Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/X_DhbBX4sViGDyys_t_k4lIp1qU.roa
File: X_DhbBX4sViGDyys_t_k4lIp1qU.roa (raw, json)
Hash identifier: wTQ5k9LVF2iaGCTJ+A261lNEvTKJGsqOpyhwyj63lV8=
Subject key identifier: 5F:F0:E1:6C:15:F8:B1:58:86:0F:2C:AC:FE:DF:E4:E2:52:29:D6:A5
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 01856D93D9DB70310F26AF53E35CBFE21600
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/X_DhbBX4sViGDyys_t_k4lIp1qU.roa
Signing time: Sun 01 Jan 2023 13:44:44 +0000
ROA not before: Sun 01 Jan 2023 13:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59463
IP address blocks: 84.54.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d9:db:70:31:0f:26:af:53:e3:5c:bf:e2:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 13:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff0e16c15f8b158860f2cacfedfe4e25229d6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:ce:96:e6:d3:95:4d:0a:00:41:93:20:ff:
1c:0e:70:4e:0f:f9:36:d2:e6:07:9a:21:8f:03:0f:
95:67:80:cc:63:a8:d1:2b:dc:e8:3e:78:ec:1f:50:
a7:33:00:f9:31:a9:ad:d3:0d:8f:fa:c8:bf:39:6c:
71:ff:f0:61:ea:00:6c:eb:36:dd:37:90:08:25:77:
0d:e9:50:09:ca:46:9d:87:f9:e5:ee:2d:02:0e:8a:
04:10:30:98:d9:41:3e:a8:bc:ba:c2:7c:f5:1d:a1:
08:c5:78:ac:49:2f:f9:61:52:2f:d3:e5:53:9c:64:
2c:01:60:bf:e4:28:21:a4:af:34:1b:f1:6b:09:b0:
d4:0b:74:fe:c7:80:c9:b3:5c:e2:58:ef:da:c3:9d:
fc:2d:56:2e:9e:c4:31:ee:37:63:32:bb:ff:19:f9:
23:93:4b:21:a0:28:1f:9a:73:cf:7c:08:9d:05:80:
ee:29:bb:16:e7:e5:a9:93:29:36:68:86:b8:fb:3b:
c3:83:61:be:d4:d5:75:ad:d0:83:a1:8f:c2:52:f7:
ec:db:57:07:ec:ec:db:8d:a1:9e:08:a3:50:b6:0e:
cc:60:ed:00:4f:04:1c:d0:e3:43:d8:90:7b:0b:c0:
3b:db:2a:50:6c:d4:63:1a:a0:2f:8e:74:2c:a5:19:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F0:E1:6C:15:F8:B1:58:86:0F:2C:AC:FE:DF:E4:E2:52:29:D6:A5
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/X_DhbBX4sViGDyys_t_k4lIp1qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a7:b0:ed:4e:04:35:e7:e1:db:12:24:44:30:5a:5b:5a:5d:
2e:38:6c:ba:ac:1f:c1:b0:b9:7a:79:fe:b5:da:e1:d6:af:ea:
4c:65:68:72:0d:3d:0d:c0:dc:ce:be:28:ce:58:d5:7d:35:7f:
41:5a:4c:27:f8:be:8a:7d:11:71:51:8c:43:b5:77:9b:5a:9b:
43:b9:81:db:68:11:70:9e:b8:12:33:9d:df:be:95:ce:e8:5d:
6d:1c:af:a0:52:fc:6a:90:8d:41:17:96:ec:90:9e:69:f6:4e:
4b:26:18:99:fe:0a:f8:8f:11:41:6c:d0:c2:c0:72:f4:2b:95:
5c:bb:60:df:d7:b4:96:f6:28:e1:59:4b:c1:fb:9a:8e:f7:20:
1c:f9:4b:cc:0f:4d:fe:a3:31:7b:6f:a3:1d:44:76:f3:a0:47:
32:74:48:82:33:8d:cf:dc:7e:44:6b:78:f9:20:4f:35:7a:49:
83:ea:36:24:d7:d4:76:54:5f:0a:db:0e:b8:ee:7f:f0:8e:dc:
80:3c:70:6d:7d:8c:e0:a1:95:7b:a3:5d:85:f5:ba:53:00:0d:
ce:5e:3d:44:ab:ff:ce:12:2f:88:a4:b5:e2:a3:13:35:ed:bd:
3f:42:86:e7:c4:db:bf:1a:2e:3d:e6:31:9b:a6:bb:20:5d:78:
eb:f2:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org