Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/XstmfaE_ZjagiMZE9GRuLosPsmQ.roa
File: XstmfaE_ZjagiMZE9GRuLosPsmQ.roa (raw, json)
Hash identifier: A6HOeYdpv6HWOCrBAz41mcexETd9Vv7c116PskzNKv0=
Subject key identifier: 5E:CB:66:7D:A1:3F:66:36:A0:88:C6:44:F4:64:6E:2E:8B:0F:B2:64
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 018570707BE0940BF4B9010A950141D6B11A
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/XstmfaE_ZjagiMZE9GRuLosPsmQ.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 193.39.67.0/24 maxlen: 24
91.196.200.0/22 maxlen: 24
2a0c:7780::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7b:e0:94:0b:f4:b9:01:0a:95:01:41:d6:b1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ecb667da13f6636a088c644f4646e2e8b0fb264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:be:6e:68:99:21:e6:e1:08:25:b6:95:4f:
31:64:07:15:6f:43:25:6f:4f:87:14:3e:c8:0b:da:
e1:73:17:a9:79:9f:9d:f0:25:8d:68:5f:ce:49:0d:
11:99:95:ee:d0:51:a8:04:bf:12:10:a2:b4:5f:49:
f1:38:2d:a7:95:96:43:29:4e:ef:f0:0f:cc:a2:06:
f7:79:b8:58:7b:6e:0a:53:78:fc:87:ae:47:93:07:
27:03:b3:0c:91:02:f8:f2:cc:1f:ee:41:3f:e5:b0:
94:61:ca:7b:b9:74:58:45:04:4a:31:4e:5c:52:23:
48:d3:55:ca:36:92:54:4e:9e:24:51:04:cb:aa:20:
de:1e:66:80:58:d1:f1:dc:22:e9:84:7a:96:6c:f4:
6c:a1:f9:88:5a:5f:9f:23:23:e3:58:03:4e:3f:73:
27:e4:01:d2:15:83:f9:c3:dd:9f:58:e9:26:47:ef:
94:85:71:f9:42:44:09:ef:be:38:7d:8a:92:6a:ff:
71:7e:35:5b:a5:99:08:d8:8d:59:43:66:d1:56:35:
bc:aa:8b:6e:df:52:50:9f:24:3a:61:8b:4f:7a:1c:
78:79:ba:4b:e7:66:6c:0e:89:bc:fe:3b:2f:2e:8a:
3b:a4:27:42:2c:ab:62:34:ad:19:9d:26:9c:f2:67:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:66:7D:A1:3F:66:36:A0:88:C6:44:F4:64:6E:2E:8B:0F:B2:64
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/XstmfaE_ZjagiMZE9GRuLosPsmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.200.0/22
193.39.67.0/24
IPv6:
2a0c:7780::/29
Signature Algorithm: sha256WithRSAEncryption
8e:68:ea:a4:dc:f7:01:1c:44:40:78:4b:a7:fd:5c:64:17:a6:
2a:84:2c:57:47:73:f1:13:1e:20:7c:18:65:e7:5d:30:a3:35:
37:c2:95:cf:62:c8:5f:1f:3c:1b:0d:98:27:09:48:66:d4:74:
4d:e5:f5:a6:40:28:2f:36:ba:54:49:ec:4f:8d:7f:cc:fa:5d:
81:f6:e1:23:7a:d7:02:97:de:d5:72:93:b1:f1:42:01:09:dc:
77:8b:05:3e:90:89:f7:1d:fe:d8:b0:4c:35:dc:f9:89:f5:76:
a7:40:68:13:48:21:a7:00:bf:ff:c5:9d:04:15:76:b1:07:35:
52:a5:55:52:97:e5:d8:00:e4:61:6d:78:06:74:b0:84:aa:11:
b7:71:8a:d5:76:30:55:dc:7e:e2:72:d2:56:76:06:d0:e7:0a:
85:f9:4d:01:8c:b3:d9:e0:6e:ce:46:af:67:bc:83:24:39:f6:
9b:c9:3e:7d:c6:77:c1:50:dc:ed:4c:81:27:c1:8e:4b:8d:02:
38:a4:8d:b7:0b:51:8a:0e:9b:8a:94:19:37:4d:e0:52:eb:91:
a6:a3:a9:53:f4:ae:c2:66:98:a5:9e:2c:09:d3:32:98:26:38:
66:7e:c5:3d:dc:34:71:06:f4:c7:5f:2d:d5:f1:34:54:15:d5:
d4:98:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:30 2024 by rpki-client on console-ams.rpki-client.org