Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/x5eiY3qjw56A-0WMjqQIiTIV_Nw.roa
File: x5eiY3qjw56A-0WMjqQIiTIV_Nw.roa (raw, json)
Hash identifier: /lXH2YG6XbeyhSpN/XVKn166YvCF+EJ+yV3aLpXNGNQ=
Subject key identifier: C7:97:A2:63:7A:A3:C3:9E:80:FB:45:8C:8E:A4:08:89:32:15:FC:DC
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 018572CCB27010DC882F7E060D68B2A1E925
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/x5eiY3qjw56A-0WMjqQIiTIV_Nw.roa
Signing time: Mon 02 Jan 2023 14:04:55 +0000
ROA not before: Mon 02 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 216.120.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:b2:70:10:dc:88:2f:7e:06:0d:68:b2:a1:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Jan 2 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c797a2637aa3c39e80fb458c8ea408893215fcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:24:19:65:b0:65:c3:22:2c:80:80:c3:35:
a6:4d:c1:70:3c:a9:a2:63:47:d2:a1:44:8f:d6:b5:
53:5e:30:a2:01:00:07:6b:e1:2f:8b:9e:f0:af:56:
36:a7:2f:cc:aa:6c:42:0a:95:db:ef:cc:43:dd:95:
9e:a6:d3:46:e4:68:d5:19:a7:ba:42:ea:2d:0b:29:
83:65:57:9f:57:6b:85:0e:d0:5a:24:d4:89:f6:08:
dd:da:31:7f:8f:81:bd:06:8c:3b:32:83:de:40:3c:
c8:56:a0:87:9b:1e:4b:ee:1f:53:1a:47:5b:82:eb:
67:bd:e2:07:49:ec:d2:b9:e9:c5:4d:4e:f1:ad:34:
df:33:34:5c:a8:38:b0:c0:19:96:37:96:68:2a:1d:
4a:f3:01:e1:36:67:0c:c2:37:bf:4e:fa:c2:dd:91:
4f:3c:70:2c:41:74:a9:5e:a7:e9:f7:38:2a:5f:6c:
ab:36:bb:81:9d:51:9a:99:2c:b2:00:27:42:b5:b5:
5f:7b:e8:d4:3f:a0:39:b0:8e:15:59:ac:51:2a:7c:
4b:4b:95:b7:f7:28:6b:b2:77:e6:34:f2:75:35:35:
ff:14:12:af:24:3a:63:6a:f0:f7:55:aa:07:7e:91:
91:70:81:9d:4d:b6:f4:97:82:32:a6:90:c6:d0:f7:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:97:A2:63:7A:A3:C3:9E:80:FB:45:8C:8E:A4:08:89:32:15:FC:DC
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/x5eiY3qjw56A-0WMjqQIiTIV_Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.120.180.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:5e:93:01:f5:1b:59:03:9b:ff:2e:d5:e2:6e:e6:6e:8b:27:
61:49:49:b6:18:e2:07:0f:81:db:4e:6c:2e:ab:1e:7a:eb:69:
dd:56:9e:8d:47:bb:2e:b6:b1:f6:6d:0b:e0:1f:ad:4c:4f:67:
ba:ea:9b:bd:7a:f0:77:00:bf:b5:a0:57:f7:72:94:08:92:2b:
60:a8:86:fc:99:42:5b:d8:47:2c:61:ba:12:d4:a3:11:8c:11:
0e:ad:10:00:27:78:9c:ef:02:39:67:bc:1a:c3:89:a7:56:cb:
10:64:c0:ba:c3:5a:e5:bf:46:da:0d:82:b8:29:eb:91:87:5c:
8b:97:d3:b4:e2:9e:18:a6:75:fb:e1:87:0f:db:95:d0:e0:05:
5a:21:af:b7:eb:c2:aa:01:a0:4e:cd:a5:72:ae:fa:24:52:1d:
1a:cc:c7:1d:a8:e8:75:9c:95:95:47:56:1e:c7:5b:18:f4:eb:
fc:ff:69:f3:23:da:af:09:2e:07:77:fb:0f:9f:22:68:93:56:
39:fb:2b:77:2d:28:51:b9:50:c0:73:a0:03:42:f7:f5:b6:52:
52:52:d7:a4:42:fe:cd:d9:1a:d5:93:cf:b2:f4:40:ca:ed:84:
d1:89:df:f3:7f:5b:b0:69:36:f9:b1:e6:3c:1a:cc:cd:c8:a5:
4e:9a:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:05 2024 by rpki-client on console-fra.rpki-client.org