Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/xlOXJaySuMgHYjtYORkLhdHmZdA.roa
File: xlOXJaySuMgHYjtYORkLhdHmZdA.roa (raw, json)
Hash identifier: l56lJgiGaVtfF2QSjb67QO75+MP1iYAveRdLhJ+VCgk=
Subject key identifier: C6:53:97:25:AC:92:B8:C8:07:62:3B:58:39:19:0B:85:D1:E6:65:D0
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 018D6919D1B8C44115721DA7DE4E0A95F7CE
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/xlOXJaySuMgHYjtYORkLhdHmZdA.roa
Signing time: Fri 02 Feb 2024 09:15:16 +0000
ROA not before: Fri 02 Feb 2024 09:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 62.182.168.0/21 maxlen: 21
62.182.168.0/24 maxlen: 24
62.182.169.0/24 maxlen: 24
62.182.170.0/24 maxlen: 24
62.182.171.0/24 maxlen: 24
62.182.172.0/24 maxlen: 24
62.182.173.0/24 maxlen: 24
62.182.174.0/24 maxlen: 24
62.182.175.0/24 maxlen: 24
83.97.96.0/21 maxlen: 21
83.97.96.0/24 maxlen: 24
83.97.97.0/24 maxlen: 24
83.97.98.0/24 maxlen: 24
83.97.99.0/24 maxlen: 24
83.97.100.0/24 maxlen: 24
83.97.101.0/24 maxlen: 24
83.97.102.0/24 maxlen: 24
83.97.103.0/24 maxlen: 24
89.47.52.0/24 maxlen: 24
89.47.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 15:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:19:d1:b8:c4:41:15:72:1d:a7:de:4e:0a:95:f7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Feb 2 09:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6539725ac92b8c807623b5839190b85d1e665d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:22:e4:f6:e0:41:5d:ac:36:5d:4e:1e:81:
bd:5d:94:e5:7c:d2:d7:75:40:bd:70:23:5a:3e:f9:
c3:d0:5a:e1:8b:74:ed:23:63:36:fd:18:19:b5:8d:
26:60:03:ec:c1:e5:b4:cb:4e:f0:8f:84:86:db:83:
a8:7a:35:35:94:a0:e4:cf:59:4c:89:8c:55:8e:91:
3d:fa:76:b2:dc:b2:10:13:89:f2:11:fd:9b:d0:9f:
63:e6:26:f5:e7:34:d6:66:c6:f7:f2:89:3a:93:ca:
f9:27:e8:85:f7:6e:a7:6e:0a:cb:90:cf:45:7e:6e:
be:f1:03:86:d8:5e:87:77:30:5d:91:66:c5:a0:dd:
9b:4e:3c:9e:a4:06:f5:f5:36:aa:79:0e:5e:59:8e:
d1:e8:4e:3b:b4:44:18:3e:be:44:54:89:0d:55:a0:
d2:74:f5:2b:35:ea:db:92:31:90:b9:3d:6e:84:95:
36:a7:cd:95:12:b0:4f:6f:4e:36:d6:0e:c8:7f:39:
f3:66:bd:c1:8c:87:3d:2d:63:ed:7d:02:cc:5c:c5:
84:1c:93:e7:6e:56:01:f8:25:fc:e5:62:7d:3a:ef:
49:d6:65:d7:75:0d:31:23:95:fa:b7:f9:5e:73:40:
37:1b:49:b9:7f:07:0e:64:17:f0:24:b2:92:3b:c4:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:97:25:AC:92:B8:C8:07:62:3B:58:39:19:0B:85:D1:E6:65:D0
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/xlOXJaySuMgHYjtYORkLhdHmZdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/21
83.97.96.0/21
89.47.52.0/24
89.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c5:c7:b9:21:f1:65:5d:af:1a:8e:06:56:9f:56:b7:b7:12:
8f:c3:76:fe:c0:d8:83:df:5d:b5:d5:3b:99:e1:4a:15:3e:3a:
5e:5c:8d:89:d1:1b:c4:76:03:09:94:db:09:b7:30:8a:68:fa:
f3:4f:74:b6:18:59:e3:64:26:f4:ac:a2:3f:ce:51:70:35:47:
51:b3:29:ac:10:57:0f:0a:a6:4c:ea:8e:aa:ac:ea:08:76:2a:
f8:96:3d:66:7c:eb:9d:70:e2:b6:7a:6c:fb:1d:98:b9:ff:d9:
25:68:52:66:a4:2a:5b:5f:f8:8b:4c:1f:93:55:92:1a:61:05:
d3:6e:0f:1e:59:23:26:43:32:49:72:72:84:6c:82:1e:df:89:
3d:06:99:95:09:ef:bd:70:50:02:2b:5e:c6:2b:cc:b9:f3:43:
6c:8c:5b:7b:da:05:a5:df:e6:19:5c:7b:38:97:6c:27:03:19:
4a:48:70:d7:77:8f:d7:66:07:05:56:f1:f9:64:c2:1f:9a:6f:
f5:31:36:45:3a:b2:11:66:d2:5c:4e:21:8c:85:04:8b:75:2c:
ba:f5:a3:00:51:69:e5:17:09:e5:9e:97:14:4a:bd:f3:dd:83:
35:8d:62:11:de:b3:30:af:37:89:30:37:60:45:28:fa:23:91:
65:af:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:35:39 2024 by rpki-client on console-ams.rpki-client.org