Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/5XQF9YacWVTuiYVYkqQGLmUpXw8.roa
File: 5XQF9YacWVTuiYVYkqQGLmUpXw8.roa (raw, json)
Hash identifier: bS/ReGsO2nLYO6O9YDyQZiw6n3A9ViB3CrbfzEEXRPo=
Subject key identifier: E5:74:05:F5:86:9C:59:54:EE:89:85:58:92:A4:06:2E:65:29:5F:0F
Certificate issuer: /CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Certificate serial: 01856CAEF9990B2395D97B59F0383A81637C
Authority key identifier: 9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/5XQF9YacWVTuiYVYkqQGLmUpXw8.roa
Signing time: Sun 01 Jan 2023 09:34:44 +0000
ROA not before: Sun 01 Jan 2023 09:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 213.217.10.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f9:99:0b:23:95:d9:7b:59:f0:38:3a:81:63:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Validity
Not Before: Jan 1 09:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e57405f5869c5954ee89855892a4062e65295f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:03:e0:68:15:29:9f:b8:d8:7b:29:d1:41:
b6:e3:be:75:6b:78:16:ab:38:53:61:fe:67:82:b2:
a7:a6:81:a5:ab:c5:05:db:20:4e:db:87:63:b4:33:
00:46:27:c5:61:f7:e6:9a:de:e7:4f:71:64:a4:fc:
ee:14:fe:ac:fe:cb:00:21:25:8f:a9:2b:f0:48:8e:
5f:94:6d:ec:d9:83:6b:33:29:0b:ec:73:62:b6:a0:
3c:a0:c2:0d:11:ad:8c:9d:81:e8:c9:e4:79:98:e2:
f6:3c:d7:e6:66:6f:60:24:ef:42:c2:62:42:3f:7e:
90:a0:92:2b:94:27:13:c7:16:c0:58:61:55:c1:46:
81:8f:10:8b:62:c2:de:88:37:9f:2b:31:7c:69:bc:
04:fd:bf:37:d5:41:44:70:47:92:d0:48:28:29:a1:
16:47:6e:56:2a:ec:6e:bb:14:71:ef:f2:e0:ac:b8:
d6:c5:23:5b:a4:f3:b3:cc:f6:17:e9:b3:cb:8c:4f:
fd:fd:da:f6:33:96:0a:1b:aa:6e:cb:14:e5:f5:75:
cc:34:9e:0c:26:2d:64:4f:3d:49:80:80:7b:2b:37:
d2:e9:5d:73:d9:db:98:f0:20:6c:a2:50:39:63:40:
94:74:29:54:5c:12:31:1a:4c:1a:13:ff:dc:a3:a3:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:05:F5:86:9C:59:54:EE:89:85:58:92:A4:06:2E:65:29:5F:0F
X509v3 Authority Key Identifier:
keyid:9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/5XQF9YacWVTuiYVYkqQGLmUpXw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/m-qj9BJK5PuNNsQWprGQAmqe23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:49:32:02:1e:27:55:34:e7:40:45:4c:2a:4f:bf:89:c8:7b:
a5:bb:77:5e:04:b7:e6:3c:8e:c4:32:69:20:c8:8b:db:09:86:
02:76:79:22:69:14:ba:0b:86:29:88:85:6e:c9:f8:c5:7c:a8:
a8:34:be:e3:c7:16:0b:ce:cb:72:e3:f8:99:c2:bb:f9:fb:90:
18:35:e2:12:05:a7:e5:02:63:30:00:f2:f8:2f:57:da:33:d2:
e6:8d:44:73:6e:62:6f:18:c0:e6:8e:02:f3:df:fe:5a:2f:04:
23:68:ae:f0:c2:a5:f8:97:d0:68:c2:eb:26:f2:e7:fc:98:b0:
ae:f4:07:0e:9c:4d:86:05:d5:70:d6:f7:95:ca:88:c3:db:a9:
9c:10:d5:e9:a3:22:7f:b5:78:6b:b3:c6:97:be:60:bb:63:4a:
a4:ad:4a:65:9b:d5:42:3e:4d:3e:ce:fb:be:b2:66:f9:98:15:
e8:07:de:98:2b:37:e3:ea:f5:96:70:47:44:7b:21:ee:93:99:
15:c5:4e:ac:d9:19:a8:49:3c:fa:39:43:8e:33:65:e3:9c:36:
12:b6:13:35:a7:cd:2f:10:ac:da:38:46:65:9e:0e:57:3f:b1:
ad:11:a8:37:b7:0a:27:a5:73:e5:a5:27:8b:29:ca:b9:74:3d:
7a:78:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:35 2024 by rpki-client on console-ams.rpki-client.org