Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/XXTuOux0reDqGt-n5qKRugwFMVA.roa
File: XXTuOux0reDqGt-n5qKRugwFMVA.roa (raw, json)
Hash identifier: G4toqTxiwXdqCPC4I8Y9xqFq4hA4Zm1EHZrAcxvwsJg=
Subject key identifier: 5D:74:EE:3A:EC:74:AD:E0:EA:1A:DF:A7:E6:A2:91:BA:0C:05:31:50
Certificate issuer: /CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Certificate serial: 01857014FD1FB748C25B9A6DE86F3CEF0F5A
Authority key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/XXTuOux0reDqGt-n5qKRugwFMVA.roa
Signing time: Mon 02 Jan 2023 01:25:01 +0000
ROA not before: Mon 02 Jan 2023 01:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208092
IP address blocks: 193.9.156.0/23 maxlen: 23
193.16.40.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:fd:1f:b7:48:c2:5b:9a:6d:e8:6f:3c:ef:0f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Validity
Not Before: Jan 2 01:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d74ee3aec74ade0ea1adfa7e6a291ba0c053150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:14:fd:7b:37:aa:fd:2a:fb:9d:81:2f:cc:
b7:e6:e7:31:95:68:9c:14:30:f3:f4:11:40:1d:fe:
ab:b6:93:39:b3:64:61:00:09:55:aa:63:fb:80:f8:
d8:55:a7:91:9b:2a:96:bc:de:17:80:63:f0:77:f1:
9d:02:2d:bb:60:98:fb:7c:85:8d:51:a3:60:d2:b6:
ee:f5:5b:69:08:8d:3b:b3:22:4c:27:6d:6d:35:73:
6a:5c:6b:18:58:a7:d9:6b:44:97:a5:1e:68:54:37:
eb:69:08:5c:d3:58:ba:cc:95:60:ad:09:ef:7c:af:
25:ca:48:6d:88:a8:08:0d:dd:f7:d0:5e:07:18:c1:
69:26:20:61:2c:c2:b4:92:ad:8f:73:8b:bd:be:ba:
89:a1:e9:1d:6f:20:ec:c5:f0:ec:24:1e:70:56:3b:
7e:5d:4d:89:b4:b6:f3:0a:5e:47:5c:e6:ca:54:d8:
b8:fb:4a:3f:6a:01:ba:7b:86:71:5d:89:f2:0c:5c:
ae:97:2d:18:3a:f5:3b:9f:dc:8a:2e:fc:43:76:8f:
12:ba:04:f4:c3:69:cf:01:dd:c2:18:fd:d0:20:7c:
bf:6f:20:94:95:7d:a6:69:02:aa:73:98:1d:ef:49:
be:53:aa:f5:9b:6e:2a:0e:ea:a7:8c:42:88:33:cf:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:EE:3A:EC:74:AD:E0:EA:1A:DF:A7:E6:A2:91:BA:0C:05:31:50
X509v3 Authority Key Identifier:
keyid:21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/XXTuOux0reDqGt-n5qKRugwFMVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.156.0/23
193.16.40.0/23
Signature Algorithm: sha256WithRSAEncryption
55:aa:df:48:1a:64:8c:38:23:bf:b6:8a:63:47:d8:8e:d5:3d:
0a:97:a2:aa:4f:c2:aa:b1:3f:bf:a1:ea:b8:30:2d:32:bd:fc:
dc:3c:c3:a9:5b:1e:b7:bd:e8:f4:de:5f:85:18:64:08:b4:a9:
43:66:22:80:02:23:9f:1b:62:6e:e5:db:c3:fd:c4:1a:4f:a4:
c1:11:a9:fb:a9:26:27:18:e0:59:a7:39:f4:7b:4f:61:da:db:
8b:17:52:2d:53:00:87:b9:8b:5b:d3:39:c7:c6:8c:ae:56:b6:
9f:00:31:2e:d9:68:30:d8:71:99:08:aa:2b:9d:db:e1:c0:98:
ef:51:7d:4e:e5:42:c9:c5:f2:26:bf:8e:fb:90:3e:47:ac:a3:
2a:4a:52:a9:79:d5:f4:78:55:c2:39:46:9c:ca:f3:de:03:5c:
a5:a4:eb:12:ab:1b:ba:59:19:a1:9e:0d:48:cd:f1:b3:21:53:
12:a7:93:e3:bd:c3:2e:d8:19:1b:14:b8:1d:04:1b:03:8c:2b:
81:9f:f6:1c:49:78:2b:69:16:8c:2a:a8:66:27:68:3c:f4:8a:
ab:d3:d4:47:ce:73:5d:e5:61:08:81:31:be:10:5c:d7:4d:d2:
6e:48:1c:32:61:ec:41:40:7b:c1:97:94:5a:59:0b:5c:2e:bc:
9c:bf:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:14 2024 by rpki-client on console-ams.rpki-client.org