Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XPiLzHXqqEApXqkrkMlLzMCwwE4.roa
File: XPiLzHXqqEApXqkrkMlLzMCwwE4.roa (raw, json)
Hash identifier: O9IwPVXJAEK9/97PhjPqaoqDvGBYNqPMokWXwgy0GfU=
Subject key identifier: 5C:F8:8B:CC:75:EA:A8:40:29:5E:A9:2B:90:C9:4B:CC:C0:B0:C0:4E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F0B75ED174806B3B1D99F463E7607C978
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XPiLzHXqqEApXqkrkMlLzMCwwE4.roa
Signing time: Tue 23 Apr 2024 14:57:08 +0000
ROA not before: Tue 23 Apr 2024 14:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215605
IP address blocks: 86.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 14:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:75:ed:17:48:06:b3:b1:d9:9f:46:3e:76:07:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 23 14:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cf88bcc75eaa840295ea92b90c94bccc0b0c04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:cd:81:23:20:98:ae:88:76:56:3c:81:f0:
84:9a:a1:dd:c6:df:48:39:28:17:61:08:8b:17:2e:
f4:c8:89:06:fd:4f:ac:eb:fa:32:e6:b1:58:f1:4b:
28:42:36:f2:80:2c:d5:5a:fb:ec:68:ba:2e:58:ed:
04:f9:0a:57:1d:5c:bf:c2:f6:ea:a2:e8:09:e8:8e:
e2:00:6f:d4:56:ab:45:47:5e:04:e1:5e:68:5f:79:
b7:28:a6:8e:9f:d2:46:e6:85:9c:2e:f9:bd:18:7a:
dc:6f:bc:55:60:b2:02:56:0c:a2:df:59:cd:71:6d:
0b:e7:85:af:f2:ba:9f:c4:4f:f5:98:e4:b6:58:b3:
71:42:f5:45:71:69:8f:24:35:66:53:bf:40:e1:bc:
8c:08:09:e6:57:a9:70:ca:7c:13:33:08:69:24:e2:
20:23:48:66:be:86:8a:a7:9e:50:49:2d:53:43:e0:
05:9c:03:85:88:dc:92:e9:43:61:17:46:c6:ed:db:
c1:c2:f7:b4:6f:3c:19:2b:ff:7c:a3:7c:91:09:c5:
0e:1e:d6:78:c5:77:24:56:33:2d:ef:50:0c:9e:ba:
77:f1:27:f1:49:0d:79:e8:7c:0f:a5:9c:c8:50:a0:
10:ae:df:33:a5:87:b8:65:65:15:84:2c:f5:df:f9:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:8B:CC:75:EA:A8:40:29:5E:A9:2B:90:C9:4B:CC:C0:B0:C0:4E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XPiLzHXqqEApXqkrkMlLzMCwwE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
57:27:88:c9:33:c8:f7:d7:af:e5:49:8c:a4:50:7c:d5:a0:f1:
4a:fe:2b:84:4f:e1:76:3e:0f:26:9b:af:c9:42:da:38:37:ff:
43:6c:2b:2f:a2:ad:86:1f:26:58:a3:ea:8d:8b:7b:34:1c:3f:
5d:50:8e:5e:36:da:2e:f8:48:f7:66:26:da:3a:e4:97:3e:d0:
4d:04:19:96:45:cf:e8:fb:12:68:6b:3d:30:b5:3a:7d:89:e6:
82:90:73:b8:3a:3b:f8:35:b3:cb:5a:68:b5:50:d5:22:d9:41:
d4:e0:f4:1f:cc:e7:82:ad:3a:af:bd:7d:ed:79:2a:bf:40:17:
bb:68:79:2c:ad:f1:e3:09:e6:28:31:a2:e5:ca:7e:2e:e5:7e:
54:ab:10:46:a3:67:36:3d:83:a6:4b:cb:ef:12:14:81:1b:2a:
07:66:b9:d3:6e:c2:6c:72:06:2d:72:28:50:1b:12:7e:61:15:
1f:ea:c8:ca:a8:b5:3f:84:01:46:69:fe:3b:3f:b8:d8:9b:34:
16:6b:44:07:8b:37:b8:41:ea:5b:31:32:d0:b7:45:9a:78:69:
11:8b:db:68:a9:a9:a7:0a:16:be:ba:7d:7b:08:db:75:c1:3c:
45:9a:0e:27:d5:6a:ad:e4:f2:cf:03:8c:63:57:68:de:3d:3d:
23:31:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org