Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/XU5sSe6Sh0EHOXCB5rs6Bo4SB9M.roa
File: XU5sSe6Sh0EHOXCB5rs6Bo4SB9M.roa (raw, json)
Hash identifier: fxHwKOWk7nNRYT1Z6ebwgrTbiPdpYEb4Ci+N+jV5AV0=
Subject key identifier: 5D:4E:6C:49:EE:92:87:41:07:39:70:81:E6:BB:3A:06:8E:12:07:D3
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0185FAD826CB57DB39374868A1F6D0B961EA
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/XU5sSe6Sh0EHOXCB5rs6Bo4SB9M.roa
Signing time: Sun 29 Jan 2023 00:05:47 +0000
ROA not before: Sun 29 Jan 2023 00:05:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6718
IP address blocks: 45.250.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fa:d8:26:cb:57:db:39:37:48:68:a1:f6:d0:b9:61:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 29 00:05:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d4e6c49ee92874107397081e6bb3a068e1207d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:f5:5b:52:f6:fd:d0:27:d6:17:d2:a3:aa:
ee:05:6b:f7:ca:a6:5f:fb:f6:98:3f:44:7e:88:33:
3d:c6:e5:86:5d:0b:8b:3f:ce:39:f8:04:23:8a:46:
0a:65:fe:f8:cf:f2:9e:39:f5:98:9c:f6:b2:b5:ec:
5d:17:d9:59:a3:cc:df:5f:82:04:8a:f1:b9:96:69:
99:80:e3:5f:b9:e8:9b:35:a8:d8:00:72:b4:a1:57:
b3:c1:3c:ae:0e:1c:05:7c:62:85:0d:38:8b:96:bf:
70:95:80:e1:e4:b3:32:d1:02:13:9f:30:7b:ff:cd:
ec:fb:05:31:2c:95:29:c4:8e:92:57:f1:c7:72:bd:
46:38:9f:73:3d:bb:58:29:c1:c9:e8:65:3b:02:3c:
32:24:a8:6b:de:d1:00:97:01:54:09:0b:3f:c8:3f:
64:06:10:4f:e4:aa:75:6f:f6:be:76:29:6d:4a:df:
f0:91:32:57:5a:a9:64:7e:3b:f5:87:bf:d8:d8:ee:
f6:c2:dc:63:f1:b0:aa:40:ce:6e:da:89:9c:b5:a2:
2f:67:0f:20:02:70:1f:2d:0e:41:e5:e8:26:e4:b7:
5a:af:08:48:a9:ea:1f:8a:3e:2f:05:0c:0b:d8:ac:
d9:6a:68:9c:5d:a1:30:1b:ab:8d:2c:41:17:02:20:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:6C:49:EE:92:87:41:07:39:70:81:E6:BB:3A:06:8E:12:07:D3
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/XU5sSe6Sh0EHOXCB5rs6Bo4SB9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.64.0/22
Signature Algorithm: sha256WithRSAEncryption
65:e3:fc:da:40:f8:33:f0:e5:b6:d2:b8:32:34:ed:60:8f:bb:
90:75:3a:0b:b2:0f:67:f4:5d:cf:f1:68:ae:d2:81:71:4b:df:
d7:06:91:ba:e6:76:99:d1:94:7a:d3:fc:50:82:6a:94:6e:b2:
01:3d:ff:83:b8:f0:ff:ad:4f:b5:cf:e6:0a:72:44:25:3e:2b:
1a:b6:55:c1:65:bd:e2:4c:91:56:ac:66:42:29:5c:84:60:ea:
37:10:2d:ee:27:44:ca:06:1b:84:d2:c2:3e:04:8f:e3:c5:67:
5c:04:55:d8:5a:08:64:c9:8c:88:d9:ef:7a:d0:d5:5b:cb:f3:
02:84:69:41:b3:27:ca:80:ff:6f:d0:8a:97:83:93:01:9e:72:
72:ce:99:cf:e7:50:ad:f9:f8:1a:f6:16:2a:d1:f6:6b:7b:2f:
db:90:3f:49:fa:af:78:4a:69:ff:b7:52:69:69:fe:3a:47:e3:
bc:ae:a5:6d:dd:67:f3:2f:b3:30:2c:c9:6f:8c:7b:a0:e6:c1:
eb:4f:50:31:fd:94:94:4b:bf:14:b7:60:ca:69:b4:da:df:58:
65:10:24:53:de:26:bc:76:62:92:6b:05:3b:9d:de:06:9b:9a:
d5:c2:0d:00:94:26:c4:a1:c9:0c:7a:1b:ca:d7:ba:14:dc:6f:
20:98:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 12:09:37 2023 by rpki-client on console-fra.rpki-client.org