd:79:46:d0:39:31:
a1:00:97:cc:7d:ff:22:0e:eb:03:9b:f4:8c:f6:24:
a6:45:3d:ca:98:13:eb:8a:5c:98:f8:e9:58:aa:b4:
c2:df:fb:0e:05:88:5a:2b:b9:ee:b1:0e:b3:10:7d:
40:d4:85:42:e0:4b:78:a8:e8:fc:5c:f2:c6:69:62:
d4:a4:15:96:23:8d:99:5a:5c:c6:a2:10:56:bd:c2:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:F1:7E:D4:46:12:61:5C:FB:40:FE:25:73:30:7E:89:25:7A:71
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/SXnxftRGEmFc-0D-JXMwfoklenE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.120.0/24
IPv6:
2001:678:a0::/48
Signature Algorithm: sha256WithRSAEncryption
45:02:06:a4:77:28:f5:8c:6f:55:a1:42:82:dc:c2:a7:24:20:
b1:f8:9b:48:e6:7c:41:6f:19:89:b1:6f:08:49:df:f1:c8:d9:
94:2e:59:37:24:48:aa:43:85:b8:d4:02:e9:c2:c6:6d:87:f7:
36:72:3c:09:b5:1d:8d:6d:5d:c6:35:e7:11:34:0c:5e:11:52:
33:2a:3a:e1:eb:74:2d:13:88:0b:73:f8:4d:10:d0:41:d1:bd:
1b:03:05:eb:e8:d1:6d:51:4f:3c:ff:9d:64:1f:81:2d:e6:10:
12:48:4b:c0:a7:7c:18:17:32:67:93:9f:e7:84:02:1a:81:f3:
05:9e:fc:c3:6e:68:38:65:25:2f:f9:c5:2e:a0:b0:86:23:34:
b1:e6:86:e9:cf:2c:6f:29:fa:79:ca:e2:1a:ab:b1:af:71:73:
46:3d:ab:f6:cf:50:3e:83:45:c2:6e:f0:04:b1:ca:a7:2f:83:
9a:20:57:24:b1:0d:99:78:36:ea:d5:b3:bf:1b:4a:9a:90:81:
ab:e5:d3:aa:db:4f:68:d5:2b:50:7e:23:9f:6d:aa:b5:1b:b4:
ab:36:41:15:88:c0:ed:ae:78:e9:ee:4a:f9:f7:83:e0:da:18:
62:fc:31:33:77:58:c1:d4:16:50:a3:f5:e6:00:e0:28:d5:db:
af:4d:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:38 2024 by rpki-client on console-ams.rpki-client.org