Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/XJYiyagAe7-gE2-J9U9XXpQwyiA.roa
File: XJYiyagAe7-gE2-J9U9XXpQwyiA.roa (raw, json)
Hash identifier: Cx1Y0/oQNuLFhS9td11QKHXxhLGsorWJz86guLfLGy4=
Subject key identifier: 5C:96:22:C9:A8:00:7B:BF:A0:13:6F:89:F5:4F:57:5E:94:30:CA:20
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 0186F088924A7BFA87B0D4220AD3C4343321
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/XJYiyagAe7-gE2-J9U9XXpQwyiA.roa
Signing time: Fri 17 Mar 2023 17:05:27 +0000
ROA not before: Fri 17 Mar 2023 17:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 194.50.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 23 Mar 2023 06:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:88:92:4a:7b:fa:87:b0:d4:22:0a:d3:c4:34:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Mar 17 17:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c9622c9a8007bbfa0136f89f54f575e9430ca20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:1a:7b:53:bc:b1:42:e1:e4:4a:2a:4e:eb:
fb:a1:98:08:9c:05:ba:95:24:31:a3:76:b2:a5:c6:
dd:2e:8f:88:c3:02:79:99:0c:45:0d:3c:a6:ef:92:
6e:27:de:9d:51:27:51:21:05:9c:93:76:d3:b3:82:
44:f4:57:be:7c:20:11:53:bc:3d:d7:f9:38:05:40:
3c:ca:d8:05:53:50:76:31:46:2a:42:fb:31:cd:12:
6d:fb:5a:d3:5f:e3:c4:f3:33:1b:8e:b4:61:96:9c:
1e:80:cd:e8:0e:ba:30:12:71:fc:9b:e7:ba:e9:f2:
00:4d:ce:26:ab:59:21:a0:a4:ee:94:f0:6d:8b:f0:
c9:f6:2f:99:b7:fc:ea:93:ac:65:98:68:be:ed:6f:
ee:23:e6:39:be:6e:75:5e:2c:8c:5e:fa:d0:38:7a:
60:89:db:68:fd:c8:1f:8f:3e:54:ea:cf:d9:24:fe:
1d:e4:ab:fd:89:71:97:39:a3:1b:cb:af:fd:2a:58:
3e:87:51:ba:09:13:a3:4b:b5:5a:dd:26:90:0a:e8:
8a:87:02:ec:24:6f:d1:67:d9:19:05:43:d9:4c:62:
b3:ac:8d:49:e5:22:e4:91:8a:00:ca:4c:41:e5:9e:
e7:dc:d2:9c:5a:01:48:9c:4c:21:1b:30:f4:90:5f:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:22:C9:A8:00:7B:BF:A0:13:6F:89:F5:4F:57:5E:94:30:CA:20
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/XJYiyagAe7-gE2-J9U9XXpQwyiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.144.0/22
Signature Algorithm: sha256WithRSAEncryption
87:5b:0b:7b:e3:54:a4:26:46:2f:58:b1:01:06:22:1b:f5:1c:
09:39:be:c6:f7:6e:68:71:5d:19:08:29:3e:5e:4d:3b:ff:15:
ed:cd:c4:56:ff:b2:5d:b9:d7:01:3f:1a:1b:ac:20:3a:a3:b9:
3b:75:dd:2b:2e:7f:50:03:bc:11:09:ac:b6:b6:13:cc:28:0f:
99:12:9f:17:ec:78:19:bf:ab:c3:92:6c:96:22:8d:e7:cf:64:
7d:db:9d:17:58:03:c9:7d:87:8c:30:55:af:c6:d4:39:d7:4a:
e8:e8:61:d6:dc:d4:5d:e6:79:4f:ef:b4:20:3e:9b:b2:b3:36:
42:7e:c1:22:1e:6b:84:e2:da:55:36:a2:6c:18:62:18:d4:8b:
66:87:70:a8:0b:ef:3f:eb:58:2d:f1:6b:b4:3f:dd:5c:76:6d:
9d:50:12:fe:b8:2a:8f:2f:73:ed:23:21:1c:c3:07:25:0c:28:
a6:76:bd:f7:b7:f8:aa:fd:6b:ed:0d:ca:84:37:2c:b1:38:6f:
45:89:3c:80:e0:8d:53:07:47:cf:a4:cf:35:bf:dc:f0:7d:d2:
b0:f9:95:47:e7:32:94:57:40:a8:0a:99:1e:22:a5:79:53:fc:
1d:92:4c:04:8b:f2:b4:86:66:ff:48:a7:08:06:48:ca:1b:c7:
73:8b:bc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:27 2024 by rpki-client on console-ams.rpki-client.org