Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XQ1uHMzbcHAEgSA5CGVD86c2WH8.roa
File: XQ1uHMzbcHAEgSA5CGVD86c2WH8.roa (raw, json)
Hash identifier: B5dNI+B0ovZqa8+GcaSJcddJsJMoF2ryGqzICbUWV40=
Subject key identifier: 5D:0D:6E:1C:CC:DB:70:70:04:81:20:39:08:65:43:F3:A7:36:58:7F
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 018CC5DC31402CF2DDCB5585D9B709C4B792
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XQ1uHMzbcHAEgSA5CGVD86c2WH8.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 77.83.154.0/23 maxlen: 23
139.28.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 18:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:31:40:2c:f2:dd:cb:55:85:d9:b7:09:c4:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d0d6e1cccdb707004812039086543f3a736587f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:7e:48:44:91:26:8b:b9:5e:df:92:32:3b:
b8:4e:92:aa:d7:af:09:9e:07:d2:58:19:f9:cb:fe:
59:9b:e8:5a:c2:96:10:9d:f0:6c:bf:10:64:de:91:
24:80:3d:d5:5f:84:0a:f7:92:0a:29:58:1f:54:de:
2a:b6:13:00:db:c9:6b:81:d9:2f:f4:08:81:34:29:
0a:db:8f:0b:0a:48:4f:26:65:4b:5d:79:ac:3c:de:
f3:9c:88:b2:8c:5e:3e:2f:50:3b:15:3e:4a:b8:ac:
de:55:70:42:20:9f:a7:bc:94:d5:5c:7e:50:38:9a:
13:82:48:7a:5d:fb:c6:b4:6c:0f:ed:df:99:b0:e1:
85:a6:0b:4b:4a:b5:a0:c0:a3:d8:1b:57:1c:5e:1d:
f5:81:ff:1a:91:a4:db:61:ee:50:70:f8:47:58:fd:
33:b6:f6:90:93:b6:79:a8:f0:01:02:28:83:a0:60:
40:38:93:6e:ee:ac:40:3f:49:e7:22:33:a7:2b:5f:
66:11:83:76:cc:b5:62:8e:d5:c4:f8:36:d8:0d:9d:
cc:09:da:e9:2a:9e:0d:6f:06:04:90:29:69:bb:7a:
56:2c:9e:24:95:5b:0a:40:8a:67:f2:69:78:22:d7:
e5:19:6a:18:a3:12:8b:d0:cd:45:07:c8:72:14:72:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0D:6E:1C:CC:DB:70:70:04:81:20:39:08:65:43:F3:A7:36:58:7F
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/XQ1uHMzbcHAEgSA5CGVD86c2WH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.154.0/23
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:30:d9:48:fc:f4:d5:ee:04:40:d3:c5:38:d4:54:2a:38:27:
64:93:96:f7:6f:65:80:d2:bc:ac:c3:de:bf:94:a7:b1:c3:10:
1c:5f:12:cc:ee:ac:25:c9:8f:4c:3b:ac:4a:e4:bd:0d:d2:f0:
ce:27:4d:34:c5:2d:a3:07:e9:a9:26:06:e8:85:f8:ff:f0:77:
ac:32:e8:8c:22:76:88:f7:d3:ca:2e:5d:92:28:5c:f9:41:3d:
45:e4:c9:b3:6a:ae:c9:1c:f2:f8:26:51:09:71:77:a2:9f:56:
c1:5b:64:3d:93:2c:e6:cb:1e:84:19:e6:e1:10:c0:77:0c:e9:
54:82:62:6a:68:64:67:57:8c:d6:58:4e:74:e4:17:b6:d7:96:
ce:37:1f:37:a6:3d:8e:3a:34:84:92:f1:fe:66:57:8f:42:14:
73:b3:3e:29:d7:6d:04:b6:74:7e:68:5d:d7:9c:41:03:66:3a:
d1:88:3c:f3:78:2e:72:f1:40:67:bc:b7:3d:18:db:f1:d3:c4:
d0:b4:89:22:4b:b9:43:59:40:a6:ea:f2:ea:4a:5e:47:20:6d:
51:11:96:3d:c7:b2:6a:ea:ba:7a:dd:f8:8a:01:c8:ca:a8:fd:
1b:07:6a:e2:eb:2d:0e:e8:28:e3:c3:61:e2:87:9e:96:e0:8d:
17:b1:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org