Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/XDmvizJ6_xG61SSKSydIRLtvP4w.roa
File: XDmvizJ6_xG61SSKSydIRLtvP4w.roa (raw, json)
Hash identifier: xBoRaQDcizfs2v4BAPYYBwn5x5zY2gZarOtIworZ8Rk=
Subject key identifier: 5C:39:AF:8B:32:7A:FF:11:BA:D5:24:8A:4B:27:48:44:BB:6F:3F:8C
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018C10FA33734CC815D250E1D2BEEA11004B
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/XDmvizJ6_xG61SSKSydIRLtvP4w.roa
Signing time: Mon 27 Nov 2023 13:31:21 +0000
ROA not before: Mon 27 Nov 2023 13:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205022
IP address blocks: 193.232.73.0/24 maxlen: 24
193.232.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:fa:33:73:4c:c8:15:d2:50:e1:d2:be:ea:11:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Nov 27 13:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c39af8b327aff11bad5248a4b274844bb6f3f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:e5:4c:16:3f:6b:56:1e:fb:cc:4a:39:08:
2d:78:e8:6c:ca:73:97:e2:ce:09:ec:80:7f:ed:9b:
9b:98:db:0f:78:7a:28:f2:57:a9:2a:e1:a7:1a:4b:
6b:3d:fe:23:2b:c7:06:a4:36:58:00:44:b2:94:81:
a7:91:25:a3:b6:e8:07:82:91:be:e2:15:66:a6:44:
0e:a2:b2:b8:6a:a3:c9:98:70:e5:47:bb:69:25:02:
82:f7:a8:0f:61:93:d2:ba:2a:12:4f:9a:f4:06:e0:
31:a8:4c:a0:32:30:5f:3a:41:49:28:f0:a6:15:f7:
b9:46:93:5c:76:99:97:49:ee:1a:23:c9:e0:fc:48:
83:59:40:c8:b2:e9:a7:7b:98:15:12:cc:19:6e:8d:
af:19:a0:87:72:6f:31:85:49:47:17:33:37:6f:75:
a3:67:69:80:9c:36:cd:7f:f1:b7:91:34:3c:1e:20:
33:09:07:fa:74:35:45:35:20:5c:f1:0b:c0:1c:87:
0b:4b:6d:37:48:9d:f7:4a:e1:07:42:90:69:cc:14:
8d:f8:7c:a7:be:ee:9f:e5:ec:0e:29:72:43:52:1b:
9f:7f:7c:d3:c8:7f:98:b5:44:a8:40:88:87:62:10:
3b:1f:39:15:92:d3:e1:78:78:1a:7b:cd:91:0c:78:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:AF:8B:32:7A:FF:11:BA:D5:24:8A:4B:27:48:44:BB:6F:3F:8C
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/XDmvizJ6_xG61SSKSydIRLtvP4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.72.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:0c:6a:30:e4:85:f1:5a:61:c1:05:4e:22:c6:12:1e:50:b6:
c2:f6:19:19:f1:7e:95:f2:88:b5:44:c0:de:25:8c:41:f3:aa:
b3:09:75:a7:94:88:44:a8:a0:ae:dc:3d:e4:13:21:8a:31:e6:
d2:8f:4a:fa:c4:61:7d:d5:bc:2e:e1:80:31:6f:d0:0b:40:18:
dc:7a:b1:65:97:a2:3a:4f:e8:50:22:a1:eb:ac:a3:77:7a:c0:
4e:56:ca:8c:e5:98:cc:af:fd:74:82:b1:7b:ac:cf:e0:6c:fc:
1a:a3:e1:b8:f2:ea:ad:14:2f:49:b6:61:03:37:dd:62:da:9d:
5f:56:06:85:20:87:3b:92:05:5a:61:b2:1a:39:3c:4b:03:ad:
47:09:9d:ce:a7:b0:05:2a:64:54:03:bd:e8:b7:c5:00:f3:dd:
f2:1a:fc:12:5a:47:3d:e4:81:c0:b6:a6:57:79:e8:b8:17:15:
9c:7f:a2:63:bb:4c:d7:88:e7:59:02:9b:99:f7:60:dd:b5:32:
18:e6:1d:e2:e5:01:0b:8d:f4:dd:6a:01:ec:ed:d2:a7:cc:cb:
32:f6:d9:a6:39:cc:30:d9:0c:a6:f7:eb:ec:87:c5:37:d9:ab:
42:87:cf:f9:88:b7:62:2d:35:01:21:60:05:85:50:18:98:0a:
82:49:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:05 2024 by rpki-client on console-ams.rpki-client.org