Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/XPTfXQeK6059l3Nr3BYQJwq8jns.roa
File: XPTfXQeK6059l3Nr3BYQJwq8jns.roa (raw, json)
Hash identifier: AUvPJniyBHGwlb0/G6WQdwU6r69g3TYimm9vF5RfTQ0=
Subject key identifier: 5C:F4:DF:5D:07:8A:EB:4E:7D:97:73:6B:DC:16:10:27:0A:BC:8E:7B
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 0188E82A65D117EB274FE40B22397A052175
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/XPTfXQeK6059l3Nr3BYQJwq8jns.roa
Signing time: Fri 23 Jun 2023 12:11:12 +0000
ROA not before: Fri 23 Jun 2023 12:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59816
IP address blocks: 185.213.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:2a:65:d1:17:eb:27:4f:e4:0b:22:39:7a:05:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jun 23 12:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cf4df5d078aeb4e7d97736bdc1610270abc8e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:5b:75:1b:f9:71:35:b8:fc:75:b1:21:55:
bb:cc:25:67:5a:64:d3:90:0a:ea:4c:ec:90:3a:a6:
b3:81:f1:c9:4d:cd:e1:73:30:8b:7d:15:4d:d9:87:
b1:80:75:14:1a:35:39:0f:26:ff:20:e4:29:ad:50:
e5:58:f1:15:9c:f7:a4:eb:35:3a:4e:57:0c:27:15:
bd:22:5f:9f:56:b7:23:26:03:fb:f8:e2:26:eb:b0:
49:c0:84:0f:90:32:9d:22:7d:76:0d:47:e3:84:c3:
3b:c3:33:62:5b:69:0e:79:54:7b:fd:e9:8a:b3:79:
cc:bf:0c:96:20:b0:ba:02:4f:5e:2a:ff:0f:5b:78:
8c:b7:1c:85:dd:3a:f6:59:ef:19:54:7a:10:1c:f8:
91:af:9f:a9:8f:e5:2b:50:ba:dc:3b:8a:5f:06:29:
43:61:bd:83:a8:ad:04:17:b2:6f:5c:13:66:b3:4a:
92:0d:05:b8:49:50:91:95:82:fb:56:63:34:5c:4e:
e5:bf:bb:bb:0f:e0:e4:81:e4:ae:6a:82:0a:41:75:
80:e1:22:5f:17:68:12:26:1e:d9:07:fe:01:10:16:
80:43:a3:1a:e5:d3:bd:59:3d:d6:78:64:2c:00:6c:
27:64:35:8e:0f:28:c2:70:ab:06:0d:17:d5:5b:ca:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:DF:5D:07:8A:EB:4E:7D:97:73:6B:DC:16:10:27:0A:BC:8E:7B
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/XPTfXQeK6059l3Nr3BYQJwq8jns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.92.0/22
Signature Algorithm: sha256WithRSAEncryption
15:d2:79:51:68:34:2c:4e:03:e8:46:7c:35:fc:63:3f:e6:0c:
6c:4c:d7:64:22:c5:b8:b5:f0:00:66:3e:cf:30:84:70:b7:ba:
10:00:82:cb:81:d6:8f:f4:1b:eb:95:c3:56:49:00:3d:4f:22:
19:8c:8b:92:2d:69:bc:15:0e:09:1d:30:1c:fb:fd:d8:8b:e0:
47:99:dd:3b:22:7d:6f:ef:ba:4f:61:7a:d5:22:29:45:3a:a2:
2e:22:60:2b:f2:4f:f1:f3:29:43:29:d0:cb:0d:3e:69:22:fd:
81:e2:9e:3f:c6:93:99:5f:93:7b:34:e8:b8:6b:19:41:5f:41:
b0:49:df:02:72:3b:01:73:f4:ce:13:3a:c4:52:39:94:09:69:
99:e0:bc:f9:69:bc:a0:c1:39:88:8e:d7:87:0b:94:ee:0d:d1:
3d:a8:eb:28:b4:ee:25:00:45:30:71:19:05:8f:20:3f:26:65:
7b:2c:22:9f:5d:50:0b:08:30:05:21:23:2b:48:8c:a0:90:6b:
d3:7b:1b:2a:c9:88:16:02:6c:a2:1c:a9:c0:38:c9:e6:ac:f0:
a9:d7:8e:7e:f0:0d:5f:b5:8c:48:3b:bd:4d:6f:51:2c:1e:35:
94:6a:7f:97:90:9e:2e:3d:58:68:6c:fd:5d:81:3f:d5:dd:d3:
ef:ad:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:18 2024 by rpki-client on console-ams.rpki-client.org