Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/xJK_3pHQnTatHyNXFvwj09bMTX4.roa
File: xJK_3pHQnTatHyNXFvwj09bMTX4.roa (raw, json)
Hash identifier: 5mhHy2flK47OJWEMrRJfsvtUqoJLEgSjh4vYfVR1co8=
Subject key identifier: C4:92:BF:DE:91:D0:9D:36:AD:1F:23:57:16:FC:23:D3:D6:CC:4D:7E
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 018A6EA22362D598AD633AAB66256FDB4D71
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/xJK_3pHQnTatHyNXFvwj09bMTX4.roa
Signing time: Thu 07 Sep 2023 07:53:54 +0000
ROA not before: Thu 07 Sep 2023 07:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 192.144.52.0/22 maxlen: 24
185.161.252.0/22 maxlen: 24
193.9.40.0/22 maxlen: 24
45.83.112.0/22 maxlen: 24
185.181.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:a2:23:62:d5:98:ad:63:3a:ab:66:25:6f:db:4d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Sep 7 07:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c492bfde91d09d36ad1f235716fc23d3d6cc4d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:a9:4c:47:bb:b0:2b:68:17:2d:3b:0e:cd:
bf:2d:79:8d:33:ef:44:64:a6:e2:fc:1c:97:13:9f:
07:4e:cc:fa:f1:07:0b:bc:b1:5d:b1:81:0f:cb:f1:
ac:b0:62:94:e1:1c:1f:eb:6c:7d:a1:32:1e:bf:2d:
f4:7c:45:14:68:a4:51:f6:7e:d2:06:bc:df:63:2b:
5c:5b:bc:aa:da:20:5e:24:5c:13:4b:cc:6e:8f:1c:
94:63:64:2b:3b:ed:5c:ae:ac:0a:50:7c:ed:e8:b4:
86:50:27:55:34:b5:b8:c6:4b:bc:3f:89:99:bd:1e:
20:fa:2d:74:ca:5f:a0:41:0b:ca:1a:52:a8:21:b1:
25:95:2d:34:c0:72:bf:ef:14:c9:88:f7:6e:26:90:
48:14:1f:79:d2:b7:7a:ce:3b:da:b2:19:bc:8f:c0:
8b:ce:09:53:6b:bb:a3:cd:88:63:bc:f5:5b:5b:55:
65:07:73:06:73:69:05:6e:45:81:98:06:ce:fc:89:
98:07:33:25:be:8e:34:c7:b9:e8:a5:e5:85:25:90:
b7:c1:e6:ff:f1:b5:f3:ea:44:e8:11:ee:4f:79:7b:
21:4b:64:31:c0:0c:5d:b7:29:d3:5e:f4:84:30:86:
cd:75:cc:7f:79:a0:a1:17:37:a8:bf:4a:88:b0:14:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:BF:DE:91:D0:9D:36:AD:1F:23:57:16:FC:23:D3:D6:CC:4D:7E
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/xJK_3pHQnTatHyNXFvwj09bMTX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
185.161.252.0/22
185.181.56.0/22
192.144.52.0/22
193.9.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:5c:8e:e9:60:8c:de:2a:28:54:01:7c:af:a1:75:e6:33:a1:
a9:15:a8:6d:7f:77:6d:f2:59:ee:ca:30:87:57:fb:fe:2c:8d:
83:83:2d:cc:0b:89:b8:6b:96:99:d6:b0:dc:c1:c3:c7:8e:40:
a5:88:28:18:f5:8d:fa:fd:9c:4e:81:9b:43:e5:33:40:7b:4c:
15:22:8a:04:2e:f6:8a:6c:57:8e:5d:f0:27:da:ef:e9:9e:dc:
69:27:95:8a:a1:fc:0c:21:52:c0:dc:72:e7:12:d7:cd:b2:b3:
29:af:68:d9:da:82:2a:fe:ef:34:f9:41:38:aa:4d:fc:8c:ac:
27:84:0a:5e:02:fc:f6:22:95:b9:18:80:86:c2:a8:3c:4d:8e:
2d:1a:69:e5:47:fa:ab:f3:b8:65:a8:8c:ae:f1:7f:20:8d:b0:
2f:4e:e2:d1:6f:98:44:68:e8:71:5e:ac:c4:18:c3:85:d6:c3:
8e:b6:d4:e8:30:72:ea:6c:28:8d:98:ad:b5:11:fa:63:1b:16:
ea:27:b8:30:64:16:77:91:26:5d:20:c1:2c:20:ef:74:23:ac:
22:2e:7e:66:01:4a:71:84:96:48:e6:36:a4:e8:ca:9c:5e:5d:
66:97:59:9a:85:ec:6d:73:35:3f:a4:d3:36:01:99:5b:63:7c:
f0:46:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:05 2024 by rpki-client on console-fra.rpki-client.org