Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/XrbOXQGZwnSY14opzf37r-vYvgM.roa
File: XrbOXQGZwnSY14opzf37r-vYvgM.roa (raw, json)
Hash identifier: J7yKrNVKf1vr0MoLK63fPbuuGa5f2L1xPIDxBDu/tfo=
Subject key identifier: 5E:B6:CE:5D:01:99:C2:74:98:D7:8A:29:CD:FD:FB:AF:EB:D8:BE:03
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0191C5E7B83B8AF5804CA1C2CFD4F559D1E9
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/XrbOXQGZwnSY14opzf37r-vYvgM.roa
Signing time: Fri 06 Sep 2024 05:56:23 +0000
ROA not before: Fri 06 Sep 2024 05:56:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 5.181.200.0/24 maxlen: 24
45.158.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 07:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c5:e7:b8:3b:8a:f5:80:4c:a1:c2:cf:d4:f5:59:d1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 6 05:56:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eb6ce5d0199c27498d78a29cdfdfbafebd8be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:2e:07:36:96:73:f2:3c:94:f0:06:6a:60:
3d:f5:1d:81:93:99:fb:36:84:22:a7:d1:ae:de:21:
67:62:1d:af:e8:57:ea:d3:1d:32:ce:5c:3e:28:02:
02:7b:d6:61:46:ac:c6:d9:00:10:00:e0:75:44:d0:
59:be:2e:14:b5:f9:e0:28:2a:94:b3:1e:56:bd:77:
91:81:91:0a:d5:fb:a3:d8:4d:fc:fd:4a:1b:50:10:
10:79:3f:f7:8a:04:c6:b8:78:fe:b8:40:35:a5:ea:
f4:c0:0a:a4:d1:f9:12:24:d1:b0:14:32:b4:db:85:
a9:f9:e9:68:8e:2a:8d:b8:ac:ab:0f:03:98:97:27:
35:0a:33:87:b2:cf:fb:cf:51:d8:c7:04:33:2e:b2:
2b:e5:e0:37:ea:a2:6d:6d:a5:b5:7f:6e:bb:43:e7:
03:97:0b:1e:36:8c:0f:14:52:9f:7f:a5:cb:2d:90:
7d:2f:d6:33:e6:20:2c:84:c4:45:12:39:d4:48:2a:
3e:1c:04:19:44:79:38:02:58:e8:0d:60:df:1f:4b:
b1:58:8a:93:c6:4e:3d:c8:3f:f7:d3:b5:87:99:87:
b9:f3:d4:d4:e1:88:6f:f8:97:92:0c:f6:e5:1d:30:
2d:47:db:85:01:9c:1d:41:bb:46:27:7d:3d:fa:8d:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B6:CE:5D:01:99:C2:74:98:D7:8A:29:CD:FD:FB:AF:EB:D8:BE:03
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/XrbOXQGZwnSY14opzf37r-vYvgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
45.158.83.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8e:e7:b4:74:42:e4:9d:f3:e4:27:6b:98:a3:d7:64:e8:a3:
6b:71:51:d8:14:fb:8c:5a:7f:1a:25:96:3c:34:ff:15:79:b6:
89:d8:38:7d:02:ce:bb:22:bb:91:1e:fb:b7:9f:7b:4d:91:6d:
7e:a7:9d:62:b4:49:55:3b:ce:3b:c1:00:1c:21:3f:40:8d:5d:
a1:c0:4c:a2:e8:b4:b7:bb:f1:e6:67:f1:ff:f3:ee:64:5f:0a:
6e:c5:e1:86:1b:f7:d5:88:f5:17:ca:5f:9e:aa:7e:d9:a7:ea:
08:c2:c3:1d:30:43:88:77:5d:fd:97:88:28:85:7e:e8:3a:be:
50:4f:78:50:c2:4d:1a:b7:9b:64:49:be:6c:00:d2:12:aa:86:
81:55:32:c7:6c:c8:35:d9:31:86:01:98:a4:1f:98:8a:17:06:
19:46:df:32:da:fb:47:26:ae:28:b8:82:3b:9c:36:d8:d4:41:
3f:57:60:b0:f2:f3:13:e4:d7:7e:e5:15:49:78:5f:47:5d:02:
a6:80:3a:cb:ba:9c:1b:44:d0:13:0f:52:87:fd:7d:e4:79:1c:
5d:49:60:bc:4a:b7:74:d1:4f:49:e3:63:a0:6c:d4:76:c5:0b:
c1:28:c4:58:a0:f2:35:ee:82:64:61:0e:12:9c:c4:73:f6:ae:
ca:2e:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 09:29:23 2024 by rpki-client on console-fra.rpki-client.org