Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/XJet2JSxJj0CY57oTId2Q_1pqkQ.roa
File: XJet2JSxJj0CY57oTId2Q_1pqkQ.roa (raw, json)
Hash identifier: P2QMf54jHSv1PES22CoLuGoYgOptDSpL04ROwXVMWPg=
Subject key identifier: 5C:97:AD:D8:94:B1:26:3D:02:63:9E:E8:4C:87:76:43:FD:69:AA:44
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 018C685A2124BA1C8EE75E8B3BFADB7DCFEE
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/XJet2JSxJj0CY57oTId2Q_1pqkQ.roa
Signing time: Thu 14 Dec 2023 12:43:06 +0000
ROA not before: Thu 14 Dec 2023 12:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60092
IP address blocks: 193.151.20.0/24 maxlen: 24
193.151.20.0/22 maxlen: 22
193.151.23.0/24 maxlen: 24
193.151.21.0/24 maxlen: 24
193.151.22.0/24 maxlen: 24
91.195.24.0/24 maxlen: 24
91.195.24.0/23 maxlen: 23
91.195.25.0/24 maxlen: 24
2001:67c:2c90::/46 maxlen: 46
2001:67c:2c91::/48 maxlen: 48
2001:67c:2c92::/48 maxlen: 48
2001:67c:2c88::/48 maxlen: 48
2001:67c:2c88::/47 maxlen: 47
2001:67c:2c93::/48 maxlen: 48
2001:67c:2c89::/48 maxlen: 48
2001:67c:2c90::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:5a:21:24:ba:1c:8e:e7:5e:8b:3b:fa:db:7d:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Dec 14 12:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c97add894b1263d02639ee84c877643fd69aa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:b1:be:6d:3c:28:39:0a:b6:4d:85:54:f7:
07:86:5e:56:af:d2:2d:5e:bf:6b:4f:56:90:14:70:
6d:26:3f:40:e2:52:83:db:8f:bd:8a:71:db:02:95:
01:23:37:d1:b7:48:59:8c:3b:77:67:e3:71:d5:4c:
38:b1:e7:85:d0:61:00:60:00:d7:05:ab:b3:81:dc:
dc:da:8d:7a:69:1a:7d:0a:0a:31:f4:2f:fe:15:a4:
cb:c8:9c:cf:cf:1f:83:3e:d7:70:11:3e:00:5d:61:
48:0c:b2:73:6a:fe:0b:54:f1:77:f5:48:90:9c:de:
74:8d:dc:2a:e2:9e:60:36:5a:72:cc:5d:e0:05:83:
c3:70:79:36:d3:5c:26:6b:17:51:4f:46:4a:1f:36:
d7:90:b8:e4:01:57:a9:a6:de:f2:bf:73:7e:4e:a5:
6d:93:b4:e3:2a:13:52:8f:76:1d:0e:63:13:c3:d3:
6b:5d:b5:72:d0:58:ba:38:95:56:b6:c3:d4:a6:08:
64:49:13:40:84:fc:5d:db:da:f4:48:53:6e:17:fc:
3e:90:12:bf:8f:64:1a:55:79:f9:62:1e:a6:29:7c:
b1:75:2c:67:bb:a8:4f:d0:cc:64:97:2d:05:7f:79:
d8:6d:de:20:66:7a:c7:89:c1:af:ef:a7:b2:a3:ef:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:97:AD:D8:94:B1:26:3D:02:63:9E:E8:4C:87:76:43:FD:69:AA:44
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/XJet2JSxJj0CY57oTId2Q_1pqkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.24.0/23
193.151.20.0/22
IPv6:
2001:67c:2c88::/47
2001:67c:2c90::/46
Signature Algorithm: sha256WithRSAEncryption
6c:b9:08:38:1c:d9:4c:6b:65:f1:2b:4c:0f:d8:ea:79:f7:ae:
68:52:1b:39:ac:6f:1d:6f:5e:43:90:90:9b:ce:85:f5:84:5e:
17:4a:db:5d:c1:31:61:99:a9:e7:90:e3:2a:2d:04:46:c4:38:
3c:ab:03:b9:3b:5a:e5:5d:0a:76:84:95:1f:af:55:24:00:b7:
cb:ab:51:57:4f:4a:3d:f9:cd:19:a5:9e:c5:0b:6b:8a:da:64:
80:80:3e:46:b8:a1:95:55:09:44:b4:95:06:04:65:c8:71:2d:
4a:1a:3b:d6:5f:e0:87:bb:3d:9d:d6:9f:12:05:19:9f:73:78:
80:e2:87:d3:d1:39:73:60:fb:96:95:28:70:23:49:47:b9:ef:
8c:97:e5:e6:56:be:6b:a4:3d:62:b8:9b:c5:8e:06:a7:ca:6c:
47:9f:bd:70:44:8f:cc:f4:89:50:9e:73:a1:92:83:58:c1:15:
de:8c:4a:87:ee:ba:a6:e2:c6:2d:82:1f:f2:1e:16:a2:9a:e7:
1d:30:ce:bc:c4:b8:4e:99:7d:c6:93:24:db:57:4a:55:e9:16:
62:29:01:a4:cf:88:3f:03:66:a2:2a:0d:37:3a:15:c5:3a:33:
80:78:af:f2:82:93:ec:4c:c9:cb:0e:a1:3c:cc:3a:18:9a:61:
8f:8c:9b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:35 2024 by rpki-client on console-ams.rpki-client.org