Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XflJyRIE-1c1pZ-skjge-lcmjz8.roa
File: XflJyRIE-1c1pZ-skjge-lcmjz8.roa (raw, json)
Hash identifier: re3EII0jGUePc1X4saNOCM5YwFtEEIb/Qqc8KEQtn7Q=
Subject key identifier: 5D:F9:49:C9:12:04:FB:57:35:A5:9F:AC:92:38:1E:FA:57:26:8F:3F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AE858679C2BBE41587B6DECB342CC
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XflJyRIE-1c1pZ-skjge-lcmjz8.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12724
IP address blocks: 82.179.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e8:58:67:9c:2b:be:41:58:7b:6d:ec:b3:42:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5df949c91204fb5735a59fac92381efa57268f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:43:7b:4d:c1:6a:e6:3d:c4:85:11:64:75:
43:95:11:5a:22:a9:bf:14:10:53:b4:d3:41:17:be:
52:34:5c:13:bc:f3:14:5b:90:7f:0d:e7:72:17:c6:
3b:d9:e8:f3:4d:41:2e:39:6c:3a:e9:66:0d:27:27:
cb:f0:86:1f:7c:95:e1:92:eb:5e:68:f6:98:2d:fa:
93:e4:4e:e1:aa:42:ad:c7:9e:82:62:3b:95:a7:a0:
e9:42:d2:0f:fd:4a:68:eb:31:99:f2:c0:30:64:3f:
f3:57:e1:aa:cc:50:f9:e0:87:a2:fc:14:67:97:99:
0a:1a:91:dd:a2:f6:2f:8d:f9:ca:42:e7:89:f2:3d:
43:5c:01:0c:28:e4:ea:13:31:f5:e9:6f:1c:ff:4b:
58:16:03:13:90:e9:37:ce:68:a5:31:bd:14:59:49:
f4:a3:e8:6f:b8:ca:ed:8b:b0:d6:e5:bc:5a:fd:cb:
39:c0:93:53:28:f3:46:24:19:be:7d:be:28:54:f5:
5e:95:70:64:df:19:d4:d3:eb:5f:eb:bd:3d:00:29:
31:02:cd:a9:6d:0a:70:09:7a:bc:9f:89:82:fb:bd:
ea:89:52:25:95:58:e2:65:02:7f:fd:3c:3a:5d:84:
34:4f:cd:b0:b5:50:ab:5f:04:80:dc:e7:f1:af:be:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:49:C9:12:04:FB:57:35:A5:9F:AC:92:38:1E:FA:57:26:8F:3F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/XflJyRIE-1c1pZ-skjge-lcmjz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.96.0/20
Signature Algorithm: sha256WithRSAEncryption
23:a2:5e:b0:bf:50:3a:e5:59:76:c4:77:58:fa:de:b2:f3:42:
21:60:08:bd:75:f3:07:89:c1:bd:04:0d:d8:b3:66:25:d3:e4:
63:fe:fe:c1:b6:99:3b:5d:0f:1b:a2:65:36:b6:a5:9e:82:74:
f0:92:1d:c1:f0:36:4c:a5:89:52:82:e3:d1:4f:47:61:e1:c5:
54:2d:9c:d9:bd:8c:79:3f:a7:20:ff:f7:4c:83:46:85:9a:4b:
d3:b0:f5:90:dd:f9:b5:4e:0e:bd:f8:12:8c:2d:e5:63:a6:01:
18:b4:fe:12:ec:00:cb:0f:7c:b5:de:39:ae:56:80:aa:a7:fd:
52:34:cb:5b:d3:4f:39:fd:69:e7:45:4f:9c:ec:9c:95:89:28:
c1:01:e5:6a:3b:46:f5:be:9c:c5:80:c4:3c:0b:2f:f8:2e:38:
12:09:3d:16:2f:ab:42:9e:d5:0f:62:8c:ec:6f:f5:0b:00:18:
f6:1e:2b:bb:04:51:81:69:78:13:78:c5:28:0b:24:a7:da:85:
2f:71:cb:b4:7c:5a:6a:91:84:31:f5:ac:89:e6:0a:a1:be:24:
a1:10:03:8c:aa:c6:f1:89:6d:9e:56:7c:49:f0:84:63:49:0b:
b7:40:bf:ca:c0:64:18:bc:a3:3b:fc:ac:8c:ee:94:c5:8f:50:
57:f2:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org