Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/XrugsOiBWMzZYY4Ez12c2SbYcVg.roa
File: XrugsOiBWMzZYY4Ez12c2SbYcVg.roa (raw, json)
Hash identifier: kOb8grG8KWiUFptoffv0uQQONppmydT8ja0TFcwzXco=
Subject key identifier: 5E:BB:A0:B0:E8:81:58:CC:D9:61:8E:04:CF:5D:9C:D9:26:D8:71:58
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0193106F2C0C2DBA0B799EBA7A5DC6CE2FD0
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/XrugsOiBWMzZYY4Ez12c2SbYcVg.roa
Signing time: Sat 09 Nov 2024 10:19:01 +0000
ROA not before: Sat 09 Nov 2024 10:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214061
IP address blocks: 83.142.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 15:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:6f:2c:0c:2d:ba:0b:79:9e:ba:7a:5d:c6:ce:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Nov 9 10:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ebba0b0e88158ccd9618e04cf5d9cd926d87158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:42:22:21:50:10:5b:c6:3c:13:ba:8f:ce:
77:2c:ef:b6:22:ec:ca:da:e3:70:9f:fd:73:83:c9:
53:22:35:39:ea:1b:6b:7d:54:9f:d2:8c:42:fc:b1:
e4:78:4f:82:27:f5:b4:8f:15:67:a3:03:a1:a5:3d:
2d:76:e2:9b:30:cb:5a:6c:49:f3:12:d1:90:3c:b3:
e1:f4:f2:0d:e5:ca:75:26:ab:c7:2e:2e:85:4e:cd:
33:7b:bc:1a:bf:bd:b0:44:ae:b0:8d:03:bd:07:86:
d0:58:b8:a4:ce:37:fc:fc:27:f4:69:23:52:6c:d3:
98:90:a0:0a:cd:0c:ab:c6:2c:85:15:53:63:13:72:
1c:f9:68:2d:e2:13:c6:a2:d3:7f:cb:e1:13:f0:4b:
20:6e:8a:20:02:c3:17:c7:a1:2e:d6:ab:20:67:ba:
27:ab:e3:63:06:01:1d:de:bb:54:0a:e1:8c:f3:66:
b3:23:bb:5c:64:41:ee:1e:8b:ce:86:c4:86:54:b2:
d9:d2:98:b8:14:73:a5:38:9c:69:cb:46:8b:c3:d5:
e2:b3:ef:5a:32:b5:45:39:ff:5b:b9:9e:b7:2f:25:
cd:b9:ba:41:3d:18:d6:20:db:a5:24:8e:7d:32:3b:
ab:ad:46:35:61:19:e5:d2:d7:22:fc:58:8b:d1:65:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:A0:B0:E8:81:58:CC:D9:61:8E:04:CF:5D:9C:D9:26:D8:71:58
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/XrugsOiBWMzZYY4Ez12c2SbYcVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.213.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f2:c1:29:a5:17:4b:94:94:10:40:cf:7b:d4:84:91:50:9d:
a3:c3:56:d9:b8:06:76:c5:6b:02:e2:68:65:23:de:88:16:41:
97:db:71:3d:eb:50:82:19:7c:10:20:2b:48:da:14:eb:56:cf:
9f:b8:53:d9:2a:14:65:78:e3:1c:c8:91:20:fc:5e:af:e9:46:
a2:44:b1:df:10:94:49:33:b1:5d:94:5c:9d:a8:0e:92:2e:56:
3a:ec:9e:62:bb:00:0c:5f:d3:11:8f:a6:06:3d:9f:cb:c6:50:
c4:53:a0:11:50:09:d4:00:9e:e4:c1:71:ed:4d:9f:0d:cd:2b:
84:c2:e5:23:5e:9e:40:92:fa:1d:e5:f8:d0:0c:89:25:a0:57:
48:e4:27:30:8c:08:a3:97:a3:fd:af:9c:de:31:5b:13:ba:fe:
1d:7f:ab:11:b6:99:08:fe:6f:08:65:e1:b4:a8:ab:78:cf:8c:
66:b1:26:de:f1:79:04:15:2c:e5:f1:d4:0e:07:62:6d:e5:a1:
9a:10:89:22:5f:ff:72:4d:88:e1:a9:39:3c:01:d5:8c:4f:08:
1a:dd:fd:8e:e5:3e:50:f2:3c:2d:2a:99:2b:b0:d4:ff:bb:74:
ed:c8:27:04:97:e4:19:37:3a:c0:d8:b2:83:75:3f:f9:ba:54:
7e:58:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:39:39 2024 by rpki-client on console-fra.rpki-client.org