Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/XjiVnPZwzA2FTltBC-1sCLreZzM.roa
File: XjiVnPZwzA2FTltBC-1sCLreZzM.roa (raw, json)
Hash identifier: VO1QKFFxpLQ6scIFNKlVwFpmbl4qM7xg7FIwRYXPZ7w=
Subject key identifier: 5E:38:95:9C:F6:70:CC:0D:85:4E:5B:41:0B:ED:6C:08:BA:DE:67:33
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE2E10AE81AB41B55E75EB742D1CE
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/XjiVnPZwzA2FTltBC-1sCLreZzM.roa
Signing time: Mon 01 Jan 2024 16:30:36 +0000
ROA not before: Mon 01 Jan 2024 16:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 92.114.40.0/22 maxlen: 24
46.20.212.0/22 maxlen: 23
Validation: Failed, certificate revoked on Thu 08 Feb 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e2:e1:0a:e8:1a:b4:1b:55:e7:5e:b7:42:d1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e38959cf670cc0d854e5b410bed6c08bade6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:ea:b0:54:26:ed:d5:16:d2:bc:dd:19:7a:
5f:8e:14:91:a7:7c:00:66:a4:1c:82:4c:25:a7:43:
6f:84:8d:23:88:bf:8c:7c:b1:c0:02:3f:36:49:2f:
9f:19:a5:f4:e5:11:16:86:52:29:4e:61:df:94:dd:
8f:66:09:98:62:22:a1:75:08:a4:43:78:f8:09:ec:
6b:6a:7e:bc:d2:48:e7:7f:20:12:86:ef:a2:af:ef:
4b:7b:64:36:e9:f4:1b:63:27:88:8e:f5:4c:78:73:
55:cb:23:9f:9a:54:6e:e5:75:58:ba:82:36:a9:cb:
11:a6:75:f5:15:ad:0c:b0:96:53:56:3a:a6:b4:3a:
65:a5:b1:6d:c8:e8:a9:6b:22:87:f9:e4:fd:32:1d:
29:95:6b:eb:8c:d2:ea:83:f8:82:53:82:de:1e:55:
73:61:16:74:01:08:fd:c2:4e:ce:cc:20:60:01:7c:
67:a5:66:70:c3:ca:e0:8b:28:24:44:59:91:7c:0e:
91:ae:16:39:a9:dc:6c:3f:b6:73:29:13:f3:7a:64:
34:95:92:32:c4:d3:81:1f:ef:98:fc:8f:79:96:5d:
30:3f:38:e3:7a:be:cd:88:29:ad:f4:23:e8:7f:d5:
22:c6:4e:7f:a6:90:2c:3d:62:49:15:c5:52:e2:14:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:95:9C:F6:70:CC:0D:85:4E:5B:41:0B:ED:6C:08:BA:DE:67:33
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/XjiVnPZwzA2FTltBC-1sCLreZzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.212.0/22
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
77:ce:f5:8f:e5:4c:b5:fd:26:2b:c1:41:c2:73:14:89:c1:99:
19:5c:4b:b3:3f:3b:e3:9d:51:cc:24:70:52:2c:6b:75:30:3e:
22:23:2d:19:b7:3e:e7:3e:e0:52:cc:df:5a:4c:ca:38:ec:53:
30:ea:e9:44:ae:09:85:69:1e:37:e2:3a:9e:92:c5:72:f9:ff:
7b:db:44:1c:72:10:69:a8:33:41:d2:14:67:36:fd:64:37:c5:
1f:7a:10:d8:ec:b3:da:2d:ad:a9:97:ea:2b:78:8d:07:1b:0a:
d2:4a:41:39:2f:d1:33:ba:8d:94:96:11:0c:43:6a:5f:1b:5b:
46:39:55:6b:0b:63:c4:f6:5e:ef:95:a1:94:49:43:2c:ca:92:
15:2d:77:6b:94:57:30:77:02:1b:7b:d2:25:e1:23:2e:c7:56:
41:30:39:69:30:a6:66:59:45:c3:c2:0f:ad:b1:53:cf:36:f7:
96:3d:9a:2c:9a:8e:20:9a:2d:a5:fa:c9:09:98:bb:3c:a4:a3:
c1:dd:ca:58:ce:9e:0c:ff:2f:4a:73:d8:92:d1:59:95:1c:97:
89:93:6b:ce:d0:b2:f3:29:78:36:11:4c:21:bb:df:47:26:0b:
e6:37:05:bb:27:46:15:63:38:1b:b6:21:41:88:6d:52:b1:94:
1e:0d:fb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org