Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xthsO8D4E-sj4Bb5P5eBLOLdxrM.roa
File: xthsO8D4E-sj4Bb5P5eBLOLdxrM.roa (raw, json)
Hash identifier: mE54PszdbMI0mxj/zdiZKSyJ3NhyAfV8E60fh9gOr8A=
Subject key identifier: C6:D8:6C:3B:C0:F8:13:EB:23:E0:16:F9:3F:97:81:2C:E2:DD:C6:B3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018586C8729C5C773256A714275618D5DF4F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xthsO8D4E-sj4Bb5P5eBLOLdxrM.roa
Signing time: Fri 06 Jan 2023 11:12:41 +0000
ROA not before: Fri 06 Jan 2023 11:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
94.177.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 08:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:c8:72:9c:5c:77:32:56:a7:14:27:56:18:d5:df:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 6 11:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d86c3bc0f813eb23e016f93f97812ce2ddc6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:40:5a:8c:dc:78:68:48:b3:f3:aa:85:4e:
58:ac:a8:4d:24:30:2d:9d:77:dd:73:2c:03:1d:39:
74:a7:1c:07:04:5b:b4:64:88:00:e3:4f:f9:a0:7b:
24:db:ef:62:f6:d2:38:1f:14:b7:0b:96:7f:ea:ba:
97:f9:a5:53:18:e4:f8:f2:b8:ea:16:92:de:1f:15:
9e:d2:f0:b7:e9:cb:c9:32:49:ee:3c:3f:fa:b6:53:
0d:d9:92:b9:2b:2f:9a:80:b3:3d:b4:aa:e9:d8:ec:
1f:c4:27:1d:6b:4f:04:3b:a6:be:88:58:56:29:07:
d3:3a:0e:7c:2b:ff:bf:18:60:ca:c0:b9:38:0f:c1:
c5:31:76:85:b6:2e:c7:68:d6:99:5d:3f:d4:22:81:
68:bb:50:e7:94:5d:22:53:cc:e8:d2:f1:3e:e9:a9:
47:23:4f:f9:5a:d3:85:62:18:15:d4:79:4c:30:76:
89:2d:cf:fc:64:da:14:90:b7:fb:04:96:e0:41:8d:
30:b8:16:95:97:ae:99:20:ba:85:78:60:ef:e2:70:
8e:3d:f9:06:bf:e5:33:0e:fe:db:e4:69:45:7d:da:
75:26:51:f4:32:2f:25:d8:d4:7b:83:bd:58:53:13:
50:05:ce:a9:99:9a:16:50:e2:9e:da:9c:1e:df:40:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:6C:3B:C0:F8:13:EB:23:E0:16:F9:3F:97:81:2C:E2:DD:C6:B3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xthsO8D4E-sj4Bb5P5eBLOLdxrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.150.0/24
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
72:13:fc:f6:c3:7c:c5:d7:95:4b:8b:14:43:52:26:25:e1:3a:
b4:44:ee:70:5e:ba:6c:b6:3b:de:5c:56:c3:df:71:f2:70:0c:
6e:92:b6:78:1c:6c:1d:1e:4c:73:c2:bd:1a:ce:b5:64:53:1a:
5c:55:fb:e3:c9:a0:64:c2:31:5e:31:03:4d:1b:94:c2:b6:0b:
17:d8:91:ec:fe:ab:4f:97:05:59:0f:ad:08:35:ab:8e:64:d3:
a5:00:2f:ef:a9:59:e0:73:d2:40:c9:2f:2a:26:c2:c7:de:30:
d1:d2:48:98:22:92:e0:f0:a1:11:a6:79:60:cb:86:d5:68:6f:
af:cd:df:12:50:d7:7a:97:0b:d9:65:12:44:66:2c:bb:06:c3:
fe:f9:bc:cd:81:16:09:f7:9e:48:4c:85:10:cd:e8:95:f5:35:
76:88:62:63:81:ca:d0:46:d7:89:87:15:0f:f9:28:db:1c:a3:
91:33:e7:7c:7a:18:c5:63:a4:3e:68:e5:de:c2:d8:f7:9f:a3:
97:cf:14:43:c5:5b:b4:db:f2:9a:a6:d0:ed:bf:b7:79:79:65:
6b:89:e5:a5:9c:ce:60:4c:3d:aa:b8:28:06:e3:db:43:ba:f6:
82:8f:d4:34:f9:46:e2:67:25:2f:8b:fc:f3:98:27:95:41:37:
a8:6c:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org