Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/XvPoNIay5YGroO5i3pPGVJP1xRk.roa
File: XvPoNIay5YGroO5i3pPGVJP1xRk.roa (raw, json)
Hash identifier: mQa9Z9LtqYkDOfpq00o+qy2Wp3PNDiK7sVC2e08GklI=
Subject key identifier: 5E:F3:E8:34:86:B2:E5:81:AB:A0:EE:62:DE:93:C6:54:93:F5:C5:19
Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Certificate serial: 0185728C9BE69D0FAF356A35897D3A867C1A
Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/XvPoNIay5YGroO5i3pPGVJP1xRk.roa
Signing time: Mon 02 Jan 2023 12:54:55 +0000
ROA not before: Mon 02 Jan 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8678
IP address blocks: 161.9.152.0/21 maxlen: 21
161.9.180.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:9b:e6:9d:0f:af:35:6a:35:89:7d:3a:86:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Validity
Not Before: Jan 2 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ef3e83486b2e581aba0ee62de93c65493f5c519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:11:3e:bc:3c:d0:99:e0:01:57:48:6e:1a:
6f:a3:52:86:1a:7a:bb:ae:8b:31:90:48:3d:c3:14:
a5:1c:bb:7c:d5:c7:2b:88:8f:46:b6:3c:12:52:55:
3b:56:d6:af:e1:32:e1:c0:be:f1:5a:fa:4d:fd:50:
10:79:3a:de:e9:fd:db:c5:88:b2:cf:5c:1a:0c:74:
6a:44:d2:a2:5a:88:f9:53:28:1f:6e:c6:01:81:ef:
1f:19:14:54:22:b0:79:38:af:3a:40:d6:f9:6b:01:
be:71:92:35:32:69:27:74:7b:7b:fa:1c:7a:c3:4f:
dc:0b:e5:5a:77:19:b9:41:19:41:f9:79:51:67:36:
66:18:d7:61:16:ec:af:f6:52:ac:6f:47:64:aa:ae:
e2:0d:4f:9e:56:2a:7b:20:8c:d7:8a:d3:7c:d4:30:
bb:80:04:37:e7:79:f8:8b:30:18:ab:3b:35:84:a7:
2a:82:7d:91:63:97:2d:f6:18:93:1d:01:62:1b:83:
ff:08:48:fb:ba:a2:e8:52:82:18:1e:2e:35:39:11:
ae:4d:21:23:b5:b9:64:ad:f9:36:82:cf:4a:62:4f:
ec:93:c8:54:9d:79:f5:84:15:2d:e9:be:9b:df:f7:
1c:00:96:38:af:e5:d3:37:d3:f6:53:30:6b:c5:fc:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F3:E8:34:86:B2:E5:81:AB:A0:EE:62:DE:93:C6:54:93:F5:C5:19
X509v3 Authority Key Identifier:
keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/XvPoNIay5YGroO5i3pPGVJP1xRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.9.152.0/21
161.9.180.0/22
Signature Algorithm: sha256WithRSAEncryption
38:4e:4d:93:d0:6e:be:55:db:6e:e0:34:4b:88:8f:d8:d3:20:
32:b3:12:0a:48:10:dc:80:71:2d:98:5c:4d:3b:3a:0f:c8:16:
33:d4:a0:fa:50:4a:7f:8a:37:20:e8:3a:22:a8:d5:eb:23:9b:
b7:fd:29:14:b0:e3:1c:6b:fb:c6:11:52:3a:91:96:17:e7:5a:
03:b7:28:bc:42:f0:dc:ba:83:21:ba:b8:e0:83:c1:15:aa:73:
4a:3b:ee:d2:16:1b:9c:1a:9d:b4:cc:5b:1d:f6:21:15:cc:d1:
dc:f7:3b:e1:0f:43:4d:c7:6f:ec:24:f7:87:8b:05:7e:51:52:
ae:9d:b8:ca:7a:ca:11:fd:68:88:1b:10:ef:a2:2b:89:d4:de:
8d:1c:ec:05:7e:a9:10:ad:1f:d8:43:f8:71:43:a7:f4:c6:f1:
5a:3a:14:cf:45:96:3f:d8:62:34:e9:c1:c5:64:10:8f:d7:c4:
9c:dd:f8:b6:c8:c7:34:e9:4f:1f:e9:7c:d2:63:6c:97:0a:b7:
29:c2:2d:39:62:3c:f8:ae:62:4e:86:86:1f:17:3f:c1:de:63:
74:00:64:b6:3c:a2:4f:2a:bd:7d:55:8c:9e:db:28:e4:86:25:
44:a3:37:20:87:87:54:ca:e4:be:8c:19:ee:56:05:ae:cc:21:
2b:15:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org