Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/X4e0M8b30dnGheS_n0D9RtAEqdk.roa
File: X4e0M8b30dnGheS_n0D9RtAEqdk.roa (raw, json)
Hash identifier: 8k6kIRI93yKC1aCcQIsdc/og1c3281hWCxvVvwc2ptc=
Subject key identifier: 5F:87:B4:33:C6:F7:D1:D9:C6:85:E4:BF:9F:40:FD:46:D0:04:A9:D9
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 018C6CC96263F77F884D2881087CC8A4B31B
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/X4e0M8b30dnGheS_n0D9RtAEqdk.roa
Signing time: Fri 15 Dec 2023 09:23:06 +0000
ROA not before: Fri 15 Dec 2023 09:23:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5406
IP address blocks: 193.53.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:c9:62:63:f7:7f:88:4d:28:81:08:7c:c8:a4:b3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Dec 15 09:23:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f87b433c6f7d1d9c685e4bf9f40fd46d004a9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:ac:0e:21:50:36:f3:ef:3c:ee:46:75:ac:
21:70:90:b4:dc:c4:5e:d9:5a:81:da:85:35:a1:0c:
48:24:d6:5b:e5:66:07:26:1d:a8:b4:49:eb:4e:4d:
f3:8b:87:93:c8:82:59:38:ea:cf:2d:12:b7:49:ac:
c7:08:35:62:5a:5b:f9:0a:82:d6:d4:3a:4c:f6:ce:
4b:34:7f:b6:eb:27:32:fa:ce:1d:3a:65:59:b8:4d:
fe:13:63:33:7b:dd:a9:3e:2c:38:af:8e:0a:df:12:
a6:fe:b6:31:aa:f9:67:6c:74:2b:66:b9:1b:f5:6b:
70:a0:c9:b4:1f:31:e4:88:c2:3a:5b:85:1b:9b:c1:
3a:db:25:75:7b:ff:ea:c0:1d:d3:ee:d2:db:fe:f3:
8c:55:86:f4:7c:cb:75:7e:60:71:e5:72:fd:99:01:
0b:1b:c9:8d:bf:06:0c:2d:79:ae:fa:c4:19:e2:16:
85:88:da:7f:1b:77:4f:c0:7d:8c:dd:2a:d0:68:f3:
ac:47:8e:32:0c:e7:b2:fb:40:80:8f:ca:4c:df:bf:
b9:24:76:39:cc:50:d2:23:58:6d:5f:14:00:1a:af:
49:45:be:18:3e:66:10:1e:a4:b2:19:4f:ae:31:41:
42:ce:68:68:e9:39:35:82:d5:76:db:58:11:05:44:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:87:B4:33:C6:F7:D1:D9:C6:85:E4:BF:9F:40:FD:46:D0:04:A9:D9
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/X4e0M8b30dnGheS_n0D9RtAEqdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.125.0/24
Signature Algorithm: sha256WithRSAEncryption
be:40:21:c3:fb:8e:53:36:ca:3b:7b:20:0b:0a:aa:b8:99:a2:
0f:f3:11:f8:45:28:28:9e:df:5a:5f:01:40:67:0e:71:df:36:
99:9e:fc:62:8b:84:da:1c:6f:3e:0d:83:a5:b0:28:2e:1c:12:
85:44:03:c2:ad:2e:a5:23:a1:88:a6:dd:12:0e:1c:10:93:f7:
d4:4d:80:e8:46:d8:e1:41:cc:a6:2a:94:6a:b4:76:79:ff:75:
fd:b7:42:3f:36:ae:11:ad:e0:73:4d:8e:4a:7e:f6:36:bb:4a:
be:8b:68:07:b2:55:94:dc:2f:33:04:14:9a:b6:30:13:f4:80:
f5:7d:63:1c:50:c9:8b:68:ed:d9:dc:5f:36:9d:2c:f1:d8:32:
28:72:40:bf:9a:cf:07:74:45:0f:9d:70:df:97:d7:fc:58:69:
29:09:df:c3:03:f5:d2:71:32:5e:82:66:92:a4:e2:c4:59:7e:
54:5a:a9:f4:3a:8a:1d:c0:e0:cb:74:25:2f:0d:f1:47:25:91:
6c:f0:4c:7a:7f:be:9b:e2:56:b3:9c:96:d2:8a:7a:5c:c2:b4:
de:69:5e:e1:92:18:9f:58:b8:a8:67:f3:83:6a:4d:d5:df:96:
13:82:97:68:13:7a:85:f0:78:e1:3d:40:35:85:cb:4c:fb:9f:
ce:ff:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:39 2024 by rpki-client on console-ams.rpki-client.org