Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/XrVnmo0K9ogoyaHKn9HAwOBsxLk.roa
File: XrVnmo0K9ogoyaHKn9HAwOBsxLk.roa (raw, json)
Hash identifier: JQXwi04ozpf2G11fNtm+q0x2Yf1NwuyhCq0BfH/QhX8=
Subject key identifier: 5E:B5:67:9A:8D:0A:F6:88:28:C9:A1:CA:9F:D1:C0:C0:E0:6C:C4:B9
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 018D0CFB20324D3B60B009574CE9CC481726
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/XrVnmo0K9ogoyaHKn9HAwOBsxLk.roa
Signing time: Mon 15 Jan 2024 11:56:40 +0000
ROA not before: Mon 15 Jan 2024 11:56:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1103
IP address blocks: 192.42.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:fb:20:32:4d:3b:60:b0:09:57:4c:e9:cc:48:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Jan 15 11:56:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eb5679a8d0af68828c9a1ca9fd1c0c0e06cc4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:60:f8:4e:9f:02:5d:0a:2e:e5:47:39:5a:
8f:37:17:93:2b:52:db:4e:6f:f1:9e:51:ca:81:65:
bb:90:94:9b:69:b9:92:e3:34:6b:dc:ff:f7:23:e4:
e9:08:bd:ec:3a:35:4e:68:f7:2c:d6:c0:5c:c3:8b:
93:31:d2:87:62:71:a7:41:12:04:19:d6:f7:8b:d1:
de:67:e9:73:38:04:13:17:be:58:73:e9:3f:0a:e1:
a4:7d:04:a9:b2:3d:9c:c9:7a:6a:da:47:95:0d:c9:
7a:5e:f6:5a:29:39:ea:4f:f3:50:57:f7:5a:25:a2:
d9:98:06:de:00:88:4e:18:20:c3:75:41:22:ab:c2:
8e:2c:d6:7a:6e:e4:89:40:b0:cc:23:fa:c3:5f:db:
ae:92:ad:48:a5:35:ea:9d:5d:aa:ac:6e:cd:3f:01:
da:60:0c:cd:c9:a8:d0:68:dc:c0:05:da:c8:97:4b:
cb:15:b7:0c:67:23:14:1a:ec:b4:c7:20:ad:cb:81:
f3:ae:70:88:84:ef:04:4c:87:3d:35:e9:1d:b7:43:
26:05:ea:c0:99:d2:cd:fc:b9:6e:1f:0b:c0:45:33:
73:3d:15:39:47:ec:15:58:8f:41:5c:9b:f9:1b:39:
a5:26:f7:cc:2d:ca:8c:c4:81:62:19:f2:64:80:02:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:67:9A:8D:0A:F6:88:28:C9:A1:CA:9F:D1:C0:C0:E0:6C:C4:B9
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/XrVnmo0K9ogoyaHKn9HAwOBsxLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.42.124.0/22
Signature Algorithm: sha256WithRSAEncryption
65:f6:da:ad:ff:bd:ac:1b:ec:e1:41:75:a4:93:73:aa:e0:cd:
27:12:cd:70:fb:29:be:f1:f0:16:a8:06:ee:b0:db:f7:58:91:
27:e3:fc:97:2e:4d:71:a9:ac:a5:1c:0d:72:28:c9:67:b4:92:
97:f3:b5:5d:f9:93:62:0d:59:a8:29:f3:6c:72:fb:ad:d3:6e:
12:ef:2d:c3:25:53:39:77:45:15:00:08:4d:f8:dd:81:fc:46:
ea:d4:c6:fe:d5:0d:b0:7a:70:67:e2:bd:3a:03:96:fc:7f:f2:
53:1b:33:02:51:bc:fc:11:3c:9c:dc:15:7d:58:36:07:71:10:
48:e2:f8:80:40:b5:5e:c6:cf:1c:70:a2:dd:9e:c9:50:31:ab:
7f:ab:09:c3:6e:d7:41:cf:e2:64:98:d7:b2:5c:3d:8e:93:b4:
30:85:d0:6f:a6:f5:f3:b8:d9:94:50:84:5f:bd:e5:13:f5:d9:
b8:93:00:e8:f1:7e:49:58:3f:64:d7:4f:99:c9:de:e4:9c:d8:
12:48:b3:94:08:5e:6b:d6:ee:e1:ff:fb:7c:38:c5:01:4b:36:
4f:8f:2a:e3:6e:23:a7:0e:93:49:11:e2:fa:a0:7e:55:36:19:
19:3a:5f:b3:6d:0d:3e:fc:f4:93:8c:a8:ef:ad:15:45:12:3f:
f5:79:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:45 2024 by rpki-client on console-fra.rpki-client.org