Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/XCLP1_7kx94PqefmiPnj-BcuVSg.roa
File: XCLP1_7kx94PqefmiPnj-BcuVSg.roa (raw, json)
Hash identifier: +XbRm54024J5ca/lHDxTmafexBYAYZly3yX6ZXfjFHg=
Subject key identifier: 5C:22:CF:D7:FE:E4:C7:DE:0F:A9:E7:E6:88:F9:E3:F8:17:2E:55:28
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01856F66F559045016D2F3EBDB6BACA450CD
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/XCLP1_7kx94PqefmiPnj-BcuVSg.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209411
IP address blocks: 209.16.142.0/23 maxlen: 23
45.141.168.0/22 maxlen: 24
2a0e:ce40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Apr 2023 16:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f5:59:04:50:16:d2:f3:eb:db:6b:ac:a4:50:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c22cfd7fee4c7de0fa9e7e688f9e3f8172e5528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:f1:b8:17:3d:b7:3d:40:a2:ee:79:32:01:
d0:43:49:4a:63:30:02:ea:a9:29:14:80:e9:15:95:
48:3d:e2:b6:ef:6a:b6:15:58:e3:23:40:51:72:13:
00:dd:4f:4b:f5:90:b3:32:93:f5:d8:c4:03:ee:cb:
81:ba:6d:4c:af:d7:f0:a4:71:55:28:ea:6a:23:5f:
b7:c1:3a:9f:8e:88:42:8c:be:58:f5:e4:6a:50:67:
c9:c8:b0:15:d1:75:4b:9a:3e:3b:35:eb:d7:b8:ec:
be:a2:2e:74:49:99:14:8b:35:83:bc:1b:76:d4:f5:
c5:42:2c:6a:d1:72:b6:f1:16:54:a7:a7:97:8d:5d:
b7:90:04:ba:a4:db:15:a5:a8:25:b1:b4:66:0d:87:
f7:9d:25:96:e8:93:cb:61:61:aa:e4:a0:29:d0:37:
7d:76:c7:d3:46:d0:54:be:dc:97:f7:78:6f:d9:41:
f1:29:79:75:fe:dd:dd:79:93:b5:bd:08:2e:f4:cb:
95:fb:e1:40:47:36:41:81:6b:07:b0:e1:00:cf:d2:
55:3d:42:53:68:dd:2c:ec:d8:5f:3b:aa:10:46:91:
d5:aa:c6:87:9e:25:2a:57:f0:4b:38:d9:40:14:81:
43:37:16:5d:a0:b4:45:2b:c4:a6:92:cc:6a:19:80:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:CF:D7:FE:E4:C7:DE:0F:A9:E7:E6:88:F9:E3:F8:17:2E:55:28
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/XCLP1_7kx94PqefmiPnj-BcuVSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/22
209.16.142.0/23
IPv6:
2a0e:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
98:de:3f:f9:73:1f:d3:a2:48:cd:b2:c8:16:a7:cc:e2:db:e1:
28:df:f7:41:01:38:81:81:5a:b1:ee:ed:33:1d:f4:a2:ec:4b:
08:bf:91:ec:c6:8c:cf:a6:b8:b4:5c:27:ce:38:51:34:36:3a:
b1:cf:a5:79:78:2a:77:c7:5c:d4:c5:22:7d:51:56:b0:9b:76:
4f:4c:2b:db:dd:ce:d2:c5:dd:93:81:30:28:34:63:6b:cf:e9:
09:a1:c1:8f:e4:98:51:77:64:15:e6:b7:54:31:5d:b6:e1:9c:
2a:78:b3:b2:28:9c:2e:ae:b5:9a:55:fd:c1:46:8c:e1:2e:43:
af:10:91:f6:31:d0:e6:6f:8a:b7:37:5a:0e:67:c6:b2:3e:5f:
5f:14:e2:dc:4b:07:e7:0b:df:17:08:55:5c:63:5f:b2:89:98:
ae:52:a9:ce:01:74:5f:0c:ba:3f:d2:66:cd:dd:5d:c0:3c:6d:
6e:f5:59:29:57:3b:4b:e8:c1:a3:63:14:c5:37:97:cd:e1:21:
2a:da:9f:d8:e6:40:bb:90:97:44:77:00:71:e4:9c:65:10:2f:
e5:1f:b3:6c:e2:89:1a:69:e0:bb:15:10:c3:c4:69:bf:82:ff:
f3:52:4a:58:ce:ba:19:a3:65:36:24:23:34:5f:e5:28:da:44:
9e:04:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org