Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/x_txODO4WMMdvf5Ke4shq-eWg-M.roa
File: x_txODO4WMMdvf5Ke4shq-eWg-M.roa (raw, json)
Hash identifier: Wn1kLv/lWnesHNoovsbK956LNVCoAyyh/fxhYgGOj9g=
Subject key identifier: C7:FB:71:38:33:B8:58:C3:1D:BD:FE:4A:7B:8B:21:AB:E7:96:83:E3
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 018573CCED879E14D75EECE0F676BC172230
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/x_txODO4WMMdvf5Ke4shq-eWg-M.roa
Signing time: Mon 02 Jan 2023 18:44:48 +0000
ROA not before: Mon 02 Jan 2023 18:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211970
IP address blocks: 131.117.230.0/24 maxlen: 24
131.117.231.0/24 maxlen: 24
131.117.233.0/24 maxlen: 24
185.21.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cc:ed:87:9e:14:d7:5e:ec:e0:f6:76:bc:17:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Jan 2 18:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7fb713833b858c31dbdfe4a7b8b21abe79683e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:e1:85:84:70:f4:cf:4f:84:52:ae:ef:37:
1f:46:dd:5d:cd:e7:a5:12:20:1c:78:0e:62:e8:a0:
cd:c1:f4:b9:aa:12:cd:2e:29:b1:c8:81:cb:aa:61:
3a:5b:e7:eb:8a:a5:7a:9c:59:ac:39:66:35:ae:9a:
77:fb:a6:3b:5e:d9:4c:97:b8:82:77:52:8e:64:c1:
62:b2:ee:48:6c:be:8b:35:88:89:b9:7c:62:d9:fc:
d9:03:0e:42:69:27:53:1d:ec:57:cb:67:40:ca:44:
71:b0:90:21:88:55:98:dd:80:61:9a:92:10:f1:fa:
42:4c:5c:33:df:ca:79:ea:5c:14:ca:60:a3:6c:6d:
e7:8d:6a:81:98:27:d8:1e:64:5d:05:c4:55:0a:78:
ac:d6:01:6f:eb:6a:5b:e0:f3:f9:a5:77:98:6e:2e:
c1:2c:1e:e3:4f:a2:5c:0e:b0:4a:70:56:b3:fc:39:
26:c5:ee:8c:4b:7a:66:8f:57:45:f2:83:21:0d:2e:
42:96:82:e9:17:37:9a:84:76:da:3c:68:38:31:be:
ad:6f:93:38:92:ed:00:5f:58:0e:2e:7b:37:6f:fb:
11:83:6d:30:a1:00:d2:db:4f:17:82:c7:87:7b:16:
c1:72:3a:a8:b8:bb:4c:02:3f:77:1f:f4:ca:6e:b3:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:71:38:33:B8:58:C3:1D:BD:FE:4A:7B:8B:21:AB:E7:96:83:E3
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/x_txODO4WMMdvf5Ke4shq-eWg-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.117.230.0/23
131.117.233.0/24
185.21.136.0/24
Signature Algorithm: sha256WithRSAEncryption
03:10:f1:14:97:79:bb:9c:8e:d6:e1:8a:dd:c7:27:c0:cf:95:
dd:ed:8a:ce:0d:8b:5a:7f:58:90:e0:f6:75:4f:6e:f0:be:29:
3b:ab:8d:6a:ad:b0:3d:df:9e:ba:7e:95:b7:43:ad:ce:8f:c3:
45:fd:4f:01:dc:04:bf:16:98:79:03:05:a1:a5:f5:08:51:31:
9c:80:40:7d:79:0a:74:46:c2:42:a5:9b:7f:08:12:29:b7:43:
ab:89:6e:83:49:88:ff:f7:73:c1:87:01:a1:eb:2a:9d:1c:3b:
ec:75:e1:25:09:d9:da:aa:65:79:3e:25:d6:3e:4e:32:81:94:
d7:a2:36:b7:7f:75:cb:e2:f9:e4:10:44:c3:3b:ce:8e:46:cd:
4a:9f:cb:a0:35:80:18:36:68:93:4c:66:c5:92:e9:93:9e:48:
5d:61:82:68:f8:1c:be:6a:51:1d:f9:9a:72:e0:96:ea:6a:35:
1e:04:54:b9:cb:ed:8b:a7:29:8d:66:08:1f:4a:2e:57:bc:94:
27:44:2e:7d:bb:15:66:c7:f7:4f:32:7f:38:ea:ff:9f:ea:6c:
ca:49:96:44:36:a8:27:81:4a:3c:31:99:ca:41:d5:66:62:a5:
15:96:00:06:e4:32:a3:66:f4:ab:92:dd:e5:b8:4c:94:45:ec:
a5:a8:08:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org