Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/P_Xugo_ivh_ml1Rny4CWkLiTwcY.roa
File: P_Xugo_ivh_ml1Rny4CWkLiTwcY.roa (raw, json)
Hash identifier: C2ZTJ7z+5IqHvL+05PWAHafzL6eUL4RAWIiQlPxMd6A=
Subject key identifier: 3F:F5:EE:82:8F:E2:BE:1F:E6:97:54:67:CB:80:96:90:B8:93:C1:C6
Certificate issuer: /CN=26bbed788e29f8406b2bdc8dddeeb7d4ec4b833e
Certificate serial: 01856FCB92D9EACED93C1D6EDF6AE74711A6
Authority key identifier: 26:BB:ED:78:8E:29:F8:40:6B:2B:DC:8D:DD:EE:B7:D4:EC:4B:83:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrvteI4p-EBrK9yN3e631OxLgz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/P_Xugo_ivh_ml1Rny4CWkLiTwcY.roa
Signing time: Mon 02 Jan 2023 00:04:50 +0000
ROA not before: Mon 02 Jan 2023 00:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21415
IP address blocks: 178.169.142.0/24 maxlen: 24
178.169.143.0/24 maxlen: 24
109.121.255.0/24 maxlen: 24
109.121.254.0/24 maxlen: 24
178.169.165.0/24 maxlen: 24
178.169.162.0/24 maxlen: 24
178.169.169.0/24 maxlen: 24
109.121.192.0/24 maxlen: 24
109.121.203.0/24 maxlen: 24
109.121.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:92:d9:ea:ce:d9:3c:1d:6e:df:6a:e7:47:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bbed788e29f8406b2bdc8dddeeb7d4ec4b833e
Validity
Not Before: Jan 2 00:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ff5ee828fe2be1fe6975467cb809690b893c1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:a3:6b:75:1a:b8:53:b7:0a:73:de:db:94:
17:16:90:7b:78:22:75:34:4e:1e:bb:53:e5:b8:82:
09:01:2e:5e:05:c4:59:d6:6b:e0:96:e0:65:de:e4:
65:0b:51:ac:66:24:54:93:82:18:4a:3e:d4:ca:36:
1b:45:8f:b5:c7:22:30:ae:3c:9e:98:4e:34:99:25:
cb:38:9b:b6:e2:07:96:a9:60:b9:d7:c8:cf:1d:8d:
c7:4b:8a:be:5a:50:17:5e:bc:f8:23:48:4d:92:6d:
43:af:ee:08:15:85:52:c6:f1:4e:49:fe:66:a7:a3:
d1:0c:87:19:84:c4:ec:9c:1b:13:fa:9c:82:ed:8a:
5e:57:8e:41:f6:4e:9d:65:f8:d0:51:7e:bd:ca:85:
0e:ab:03:d2:e9:a4:5f:38:d5:c3:3d:1d:65:b8:6c:
9c:c8:43:2f:5f:66:1d:ae:db:27:6f:84:1f:50:6a:
13:27:b0:1b:cd:13:0f:bd:4c:7e:2f:ae:d3:a6:5b:
3a:e0:06:3c:4f:bc:60:a5:b8:c1:da:40:b9:2c:de:
1d:6a:67:7e:6c:20:45:5f:85:c4:0a:0d:d3:3f:21:
2e:b9:9c:dd:e7:f4:24:2d:f6:e8:25:19:c0:eb:25:
08:35:96:3b:36:6b:51:70:6a:77:76:9d:a7:25:7c:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:EE:82:8F:E2:BE:1F:E6:97:54:67:CB:80:96:90:B8:93:C1:C6
X509v3 Authority Key Identifier:
keyid:26:BB:ED:78:8E:29:F8:40:6B:2B:DC:8D:DD:EE:B7:D4:EC:4B:83:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrvteI4p-EBrK9yN3e631OxLgz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/P_Xugo_ivh_ml1Rny4CWkLiTwcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd7a93-c9e4-42b6-a5c6-d35c54f14dbe/1/JrvteI4p-EBrK9yN3e631OxLgz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.192.0/24
109.121.202.0/23
109.121.254.0/23
178.169.142.0/23
178.169.162.0/24
178.169.165.0/24
178.169.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d2:97:60:13:52:16:90:21:1a:2a:b1:da:11:75:e4:93:75:
25:4f:ce:10:04:54:16:86:42:5a:61:ca:72:52:70:6d:7e:e9:
d3:c6:c2:99:cd:e4:00:53:6d:07:11:7f:49:7e:5f:c4:a1:c5:
f6:53:f8:b3:d4:a1:a6:0b:90:2c:b9:a1:83:7f:29:6e:7a:3e:
56:43:c4:21:65:c4:7b:3c:ef:a1:d2:c0:70:29:e8:28:3c:22:
ba:94:28:e9:44:03:da:f8:0a:83:08:c5:b8:6a:15:70:d2:32:
5b:06:0b:7c:31:a7:94:43:e5:95:39:a1:de:44:ec:ac:11:94:
05:3e:65:5c:83:d6:02:3b:85:37:17:e0:a9:ed:71:92:f7:61:
ad:c0:f0:69:71:5c:07:fa:9b:ac:38:6b:85:f6:96:93:64:ff:
2c:89:f9:c8:f1:c0:a9:bb:c8:48:a5:86:cd:ba:27:ad:e7:95:
43:2a:fa:72:08:4b:48:73:d8:63:b6:ea:42:9a:fb:6c:8e:91:
47:d5:f0:d7:64:bb:cf:9f:db:4c:e5:12:29:f0:bb:d9:01:af:
3d:b6:e9:6b:42:46:53:da:29:ef:26:a6:0e:2d:3d:85:ff:af:
db:69:99:44:ca:c7:12:21:05:1f:ce:bc:84:28:ec:ad:41:e4:
8e:fa:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:39 2024 by rpki-client on console-fra.rpki-client.org