Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/xaEAzqQOMD8KBPi7rV30uYSEMHA.roa
File: xaEAzqQOMD8KBPi7rV30uYSEMHA.roa (raw, json)
Hash identifier: +vtBaHbr0aKPl3JwnqCKnjHGdKvV1RR1AhknTY9rqFg=
Subject key identifier: C5:A1:00:CE:A4:0E:30:3F:0A:04:F8:BB:AD:5D:F4:B9:84:84:30:70
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018EC83BD016DB2383F2AD350D1E35BA5273
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/xaEAzqQOMD8KBPi7rV30uYSEMHA.roa
Signing time: Wed 10 Apr 2024 13:39:06 +0000
ROA not before: Wed 10 Apr 2024 13:39:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210773
IP address blocks: 91.193.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 07:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:3b:d0:16:db:23:83:f2:ad:35:0d:1e:35:ba:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 10 13:39:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5a100cea40e303f0a04f8bbad5df4b984843070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f3:79:79:17:b1:7e:f6:2a:30:92:89:d2:84:
ed:bf:8f:ff:65:ec:f4:10:60:a1:cf:fd:b8:bd:76:
ec:e4:80:1e:ba:53:80:08:20:9f:bb:df:90:20:49:
64:0b:95:b4:92:9d:9a:e9:6d:94:1f:64:47:c4:2c:
2f:fc:d7:9a:74:e9:b4:b4:26:a7:14:ef:00:42:e0:
da:f0:50:f6:54:a0:1b:a8:2d:28:3a:e0:6c:76:cc:
e3:da:78:09:13:a0:21:4c:f2:ed:75:a1:56:4c:81:
9d:6b:a6:84:b9:c4:e0:6b:18:fc:3b:75:a2:ce:10:
ea:a8:c9:59:9b:57:b1:c1:b6:fa:e3:6d:f8:3b:8f:
16:d0:c2:a8:4b:ef:66:9d:ae:a0:9b:e7:da:d6:e1:
10:61:74:23:0a:f3:3e:a7:f9:94:0e:7a:5e:6d:14:
df:f5:c9:09:35:6e:55:7c:34:a0:c6:8f:54:ba:22:
a7:45:26:b5:5a:70:7d:f9:41:d0:0e:16:30:e4:67:
4c:eb:f7:79:c4:41:d7:5a:a1:04:96:ca:9e:a9:24:
da:bd:1b:34:9a:fe:e0:62:3d:c6:86:66:17:44:dc:
85:5e:ab:06:4d:45:c4:bb:e3:3b:6f:9f:67:b9:de:
47:22:fa:31:a4:7e:0d:71:69:83:8a:d9:21:5f:2d:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:00:CE:A4:0E:30:3F:0A:04:F8:BB:AD:5D:F4:B9:84:84:30:70
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/xaEAzqQOMD8KBPi7rV30uYSEMHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e2:00:c9:fe:f0:40:b8:f2:90:db:ce:f6:f9:af:7e:4f:00:
1d:f5:7a:26:cb:48:bc:54:f6:f5:76:7d:2c:34:7e:51:9c:da:
b4:0a:1d:2e:a3:1a:6c:c2:91:26:6e:4e:d7:1a:b3:bd:95:29:
9c:97:2f:73:14:29:34:8e:0d:1c:37:dc:44:0e:34:b0:91:1f:
75:0a:98:82:ad:69:41:86:0d:d5:59:8b:c7:17:61:86:21:c1:
80:19:39:01:2a:2f:c4:65:e5:18:6e:1c:ee:9a:af:c5:35:7a:
37:46:e0:17:8d:f5:26:6e:2e:d8:2c:6a:bc:7a:e9:bf:01:86:
cc:05:d4:d8:4d:88:9b:1e:6a:c2:17:0d:bc:d2:52:3e:40:78:
ae:4b:13:72:4d:a8:c4:45:7a:6b:21:bf:2c:36:45:97:e5:60:
4a:f0:36:12:d9:66:d4:d0:a3:ae:5d:cb:8d:09:09:31:ec:1d:
b2:98:61:8b:b9:d9:2f:0f:8b:cc:5c:16:12:dc:77:dd:a8:8e:
30:61:c8:ff:f4:9f:a7:b8:03:28:97:12:6f:d4:ca:04:71:70:
c8:3e:11:d9:29:9b:d9:7f:cd:a9:e7:6b:e4:24:ef:bd:78:40:
9b:45:6a:22:ea:de:53:60:30:90:8b:85:1f:3c:87:57:d5:9a:
53:5b:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:06:52 2024 by rpki-client on console-fra.rpki-client.org