Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/XVUVs-oyfGKVVtLMSYrj3S12fYo.roa
File: XVUVs-oyfGKVVtLMSYrj3S12fYo.roa (raw, json)
Hash identifier: vSGPgecp8bUZOEV6sD3U1VaWi9hqvVwh0cW1m1tthYc=
Subject key identifier: 5D:55:15:B3:EA:32:7C:62:95:56:D2:CC:49:8A:E3:DD:2D:76:7D:8A
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 01856CCAFDAEBA5EA15AE5EACDA693C0F086
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/XVUVs-oyfGKVVtLMSYrj3S12fYo.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20570
IP address blocks: 194.93.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fd:ae:ba:5e:a1:5a:e5:ea:cd:a6:93:c0:f0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d5515b3ea327c629556d2cc498ae3dd2d767d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:00:fb:ae:4e:0b:5a:04:04:1e:3b:73:81:
af:ac:1a:3c:f7:ef:9e:13:10:8a:0d:09:24:fe:11:
06:1e:a0:3a:f9:ba:30:a5:47:48:4e:7e:53:c1:e9:
48:57:ef:c0:9d:49:41:29:b8:cc:b2:ef:54:f9:32:
07:16:25:e9:f9:ba:94:ae:9f:a4:5f:a2:2c:d1:e8:
0a:55:c0:de:1c:c9:e2:2d:ad:1e:47:0c:a0:89:2a:
8e:37:e1:62:19:ad:cd:7d:b7:c8:74:08:bc:3a:d7:
b7:5a:95:90:51:88:cb:e5:ce:79:42:3b:20:f0:2e:
e7:0e:10:9a:5d:d3:40:2f:1e:b2:79:7e:e1:af:43:
64:f4:94:d4:e6:9e:4e:98:8f:c8:aa:10:f9:7c:31:
96:e3:06:e7:c0:aa:cb:90:5b:83:b4:07:8a:aa:9a:
2b:b5:f9:66:8e:84:e5:cc:af:5b:45:6a:77:a3:84:
a1:bd:bc:85:e7:58:bc:bf:94:88:15:f2:e8:c3:8c:
ab:ad:1c:d3:7b:61:57:02:63:40:a8:65:16:49:bd:
3c:55:7f:5c:c2:9d:ba:e4:21:f8:3f:e8:26:85:05:
4a:00:30:6e:5e:dd:c5:b6:1f:22:ed:33:14:0c:35:
47:4e:c0:6a:ff:44:e8:04:75:64:54:da:80:3d:6c:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:15:B3:EA:32:7C:62:95:56:D2:CC:49:8A:E3:DD:2D:76:7D:8A
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/XVUVs-oyfGKVVtLMSYrj3S12fYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.96.0/24
Signature Algorithm: sha256WithRSAEncryption
83:64:64:33:74:c3:45:fb:7d:ad:61:18:6f:f2:73:5d:57:1c:
a6:fb:81:97:75:cc:dd:83:f3:99:94:16:67:37:41:7d:37:58:
f8:3b:c8:0a:43:d9:84:6f:b4:09:47:3f:5d:3b:99:04:2d:a6:
07:17:62:21:20:ef:05:f2:e3:73:60:d5:b6:66:79:ba:49:e2:
b1:ac:2d:a8:73:2e:02:c7:58:23:cd:cf:9f:76:67:8d:3a:bc:
14:f1:0c:3c:a8:02:e3:04:d7:82:c1:84:52:e9:e8:e3:d5:97:
e4:91:ae:00:54:f8:e7:ef:1b:8d:81:34:de:40:7c:3d:ab:15:
6a:e7:84:16:9e:fc:60:0c:60:df:39:4c:e4:ed:45:ef:94:d9:
e0:7f:bc:d2:9e:79:97:00:3a:09:3f:f7:e9:bb:44:03:8a:48:
6f:aa:87:aa:cf:9d:53:c3:ba:c5:fc:2d:71:7a:a4:5b:b6:69:
c3:09:d0:f4:91:9e:27:d8:71:fb:e4:63:7a:0b:19:8b:fb:c5:
5d:01:df:55:56:f5:28:28:05:cc:36:53:f5:53:6e:2b:91:31:
7a:0b:2e:2d:ef:5d:3c:5c:e2:54:6f:6a:78:92:91:eb:de:67:
88:64:e6:cc:07:89:88:90:5a:9e:9c:b1:ed:8a:ee:ca:81:e8:
5c:e7:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org