Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/XrBq3iTO5-iDXueqfSGSvcPBZTY.roa
File: XrBq3iTO5-iDXueqfSGSvcPBZTY.roa (raw, json)
Hash identifier: zC3cw/vjmEbDFjlRbiou9Dw5nC41KwyCtt/tptsrMVo=
Subject key identifier: 5E:B0:6A:DE:24:CE:E7:E8:83:5E:E7:AA:7D:21:92:BD:C3:C1:65:36
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 018ADBC938FA5253484CA39BFC9D38AE8E0E
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/XrBq3iTO5-iDXueqfSGSvcPBZTY.roa
Signing time: Thu 28 Sep 2023 12:35:12 +0000
ROA not before: Thu 28 Sep 2023 12:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:c9:38:fa:52:53:48:4c:a3:9b:fc:9d:38:ae:8e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Sep 28 12:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5eb06ade24cee7e8835ee7aa7d2192bdc3c16536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:fb:5e:7f:9e:28:01:3c:37:20:a8:be:1f:
48:af:52:b1:60:53:33:8a:89:5a:08:12:b5:c4:6f:
46:04:43:df:f9:93:99:50:0c:3c:6d:54:b6:89:82:
78:4d:73:50:17:e6:91:a4:a1:f2:3d:48:1b:17:0b:
70:65:01:8c:52:f9:60:14:91:1c:aa:01:89:18:1c:
24:db:c2:38:6c:f9:7b:c8:b5:5e:4c:9e:53:42:10:
13:5e:66:c5:0f:cf:90:37:65:b6:27:9a:dc:e9:49:
b9:a5:9c:7f:b2:64:cb:9b:d1:00:a6:e9:b1:a9:85:
f3:bb:13:10:c1:21:0b:fe:7d:7b:40:40:61:d3:12:
d3:1b:71:a9:97:e6:30:08:6f:83:cf:85:69:29:e2:
19:08:af:dd:c0:ad:2e:19:41:84:93:88:68:4b:9f:
76:ce:e0:20:1d:00:6b:07:2f:c3:b5:e1:57:47:e3:
1b:16:e1:8d:b1:ca:36:b2:b3:96:fd:c8:7c:a9:4d:
74:ef:7a:6c:49:33:0f:72:aa:a4:3c:99:e2:41:a3:
01:91:de:15:8e:be:4a:01:3f:f4:0c:5b:d7:87:a4:
72:2d:f4:71:e3:36:6a:d2:80:a2:7b:cf:1e:28:f6:
e7:24:b2:48:eb:20:52:d4:a9:be:04:75:5e:9f:cd:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B0:6A:DE:24:CE:E7:E8:83:5E:E7:AA:7D:21:92:BD:C3:C1:65:36
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/XrBq3iTO5-iDXueqfSGSvcPBZTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
Signature Algorithm: sha256WithRSAEncryption
25:94:c7:f1:3d:df:5d:9e:e9:b9:e6:14:9f:ad:19:98:2d:f0:
03:7c:a4:1f:a6:84:ef:19:27:58:b2:81:52:af:9f:59:83:9b:
9f:ec:ce:0b:e8:cb:97:e3:ca:d1:bf:7e:bb:4f:7a:bb:e6:d4:
08:23:b1:02:f8:3d:5b:23:5f:1f:eb:0d:05:a8:b6:98:81:ea:
a5:5e:ed:0b:47:b8:3d:ae:90:3c:8e:35:74:ea:35:01:7e:85:
9b:f3:ba:1c:c9:bc:15:20:e9:9d:fc:b1:a6:a5:07:aa:6e:75:
a8:ce:e8:18:46:f3:71:ab:ea:96:0a:ac:34:89:4b:fc:05:09:
25:8f:f2:b6:f3:e7:1e:02:92:95:9a:26:97:76:43:10:93:bb:
00:3f:05:02:bf:6d:61:86:44:9d:ba:d3:b9:8a:51:fb:ac:33:
92:9c:6f:98:41:5e:34:17:a2:15:f5:64:03:5c:d6:6d:99:45:
fc:5b:2b:44:31:de:65:4a:7a:92:58:bf:bb:c6:d5:26:25:50:
d8:11:24:7c:b8:9c:4f:9c:6a:67:ca:c4:ac:2c:a9:8d:35:33:
c6:dc:5a:4a:26:81:08:3b:64:e0:17:4f:6b:e6:43:24:09:be:
cc:c0:c8:ad:c9:ce:24:4a:37:42:35:10:e9:0d:95:37:cb:37:
c3:85:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org