Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/XIp8A30LnvvP5miid8e4xMo92Y0.roa
File: XIp8A30LnvvP5miid8e4xMo92Y0.roa (raw, json)
Hash identifier: BPni4LLeOlmEI71lyLOiEWSA5wDkjMizEmrzUxHJfCU=
Subject key identifier: 5C:8A:7C:03:7D:0B:9E:FB:CF:E6:68:A2:77:C7:B8:C4:CA:3D:D9:8D
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 01856D8AE17D67900689634EBDE2CA683853
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/XIp8A30LnvvP5miid8e4xMo92Y0.roa
Signing time: Sun 01 Jan 2023 13:34:56 +0000
ROA not before: Sun 01 Jan 2023 13:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 155.231.110.0/24 maxlen: 24
155.231.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e1:7d:67:90:06:89:63:4e:bd:e2:ca:68:38:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jan 1 13:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c8a7c037d0b9efbcfe668a277c7b8c4ca3dd98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:bf:c3:33:4c:b2:ee:a8:79:48:21:d7:47:
b9:ea:10:b5:22:1d:2d:b2:e4:4f:98:98:bf:1f:9a:
3b:4d:32:b6:bc:40:05:0c:ba:f4:42:c3:f5:62:44:
42:9b:24:ae:2d:9a:c1:38:0c:57:05:eb:06:d0:8f:
89:4b:32:4b:7b:d8:ae:66:c9:c2:0b:4b:24:fe:96:
60:0c:2e:a4:36:ec:c5:65:63:d0:2e:7d:d1:ac:05:
12:3f:51:ac:de:0e:b8:55:8d:98:13:70:d8:de:d2:
e5:d9:b5:12:b0:b9:94:70:9d:22:24:77:ff:73:cf:
c4:23:76:64:83:a7:fc:6e:17:7b:88:bb:56:fe:f6:
07:80:94:58:a1:27:c8:42:0a:59:32:60:66:ce:9d:
8a:e1:97:ea:af:1c:0a:c1:73:97:05:1e:2b:c3:6a:
9e:08:ba:da:9d:6d:57:c8:27:71:89:f4:9b:d9:3e:
52:32:ad:25:23:36:a5:08:bc:a6:ed:52:7e:ee:9d:
5b:68:01:8f:d9:85:03:69:b2:94:30:1e:7a:cf:d4:
12:2d:75:4a:ec:10:0e:d3:d7:55:c0:63:78:c6:6a:
ba:50:4f:c9:9f:ea:78:7c:fb:1e:62:1d:fe:9b:2a:
56:40:8c:bd:a5:e0:b3:d8:fb:12:7b:d9:1b:d3:cf:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:7C:03:7D:0B:9E:FB:CF:E6:68:A2:77:C7:B8:C4:CA:3D:D9:8D
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/XIp8A30LnvvP5miid8e4xMo92Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.231.110.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a5:8d:44:94:9e:07:cd:d5:b7:03:91:7c:99:4b:b9:af:b0:
10:6e:c9:cf:98:9f:55:aa:82:9d:1a:9c:87:a5:12:90:73:e5:
02:61:89:2a:11:5c:3b:51:ff:fb:ea:0e:32:0d:f2:a9:aa:40:
eb:74:36:f6:a3:12:29:4f:8b:e2:db:50:69:b7:67:b0:f0:13:
c8:08:8b:56:fa:83:4b:55:8f:8f:d1:9a:ac:23:ba:c8:2b:b0:
e5:48:21:30:96:a5:8e:a9:79:45:45:47:1b:06:de:11:11:57:
db:65:ba:cd:f1:88:13:6f:fc:d2:95:11:87:d8:76:42:f9:46:
ee:08:9d:0c:06:5f:7e:9e:46:44:53:b8:66:17:9c:10:ea:27:
d4:dd:83:44:09:8d:c0:2b:da:e8:11:f7:72:6b:b5:24:f9:4e:
bd:1f:3a:34:14:dc:25:61:e0:44:da:99:81:36:85:79:55:04:
bc:56:cd:0a:c3:1a:db:ea:d3:4b:ff:21:c8:c3:2a:f2:76:61:
1e:26:ff:1b:27:6a:b4:1d:98:5f:5b:ce:ff:43:25:00:41:9c:
d6:26:47:01:3f:f7:99:8f:17:61:19:45:1b:da:be:2b:b7:76:
fc:a1:a9:10:78:1f:38:01:c4:67:61:82:f1:57:fc:06:e4:17:
60:0c:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:35 2024 by rpki-client on console-ams.rpki-client.org