Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xc_zXSySN5mcAvG0fsK83S9UMx4.roa
File: xc_zXSySN5mcAvG0fsK83S9UMx4.roa (raw, json)
Hash identifier: 6GoB9KVPoSedZYbqRlWHHFtTgAeHDTZddssYMj7bhiw=
Subject key identifier: C5:CF:F3:5D:2C:92:37:99:9C:02:F1:B4:7E:C2:BC:DD:2F:54:33:1E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A7DF9B910B57A6215CD5CDC7AD115D4DC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xc_zXSySN5mcAvG0fsK83S9UMx4.roa
Signing time: Sun 10 Sep 2023 07:23:52 +0000
ROA not before: Sun 10 Sep 2023 07:23:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 89.37.195.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 07:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7d:f9:b9:10:b5:7a:62:15:cd:5c:dc:7a:d1:15:d4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 10 07:23:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5cff35d2c9237999c02f1b47ec2bcdd2f54331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d3:02:39:6f:66:63:fd:a2:f3:42:59:6b:60:
6e:75:7e:d7:ef:00:7c:c4:8b:72:f7:d2:5b:40:83:
da:f0:a3:15:26:6b:90:12:7c:ac:f1:84:5f:c5:31:
f2:13:b4:34:7e:a8:6a:af:af:aa:eb:0a:7a:e1:a3:
3e:e3:95:28:76:0f:f2:56:b3:ee:27:18:f5:7f:b8:
d6:3c:3e:20:02:6b:79:10:83:a1:18:a7:30:4a:78:
e2:e2:18:a3:5e:52:02:c3:11:ea:12:fd:1b:79:97:
21:ed:9b:f6:f7:aa:cc:20:b0:b5:36:da:09:92:b9:
59:8d:25:f2:6b:ac:97:3b:ee:b5:8b:34:ec:af:81:
87:78:1a:b2:f0:64:dd:2f:63:ef:e9:76:1b:72:d9:
af:c5:3b:49:f5:63:f6:f4:45:41:74:48:68:0e:db:
b3:bf:46:d3:14:af:f5:b4:8f:20:a1:c6:48:25:6d:
98:28:bf:b2:b3:a0:67:c8:cd:80:c7:ce:f9:b1:2d:
e3:c2:63:5d:74:96:ec:25:7d:fc:6c:4d:db:d7:12:
91:03:5c:48:0e:fa:09:f4:95:e5:24:02:39:c0:99:
b7:dc:56:a5:79:b0:ba:9e:23:4b:85:26:0f:8f:24:
6f:9d:16:5c:5b:9e:47:e2:20:c5:32:6c:26:32:e0:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:F3:5D:2C:92:37:99:9C:02:F1:B4:7E:C2:BC:DD:2F:54:33:1E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xc_zXSySN5mcAvG0fsK83S9UMx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
89.37.195.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5e:df:77:80:d6:48:33:40:03:59:e5:b8:c5:08:f1:ed:95:
71:3b:01:59:10:6d:07:c0:16:dc:ab:ba:f3:08:18:38:b6:85:
0d:33:3e:4f:61:0c:f3:a1:41:77:82:75:6d:de:d4:b2:ac:34:
cc:5f:64:5b:21:79:16:b7:a6:97:93:33:0e:05:39:02:9b:c8:
15:f3:e7:4e:9e:ff:b3:66:b5:76:0d:71:e9:95:6d:e9:35:a3:
72:07:86:4c:f2:0c:1c:60:71:8c:db:f0:2a:e0:ca:f4:e3:0d:
3e:80:10:be:92:a2:03:cc:9f:49:72:83:ae:7a:87:30:a6:70:
ab:ec:6b:4d:c6:aa:50:15:06:75:1d:39:56:25:fa:a5:92:44:
3d:f9:7d:ad:a6:27:52:19:c3:f1:c2:74:e8:5f:53:cc:c1:61:
6f:58:a7:e9:85:a4:66:93:0e:28:a4:bf:0b:98:44:4b:10:89:
d4:a3:e7:a7:03:13:b3:bb:44:8b:09:cf:7f:ef:98:96:1a:14:
e1:a8:0a:88:81:88:a5:f7:6b:85:61:f0:b1:e0:a9:6d:f2:60:
df:69:39:23:40:d7:bd:d9:c8:eb:f4:fe:90:d9:19:10:48:d2:
10:af:c7:99:92:2c:93:4a:95:f5:97:03:cb:8c:93:05:89:e1:
f0:a0:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org