Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XLRTa341g_XztOVWIAfz5nVTRdE.roa
File: XLRTa341g_XztOVWIAfz5nVTRdE.roa (raw, json)
Hash identifier: aKFpeNGgHwTK7NJAwmckmk7OES6oQHoxSTyv69ukrjM=
Subject key identifier: 5C:B4:53:6B:7E:35:83:F5:F3:B4:E5:56:20:07:F3:E6:75:53:45:D1
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01856F54B6EB1E9F7D35D9F9323D67895C6E
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XLRTa341g_XztOVWIAfz5nVTRdE.roa
Signing time: Sun 01 Jan 2023 21:55:00 +0000
ROA not before: Sun 01 Jan 2023 21:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 81.29.145.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
81.29.148.0/24 maxlen: 24
81.29.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 15:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:b6:eb:1e:9f:7d:35:d9:f9:32:3d:67:89:5c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb4536b7e3583f5f3b4e5562007f3e6755345d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:64:97:01:c4:b2:e0:ca:46:c1:c0:c7:01:
89:08:36:d8:34:fb:eb:fe:cf:2e:7e:86:5d:d8:14:
d4:2e:23:f3:af:5a:a8:2f:31:a3:57:7b:9c:2c:e8:
99:e8:67:bd:a6:b1:9c:2f:e4:74:c0:8e:2f:cc:e7:
78:4b:6f:c7:ea:0a:eb:a3:7e:78:d4:5f:2e:b8:3d:
6d:f0:b4:a4:65:74:f2:45:39:82:67:b4:d8:2d:6f:
4d:8b:60:9f:b8:d8:2b:41:e8:ae:3a:57:41:52:ab:
a2:50:5d:bb:e4:cf:9a:6e:98:e1:13:8f:51:dc:bf:
4b:aa:ab:76:94:d4:cb:d6:6d:19:1f:2a:98:40:db:
64:ef:32:56:68:0e:51:db:20:32:8e:f9:fe:29:59:
26:f0:7b:6f:bf:fb:a7:62:a8:1e:1b:b5:b0:40:78:
2c:f6:2c:a8:8d:3b:f0:30:86:06:61:2f:d6:4d:04:
e5:44:b0:a3:2e:f2:8d:86:cb:53:1d:90:fe:a2:90:
a5:bb:a1:ef:f1:19:2e:6b:ac:5a:15:7a:13:03:6d:
3e:67:94:06:17:e6:be:4e:6d:70:d3:b7:57:a0:b0:
1e:fb:2f:60:27:54:bc:49:c3:31:0d:b0:99:86:f0:
ed:3b:29:5e:f3:dd:00:a8:ab:d7:ed:da:b5:f9:22:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:53:6B:7E:35:83:F5:F3:B4:E5:56:20:07:F3:E6:75:53:45:D1
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/XLRTa341g_XztOVWIAfz5nVTRdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
81.29.148.0/24
81.29.151.0/24
81.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:24:ec:c5:30:e2:cb:b6:89:a0:78:a6:0e:62:f5:ce:19:
1a:4b:37:de:31:00:ee:c9:1f:fb:dd:5c:f2:2a:68:6a:df:72:
97:eb:46:28:9c:c4:91:f7:c2:14:ac:3e:88:4e:8d:f2:48:23:
d4:09:9b:46:2c:4c:66:31:01:a2:f5:d9:03:1a:d4:09:aa:e2:
f5:a8:8a:ed:1b:6b:93:fd:32:b0:c7:03:c4:d8:c1:2d:b5:f5:
3f:89:3e:74:5e:44:53:e2:ad:12:61:52:e4:28:57:c2:7e:75:
33:43:ce:a0:ae:e6:d7:f7:0e:d2:98:72:d2:b5:fd:13:19:8f:
b4:10:cb:86:41:fe:b3:72:aa:f2:0c:74:a2:d9:07:ca:81:48:
5e:11:64:e9:8a:8b:3d:a9:86:0a:ea:00:cc:d9:ee:fc:fe:75:
22:e6:d0:c0:85:8d:de:10:98:cc:52:51:29:0d:35:94:ab:62:
12:c7:46:36:87:ca:4a:91:cc:72:76:4b:58:58:e3:82:7c:73:
e4:3d:f6:a5:27:04:cd:2c:37:57:43:38:8d:a9:21:40:92:d6:
b4:1f:0b:cc:34:34:bc:96:cd:36:e4:ff:53:7b:92:23:6d:74:
3b:5d:3d:60:52:1f:86:9c:98:27:70:cd:5b:fa:99:75:55:e4:
a4:be:fb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org