Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/XzhLDyWaXSCafHQDWCkU8B-ugL8.roa
File: XzhLDyWaXSCafHQDWCkU8B-ugL8.roa (raw, json)
Hash identifier: DXT+Sz0fzTCHOSrZv4hAxUHurRUUnp1YJA9ay/pr+B8=
Subject key identifier: 5F:38:4B:0F:25:9A:5D:20:9A:7C:74:03:58:29:14:F0:1F:AE:80:BF
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 018BFC13DD288F0973B0EDDC12AE8E93026D
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/XzhLDyWaXSCafHQDWCkU8B-ugL8.roa
Signing time: Thu 23 Nov 2023 12:07:22 +0000
ROA not before: Thu 23 Nov 2023 12:07:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 146.19.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:13:dd:28:8f:09:73:b0:ed:dc:12:ae:8e:93:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: Nov 23 12:07:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f384b0f259a5d209a7c7403582914f01fae80bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:f9:b6:62:99:26:46:8f:1f:c6:43:a3:45:
ea:a6:e9:bf:94:58:5d:07:a1:5a:ed:ac:1d:99:79:
9a:07:3c:60:92:80:db:bd:09:17:9e:f8:c1:9c:e1:
b3:23:f9:f1:e4:f4:d2:79:04:16:1a:da:ef:64:15:
32:45:a4:25:83:23:c1:b0:1e:88:71:4f:73:79:02:
03:10:85:6a:d2:d2:e5:05:6b:1e:ed:4a:8d:fb:42:
91:ab:d9:9e:f5:7d:10:ab:54:c6:9e:9c:dd:65:02:
6b:d9:d1:1d:9f:84:bd:84:a1:46:56:bf:3d:ad:3a:
c9:74:6a:28:2d:0b:49:07:0b:9d:4d:1b:a5:f6:fa:
2d:8d:d8:11:6e:f7:f1:23:6f:7c:69:5d:87:b7:53:
86:ba:ec:6c:42:1c:19:39:60:ce:7c:aa:00:9e:2c:
45:29:c4:78:74:a3:4e:6d:f2:9a:3a:f6:ed:a8:11:
bf:03:c4:e6:5d:3d:1e:f5:f0:bf:93:ec:a8:6e:fa:
0a:00:8e:18:26:ff:2d:98:fe:65:a1:b6:e8:7c:c3:
28:8c:12:d1:52:33:de:7d:3f:4b:f4:f7:76:44:26:
50:54:a3:19:c3:03:7c:51:d1:e6:c8:e0:ad:40:31:
3e:0e:91:0e:1d:bd:5c:ac:3f:fe:2e:ab:aa:39:6b:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:38:4B:0F:25:9A:5D:20:9A:7C:74:03:58:29:14:F0:1F:AE:80:BF
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/XzhLDyWaXSCafHQDWCkU8B-ugL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
21:68:d3:bb:50:b2:40:18:a1:14:59:e6:05:a8:0f:e1:c2:8b:
93:79:c7:57:ae:97:49:ec:b8:37:a5:dc:d7:97:39:56:3b:9f:
6d:93:0a:1d:79:fa:37:87:67:10:19:be:5b:62:f7:5c:16:fc:
c0:f7:34:db:d5:00:1b:fa:9c:39:72:c0:d9:31:e7:57:52:13:
60:cc:9a:31:7e:fa:17:87:cb:e5:00:40:5c:a8:cf:f9:ac:94:
a6:51:25:51:8b:dd:a0:78:9a:c4:43:d7:f4:39:ef:8b:6f:ac:
2e:34:75:91:6d:34:d5:cb:8c:3e:c6:39:ef:c4:c2:12:c1:f7:
59:28:27:eb:4d:c7:41:6d:8e:71:75:a1:ed:05:39:cf:a1:b4:
aa:81:57:04:40:d7:09:80:ee:74:9d:50:9f:50:da:54:56:f5:
92:6a:9c:60:ca:e1:22:4d:7e:bf:57:e7:93:a2:b9:4d:6a:ac:
ea:18:f9:fe:ea:89:8e:44:a3:47:30:f5:d5:a2:5a:9f:e2:ba:
6c:cb:b8:57:28:67:3a:11:48:85:aa:c6:eb:7c:4c:11:b0:48:
05:ef:36:53:ce:11:9d:f2:9a:29:77:a1:55:4b:b0:9b:3b:8a:
7b:d0:7f:ee:12:43:4a:2f:c7:dd:41:33:81:b0:1e:9b:82:17:
f3:e4:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:35 2024 by rpki-client on console-ams.rpki-client.org