Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/xil_zBNDpMmPkPeZ6_AVs8cueys.roa
File: xil_zBNDpMmPkPeZ6_AVs8cueys.roa (raw, json)
Hash identifier: B6mNM4esXGN17wXwLp37BR9I+h96g37D5wkOpNSrv5s=
Subject key identifier: C6:29:7F:CC:13:43:A4:C9:8F:90:F7:99:EB:F0:15:B3:C7:2E:7B:2B
Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial: 01892A8D7FEEA8F3DD689EB9393B3CCC4B3C
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/xil_zBNDpMmPkPeZ6_AVs8cueys.roa
Signing time: Thu 06 Jul 2023 09:34:23 +0000
ROA not before: Thu 06 Jul 2023 09:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60126
IP address blocks: 185.46.234.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:8d:7f:ee:a8:f3:dd:68:9e:b9:39:3b:3c:cc:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Validity
Not Before: Jul 6 09:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6297fcc1343a4c98f90f799ebf015b3c72e7b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:64:fe:84:59:8b:41:4c:cb:ba:c1:75:a5:
47:db:00:bf:87:a0:28:9f:7b:b0:39:8e:3e:5f:a1:
5c:23:c6:c7:45:44:9a:6f:cb:2c:a7:aa:6c:59:d0:
94:74:b1:64:f8:e3:50:80:56:6e:df:48:50:3f:b3:
38:68:3b:1d:9e:de:2e:d8:af:09:42:36:a9:4f:9a:
aa:69:0a:d1:ef:0b:82:6a:e9:a3:72:75:ec:f8:87:
b5:92:41:4b:83:6d:e3:59:1b:67:52:31:07:97:f3:
0e:36:e1:c3:b8:ae:16:e1:b3:df:5d:07:bd:70:35:
c7:03:4c:67:13:b6:3a:9e:5d:41:da:e2:c9:43:08:
82:d2:48:fe:c9:ec:1d:a9:8b:41:b2:77:8c:1c:98:
32:88:f9:83:0a:62:e0:87:79:a9:46:67:44:fb:a3:
0a:2f:a1:87:c6:dc:c8:ae:16:51:c0:c0:e7:8d:06:
ed:e3:85:9c:cc:6e:f7:fe:f0:f7:ec:bc:ef:62:30:
c0:db:d4:e9:51:f8:65:2e:05:1d:5f:27:01:b1:29:
0f:46:c0:11:c0:76:c7:d5:eb:83:a2:ea:8e:60:71:
9c:77:ed:a5:fe:d6:60:a4:91:7f:30:44:d3:76:0e:
8b:cd:9b:f8:23:d5:96:49:85:d7:dd:bf:32:69:c3:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:7F:CC:13:43:A4:C9:8F:90:F7:99:EB:F0:15:B3:C7:2E:7B:2B
X509v3 Authority Key Identifier:
keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/xil_zBNDpMmPkPeZ6_AVs8cueys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:95:be:95:59:f6:3f:cd:18:f7:9d:79:dc:d7:31:f1:bd:9c:
e2:69:b6:43:c4:57:2e:88:4a:fa:06:c4:11:0e:56:f1:b2:c3:
8d:14:b6:ff:89:29:14:09:43:d1:71:5d:3a:72:59:77:00:7a:
ad:a6:19:c9:27:56:74:04:25:73:16:0e:e7:65:dd:f4:91:09:
90:15:b6:ef:9c:93:af:5b:5c:fe:4b:26:f5:11:40:c7:15:14:
dc:bb:00:71:28:2d:21:c5:62:b4:6a:70:4a:14:fc:e5:91:82:
23:ad:e0:60:b0:e0:d5:6c:fe:e0:c0:57:ca:df:0a:3b:6a:5e:
e6:89:88:17:f9:f8:6c:23:d6:4e:32:d0:95:d0:b2:bc:55:45:
49:53:60:83:e2:0d:ef:7d:27:4c:da:2a:d0:06:71:78:bb:79:
84:43:1b:ca:05:c4:c4:a5:40:08:ea:6e:a3:d5:42:05:d3:df:
5d:8a:d4:f6:4d:c9:3a:a8:58:de:86:55:24:7b:7b:50:66:90:
f8:fc:6b:cc:3b:54:97:c8:63:be:7c:3c:13:e3:1b:c7:0b:f3:
c7:1e:88:50:eb:54:c7:8d:5b:c9:6a:5c:10:b5:bc:98:88:25:
1a:61:c0:6f:2e:18:0f:6d:c6:16:61:0c:aa:ec:9d:61:65:55:
0a:71:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:01 2024 by rpki-client on console-fra.rpki-client.org