Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/XRIHIKSwsm4aWMGZH1lOG8PId4I.roa
File: XRIHIKSwsm4aWMGZH1lOG8PId4I.roa (raw, json)
Hash identifier: T/XAUoEnHMXk/pZB5Z3jTXWrAgrfY0m34Cp8cldf29I=
Subject key identifier: 5D:12:07:20:A4:B0:B2:6E:1A:58:C1:99:1F:59:4E:1B:C3:C8:77:82
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DB931493399971175C854F328C1C6
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/XRIHIKSwsm4aWMGZH1lOG8PId4I.roa
Signing time: Sun 01 Jan 2023 23:14:45 +0000
ROA not before: Sun 01 Jan 2023 23:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16135
IP address blocks: 176.88.56.0/24 maxlen: 24
212.252.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b9:31:49:33:99:97:11:75:c8:54:f3:28:c1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d120720a4b0b26e1a58c1991f594e1bc3c87782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:fe:04:ee:59:94:20:45:2c:12:3f:a2:01:
8b:03:9a:06:a3:0b:de:d9:35:ad:47:4b:94:ac:75:
d6:af:74:3d:47:43:54:2e:71:a7:c5:c8:e8:4e:d3:
6d:bb:c1:35:a3:77:73:9b:1e:ee:ed:35:63:55:3d:
c7:74:71:b4:3e:51:14:a3:e3:67:3b:99:d0:7b:43:
f7:ae:15:3a:4c:59:a8:8b:a5:b8:27:3f:8f:81:fa:
65:57:93:83:7c:29:5f:6c:0f:00:77:c2:dd:0c:92:
dc:42:65:03:a1:f7:af:07:ad:89:2c:27:f2:11:67:
2e:2a:1e:6c:b7:ce:73:c7:f5:87:f3:b1:76:12:41:
07:d2:10:da:ca:7c:38:aa:9d:f6:ad:ec:b2:bd:c4:
d1:34:76:55:eb:dc:78:5a:89:19:82:82:4c:99:ed:
12:a1:ba:69:7a:29:1c:82:82:b2:c0:31:b1:fc:77:
d4:d7:eb:e6:ff:e3:80:d8:32:c6:32:ff:8e:b1:95:
25:60:81:3f:1e:e2:01:1d:b3:4a:31:58:d3:d3:91:
c4:17:11:48:11:5a:28:ad:d4:8c:77:c9:39:52:9f:
76:da:5a:e8:92:a9:f3:7e:14:9c:81:2d:f2:6f:09:
9c:bf:f3:27:c0:d7:d2:fd:f3:cd:e4:19:71:6e:56:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:07:20:A4:B0:B2:6E:1A:58:C1:99:1F:59:4E:1B:C3:C8:77:82
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/XRIHIKSwsm4aWMGZH1lOG8PId4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.88.56.0/24
212.252.168.0/24
Signature Algorithm: sha256WithRSAEncryption
28:da:d4:4b:02:81:25:b1:bf:78:a2:4f:9f:0e:ad:a7:35:bb:
aa:a0:9b:e5:36:9e:bb:08:fa:55:78:47:4f:db:4e:84:c5:b9:
03:c1:3e:a3:de:9b:c9:8d:a8:68:d3:96:8c:dd:02:f6:f0:a2:
79:00:02:d7:ae:ec:6d:a1:1d:31:58:d4:b9:71:83:ac:8c:19:
0a:92:01:3b:9b:ce:b2:44:dc:19:06:db:99:3e:e5:7b:ec:f0:
60:c4:31:15:3b:0c:e6:e5:80:af:f9:16:fd:ea:55:1a:8c:a0:
da:bf:f8:45:35:49:60:b9:a1:d3:9f:49:63:0b:95:07:0b:2c:
c3:c9:55:34:46:e0:5e:8d:44:fc:c9:5f:a0:f9:ed:a0:82:de:
26:1c:49:82:1d:a5:28:6f:b3:fc:db:c6:b6:97:dc:4b:69:69:
0f:60:05:87:7b:5a:d7:e8:e6:c5:63:ad:44:2a:59:34:bb:71:
77:c7:6c:3f:62:99:5e:7d:a6:46:54:f6:2a:8e:da:2c:d7:a6:
b3:50:ba:0d:ea:ef:eb:a8:73:bb:a2:1e:c3:34:a6:9b:4b:82:
b9:9a:eb:75:0a:72:f0:30:75:23:91:44:8c:dd:47:cf:0d:6b:
81:23:f1:bc:b0:9e:af:45:20:73:1a:67:27:90:d1:fe:87:7f:
41:2c:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org