Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/XXZzFrduS2OkIbXqXQ8b0NGKNXo.roa
File: XXZzFrduS2OkIbXqXQ8b0NGKNXo.roa (raw, json)
Hash identifier: x+cKKUa4j8MKkW/kPVeT/TOLRGGevrvd8EA5pWYv4ro=
Subject key identifier: 5D:76:73:16:B7:6E:4B:63:A4:21:B5:EA:5D:0F:1B:D0:D1:8A:35:7A
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 018CC8013BECEE06C0857AF6F6BAF139F0FD
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/XXZzFrduS2OkIbXqXQ8b0NGKNXo.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29471
IP address blocks: 195.158.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3b:ec:ee:06:c0:85:7a:f6:f6:ba:f1:39:f0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d767316b76e4b63a421b5ea5d0f1bd0d18a357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:45:cf:e0:4e:e3:fa:9f:44:e6:33:0b:01:
66:c1:a2:d2:f3:92:dc:d5:b5:77:83:42:e9:85:76:
f0:1c:f8:60:66:b1:e1:55:78:47:e7:c3:3c:88:1b:
ec:cf:18:66:12:36:aa:26:be:6f:b8:fe:8b:bb:da:
3d:49:cd:c5:d6:4a:28:b3:df:12:04:84:fc:14:93:
64:c2:fc:66:9a:bb:2c:b5:7b:5d:e8:a2:3c:41:60:
a4:a6:bb:77:e4:d8:e4:75:c6:19:e8:34:b5:79:f4:
4b:c2:c0:e4:ea:11:52:7e:9f:15:a3:21:88:73:a8:
58:a0:f3:58:a9:0a:6c:da:b7:44:a2:ee:ad:7b:35:
b3:4e:1c:ef:31:d9:aa:95:af:7c:49:25:c7:65:ac:
d9:5d:d8:06:2e:65:24:56:9c:10:66:b9:6b:e6:12:
3e:cb:e9:14:96:dd:1e:ba:11:ac:1b:eb:7b:0a:ef:
2a:96:8e:34:4a:63:b8:df:01:e3:21:4f:5c:1b:01:
3a:0e:3f:85:9b:ed:3f:79:96:83:d3:c1:cb:35:0d:
0f:8d:a9:2e:89:67:41:a6:87:6d:1b:64:f6:79:6c:
02:28:7f:06:81:b4:f5:b3:5e:56:15:35:dc:c5:47:
fa:cc:af:70:f7:ea:c7:a1:f1:ae:0c:44:db:1c:a2:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:73:16:B7:6E:4B:63:A4:21:B5:EA:5D:0F:1B:D0:D1:8A:35:7A
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/XXZzFrduS2OkIbXqXQ8b0NGKNXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0b:eb:2b:bb:fa:ce:07:5b:3f:87:aa:a7:15:2f:e2:a3:1d:
63:18:f6:2a:fd:94:a1:8a:ac:93:40:75:87:fb:ed:74:e5:be:
bf:05:4c:86:aa:21:9a:1b:8a:38:1e:31:8f:c4:fe:0d:d9:64:
4c:49:75:7a:0d:ce:35:fc:e6:74:ad:c1:eb:b6:5d:61:bb:1c:
cd:b9:2d:cf:d0:27:b5:7f:4c:37:9e:84:eb:a5:65:76:15:b3:
7a:15:1b:ba:cc:95:26:03:5c:2a:e8:be:22:80:62:ab:63:86:
cf:a6:3d:ca:f2:cc:15:07:81:c8:f2:fd:c1:52:50:8f:17:e4:
ef:e2:f2:42:63:73:bf:7d:b1:c6:70:bd:6d:06:43:9e:b2:fb:
ee:e4:1d:a3:fa:75:e1:4f:47:2c:86:5b:ba:8c:e8:ed:60:55:
a8:df:50:dd:d4:a9:ef:fd:82:d8:3e:ce:1f:ae:8e:a0:e3:86:
2e:e0:ab:ab:8c:e7:7f:31:fe:be:2c:4a:97:d9:9f:45:e8:38:
a8:33:49:35:48:42:83:ab:cf:d8:e6:6f:bc:74:90:de:90:ca:
db:70:d3:1b:ad:80:7f:3d:a6:fc:05:54:8e:15:33:22:29:57:
0c:1d:3a:20:4d:6c:7e:2a:d4:ef:81:54:fc:e5:75:92:e2:ed:
53:0e:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:49 2025 by rpki-client