Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/XduleO0fUNsHgud8cnxrgQCyeHs.roa
File: XduleO0fUNsHgud8cnxrgQCyeHs.roa (raw, json)
Hash identifier: /G1L9r1c6kg+hnYuj78mEuYd+9UiBqKLMoVM5KqSq0I=
Subject key identifier: 5D:DB:A5:78:ED:1F:50:DB:07:82:E7:7C:72:7C:6B:81:00:B2:78:7B
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 01915AABA0C22B4B0B3A4A5798D88B007564
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/XduleO0fUNsHgud8cnxrgQCyeHs.roa
Signing time: Fri 16 Aug 2024 10:11:22 +0000
ROA not before: Fri 16 Aug 2024 10:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 91.204.76.0/24 maxlen: 24
195.34.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 11:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:ab:a0:c2:2b:4b:0b:3a:4a:57:98:d8:8b:00:75:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Aug 16 10:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ddba578ed1f50db0782e77c727c6b8100b2787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:8f:8b:51:73:8b:15:57:dd:75:b0:a8:2b:
72:56:d4:f3:9b:45:87:4a:c0:19:3e:0c:10:e6:60:
45:e9:cb:f2:f3:b1:e4:c7:1f:0d:ed:b6:bf:cb:34:
3c:34:0c:a5:04:7b:68:9b:77:82:38:9c:d4:6c:ef:
13:44:ea:d5:25:88:8e:90:3d:d4:6d:cc:8e:49:9d:
13:7b:8b:ff:5d:95:7e:2d:0d:52:15:69:f6:10:67:
df:0d:15:8e:f4:a2:b7:1d:bb:67:02:00:41:1c:ad:
16:9b:e6:e1:37:b7:76:a0:7e:7c:58:d0:dd:28:4b:
10:40:1b:ca:97:7a:ae:fb:8a:43:11:7c:44:09:d6:
6c:65:e7:16:10:ae:39:72:6b:25:c5:41:45:8c:b4:
46:c0:42:f6:41:cd:4d:8e:86:9a:0e:3b:92:37:19:
7f:3c:d3:34:71:0c:eb:fe:ec:99:bb:bc:d0:60:96:
96:70:58:61:19:4e:d9:92:79:99:67:30:01:80:c4:
78:9e:e7:6f:a3:da:a6:89:22:01:3d:b2:d8:97:f4:
9d:0b:91:56:64:4c:1e:eb:e6:d7:21:82:40:6f:ac:
a9:66:6a:46:03:d3:1a:fa:96:60:e8:be:b6:b7:41:
67:06:5e:c0:84:3f:b2:13:83:03:0e:08:47:22:4b:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:A5:78:ED:1F:50:DB:07:82:E7:7C:72:7C:6B:81:00:B2:78:7B
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/XduleO0fUNsHgud8cnxrgQCyeHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/24
195.34.94.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:75:a7:84:37:8f:b6:c5:ff:3e:79:fe:00:fc:f5:ab:3b:56:
47:a7:9d:f7:0e:06:8e:aa:aa:ab:5a:c2:e9:71:eb:7a:fa:55:
58:0c:de:66:20:07:a6:57:72:6c:e2:8c:16:c5:39:1a:da:2e:
bc:50:61:95:60:cd:07:8d:13:1b:ef:ab:42:65:4d:8a:ae:17:
48:96:5d:3f:08:a6:37:39:f9:d8:c8:68:6c:97:b5:8d:2b:27:
cc:61:4e:af:ae:b6:da:a7:c6:d7:5e:ec:93:aa:04:ba:8a:51:
79:89:6f:30:24:48:6d:63:b1:62:82:d5:6c:5d:7f:6f:4a:93:
1a:97:98:ca:da:d2:54:43:82:62:ec:57:d7:e1:8a:07:cc:6e:
51:f7:82:41:9e:65:a4:98:39:78:84:08:c9:fd:ea:38:2a:2a:
d4:e8:e0:93:75:6d:04:b7:d2:c6:07:4f:b1:86:92:db:46:e2:
b8:17:bc:bb:c9:b6:fe:c0:05:33:45:bd:79:eb:a8:55:8c:d7:
b7:cc:fc:4d:ed:de:20:12:37:e2:4d:3a:b2:3a:6e:a2:1e:37:
de:1b:50:3a:7f:61:8c:d0:3c:6c:5d:ab:21:b1:62:63:2c:61:
73:d8:59:a6:94:d5:2a:d7:8d:5f:ff:bc:d2:f1:a1:e5:65:ed:
35:17:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:31 2024 by rpki-client on console-ams.rpki-client.org