Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xnLWRjz8QJFKSB-4Yr_vDG5EQvo.roa
File: xnLWRjz8QJFKSB-4Yr_vDG5EQvo.roa (raw, json)
Hash identifier: vFHQj7bzOM+hCE8o3ouXpIBu2eJgrXfh2Il+PJg3h5k=
Subject key identifier: C6:72:D6:46:3C:FC:40:91:4A:48:1F:B8:62:BF:EF:0C:6E:44:42:FA
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018872BA2FB5F4958DBA9188D883DA0954FD
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xnLWRjz8QJFKSB-4Yr_vDG5EQvo.roa
Signing time: Wed 31 May 2023 16:53:04 +0000
ROA not before: Wed 31 May 2023 16:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 64.137.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 15:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:ba:2f:b5:f4:95:8d:ba:91:88:d8:83:da:09:54:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 31 16:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c672d6463cfc40914a481fb862bfef0c6e4442fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:60:21:45:7e:d3:54:4b:48:33:f8:0c:f6:e1:
25:f8:22:03:c3:6f:f4:24:04:5a:75:31:85:43:44:
19:82:d9:ab:b8:01:6a:7e:dc:3f:0c:65:a7:d4:49:
16:7e:30:01:0e:9c:fd:00:a3:25:5a:35:20:5f:57:
9f:9f:5d:d8:a7:75:e1:8a:5e:fa:e4:fc:32:26:35:
10:69:ad:62:f3:1c:00:0e:a3:65:30:f8:7a:7e:28:
3f:bb:3c:77:40:aa:ac:f9:83:7b:90:b1:a1:24:6a:
3e:9c:c3:f4:85:c7:ec:a4:25:7f:14:b5:3e:79:3a:
b1:1d:e3:9f:58:0d:ef:3e:27:ec:67:46:12:ae:8f:
e3:75:76:5b:6c:a5:69:e9:d9:bb:68:f6:41:f6:23:
3c:1c:72:23:df:df:5e:e8:07:9b:71:6f:d1:d3:8f:
25:02:82:48:10:05:2e:47:69:57:e3:96:8a:1e:a8:
56:e1:82:f0:d9:26:23:94:df:b2:f8:12:a3:08:5b:
61:9f:04:6b:b3:c8:2f:a4:66:1c:13:28:87:7b:26:
1e:d7:13:5d:97:0e:2f:df:ff:1f:74:1c:93:df:11:
04:2d:7f:79:9f:63:27:39:ab:9f:a5:ca:40:4c:b8:
b9:ac:67:68:77:7f:1b:d6:b9:c8:0a:b7:cd:87:be:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:D6:46:3C:FC:40:91:4A:48:1F:B8:62:BF:EF:0C:6E:44:42:FA
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xnLWRjz8QJFKSB-4Yr_vDG5EQvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.51.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1b:db:91:3c:3e:4a:3e:63:36:6f:0a:49:80:97:c0:c5:25:
60:e7:33:86:23:d0:15:c4:08:20:33:3f:2e:4a:e2:8f:0e:61:
4d:2d:8d:40:8a:88:d5:a5:29:9f:77:0a:42:a3:47:32:4b:06:
bc:57:a0:b3:04:c4:ff:6d:db:63:92:5e:f6:5d:51:45:b0:3c:
53:b1:c5:d7:8f:a6:5d:6f:aa:f3:ee:bc:3f:6e:45:74:f6:f9:
ee:42:cb:0a:55:07:a0:46:22:5e:3f:cc:d3:f1:01:14:79:77:
9b:ec:fd:cb:81:6c:70:e1:fc:48:ed:9b:b1:90:92:74:b0:24:
e9:a5:b4:5a:a8:0b:48:f1:ce:ca:95:81:52:02:cb:d0:0c:10:
a1:a7:f5:17:50:b0:75:28:23:f8:36:87:11:9b:0c:e9:da:9c:
23:c2:ed:0a:9f:48:33:38:99:9f:93:25:4b:08:5e:af:dd:e3:
2b:d2:56:8c:06:fd:73:3e:31:3c:cd:fb:df:97:ed:35:5f:03:
d7:97:c8:fd:39:a6:c0:c1:a6:6f:e1:b8:aa:73:46:ad:45:2d:
c3:f1:93:cb:02:67:23:c3:a8:80:92:d0:9d:d9:13:58:d2:40:
85:34:72:82:04:67:05:17:bc:56:ba:22:bb:3b:96:bf:de:8e:
f1:c4:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:03 2024 by rpki-client on console-fra.rpki-client.org