Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/XuRddUCzvQf8sMVVLUjcQ_tCzqI.roa
File: XuRddUCzvQf8sMVVLUjcQ_tCzqI.roa (raw, json)
Hash identifier: NncEAJcGYZhxkSgCzbzDzWc9fyE0QMnk2oC8LTZIKdQ=
Subject key identifier: 5E:E4:5D:75:40:B3:BD:07:FC:B0:C5:55:2D:48:DC:43:FB:42:CE:A2
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018CC8DF2FB1DFBB13D1788A8406D7E5EDB0
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/XuRddUCzvQf8sMVVLUjcQ_tCzqI.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201415
IP address blocks: 147.234.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2f:b1:df:bb:13:d1:78:8a:84:06:d7:e5:ed:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ee45d7540b3bd07fcb0c5552d48dc43fb42cea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:6e:f9:be:28:86:86:e6:90:28:bb:4b:57:
b4:f4:95:ca:ee:38:59:e1:02:bf:b7:57:06:d0:e5:
cc:7a:76:b3:20:bb:8b:9a:5e:65:98:ed:c5:22:cf:
e9:d3:35:0d:8e:cb:fc:0a:81:19:cf:be:e7:a1:69:
35:d0:54:95:61:27:aa:32:a4:c4:d4:0c:61:12:40:
17:4c:5f:03:b6:6e:08:08:0c:32:c8:09:26:0d:30:
64:8c:ed:5d:14:f7:ef:94:c4:5a:b8:09:79:3a:37:
53:06:11:b9:34:2d:c2:fe:1c:da:64:cd:31:c0:73:
4b:18:fb:22:4f:c2:2f:1b:23:c1:21:fb:5e:6d:6f:
bd:c1:e2:b4:d6:2f:2e:fd:3b:41:54:e1:27:fc:6e:
c6:b0:10:3b:3d:f7:34:5f:fa:b6:aa:84:c2:f6:60:
23:04:2e:fa:bd:49:cb:c0:85:bc:c9:01:1b:c1:bc:
4c:04:fe:03:ce:de:2a:41:f6:44:9e:3a:12:1d:00:
a6:72:1b:b0:ac:b7:8c:e1:b9:ac:a2:ae:26:38:58:
81:6e:94:1b:a5:d0:c6:95:e7:95:7a:43:79:0a:a4:
cd:c3:06:ec:e4:78:2d:6a:c6:f7:2c:05:76:22:03:
b2:a1:9d:43:5b:a4:24:42:b3:2c:4f:4c:ef:01:31:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:5D:75:40:B3:BD:07:FC:B0:C5:55:2D:48:DC:43:FB:42:CE:A2
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/XuRddUCzvQf8sMVVLUjcQ_tCzqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.76.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e3:70:ff:50:be:ef:30:e6:59:81:ac:d5:eb:64:e8:26:4c:
4c:65:d9:15:66:b7:b8:16:3a:3e:e3:de:82:52:b4:b8:e9:dc:
c6:79:d7:66:50:14:93:cb:d3:ce:32:ea:b9:0b:0e:46:a7:69:
96:98:72:73:b3:b5:20:62:2c:73:98:53:e1:d1:1a:56:c4:cb:
61:4f:5a:88:95:f4:dc:e5:81:c4:b4:82:1b:02:1e:e4:e9:fd:
de:df:59:66:f0:2a:43:e7:dc:ba:44:e5:55:18:a4:6f:ca:8f:
a2:8e:a8:74:65:a9:bb:b8:27:cd:74:60:f9:c7:e5:56:8f:fd:
f4:ea:12:57:21:c3:5f:16:0c:a7:6c:44:b4:17:96:61:91:0d:
07:0b:68:f9:a6:7e:f1:30:b6:22:b0:17:73:e2:1d:a9:05:ee:
d6:74:90:6d:54:e8:a4:05:87:e7:99:f4:89:8c:aa:91:2e:68:
51:5e:c1:9d:b4:0c:74:5e:ae:74:cd:46:0a:df:76:3d:9f:6b:
10:4a:6b:23:d4:3e:cc:6b:b1:19:1f:e2:42:47:30:68:be:a4:
2d:93:58:97:5b:6d:11:86:8b:18:29:4e:c9:10:38:6b:be:46:
bc:5e:93:62:f9:9c:ff:4f:95:f0:f4:54:b8:0a:10:d9:63:b6:
8b:dc:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:11 2025 by rpki-client