Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/Xv_-hiI2UNV42aw0c_BjVLzrYRo.roa
File: Xv_-hiI2UNV42aw0c_BjVLzrYRo.roa (raw, json)
Hash identifier: 6HwTv2curbkbuMCsY5YG/6+gqHYeUcgeFHfPyipqzec=
Subject key identifier: 5E:FF:FE:86:22:36:50:D5:78:D9:AC:34:73:F0:63:54:BC:EB:61:1A
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 01856E41DAF3C610ACFF6EA2CF1D7787310A
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/Xv_-hiI2UNV42aw0c_BjVLzrYRo.roa
Signing time: Sun 01 Jan 2023 16:54:47 +0000
ROA not before: Sun 01 Jan 2023 16:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43404
IP address blocks: 77.87.200.0/21 maxlen: 24
89.23.32.0/19 maxlen: 24
2a04:17c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:da:f3:c6:10:ac:ff:6e:a2:cf:1d:77:87:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Jan 1 16:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5efffe86223650d578d9ac3473f06354bceb611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:9a:87:13:e7:54:dc:3f:fc:98:2c:17:81:
76:61:31:2a:17:06:e4:b6:ec:2d:2b:f5:e9:9e:14:
20:82:ec:bc:91:61:a2:eb:e5:98:5b:e9:a0:c5:f3:
11:34:f4:30:86:5c:42:44:a4:4e:e3:af:85:ab:7b:
02:b2:39:e2:03:28:2c:6e:27:85:29:ea:5e:ab:ba:
05:31:1e:f4:18:64:1f:c3:ce:e5:fc:24:b8:dd:f9:
c8:ec:f8:32:53:1b:94:3d:19:26:14:ec:a7:60:ad:
aa:05:e8:ee:67:3e:e2:43:cf:99:58:2d:15:64:5e:
28:5f:5b:68:e6:27:5d:ca:49:1c:24:9e:0d:1f:d8:
e3:3c:ba:fe:45:6f:43:82:b9:13:ce:e8:8f:22:51:
59:86:5a:ba:89:79:f6:e1:46:e1:9f:51:29:68:87:
8a:f6:a3:3c:47:7d:57:88:c8:e2:e0:32:19:99:0f:
e4:23:70:42:2f:b1:a3:0a:e9:5d:82:0b:fe:3d:34:
dd:75:70:fe:ec:aa:3f:95:11:5f:b2:44:6a:af:03:
a7:d0:27:c0:52:74:f6:51:f9:5e:e7:7a:69:5a:a2:
96:42:87:2d:c0:eb:bb:ad:7f:5f:06:ec:43:a6:1f:
cf:a7:b7:b1:53:18:54:32:2a:62:1f:17:ef:e1:e8:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FF:FE:86:22:36:50:D5:78:D9:AC:34:73:F0:63:54:BC:EB:61:1A
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/Xv_-hiI2UNV42aw0c_BjVLzrYRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.200.0/21
89.23.32.0/19
IPv6:
2a04:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
95:3a:d5:c2:ab:fd:8c:0b:30:1f:88:69:59:a1:75:6b:68:27:
30:b3:68:5e:25:7f:fe:68:98:d0:f2:88:e8:f4:ba:2a:75:d6:
f5:e2:cd:c3:fb:5f:39:68:8c:6d:0f:9a:21:d7:13:cb:d3:4d:
5c:5e:81:bd:f0:1a:1a:dc:d0:b7:4a:29:e2:0d:74:5c:ab:50:
e3:5a:78:aa:1c:79:c2:dd:b5:cd:cb:c3:3d:53:0f:5d:f0:08:
62:b2:f1:1d:f4:7e:8b:a0:e3:13:a9:d2:92:8d:1c:9c:65:a0:
4b:f9:9d:ab:fc:ef:05:32:94:be:76:9e:1b:70:c3:0f:a7:5f:
f6:49:c3:db:9b:28:bb:f1:3b:95:74:8c:40:d4:bd:3b:d8:24:
27:d7:d2:46:82:27:2a:bf:b2:ed:f3:6b:65:8f:cc:66:d1:f7:
c2:75:4a:b4:01:78:cf:91:b2:83:e3:93:fc:dc:90:e2:ad:fc:
7e:35:51:72:ba:5e:3a:b0:2e:8c:f7:21:42:f9:10:b7:53:16:
d5:d6:70:c6:dd:39:76:d4:8d:ad:1d:95:3b:1e:8a:a5:80:86:
88:60:a0:09:18:ed:de:5b:cf:78:49:62:24:0c:be:f8:60:5a:
3a:93:c3:c0:8e:3a:ba:7d:2a:71:ad:22:29:bc:9e:5f:96:52:
64:41:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:49 2024 by rpki-client on console-fra.rpki-client.org