Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XyryqrW17XIGYgiGMyvL65puRlw.roa
File: XyryqrW17XIGYgiGMyvL65puRlw.roa (raw, json)
Hash identifier: peBcPM7n87h/o/aue/5ZW5qgsIchO6dkESIr016aN9Y=
Subject key identifier: 5F:2A:F2:AA:B5:B5:ED:72:06:62:08:86:33:2B:CB:EB:9A:6E:46:5C
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 01856D93D5F60E53926AD4A84C923CEA63EC
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XyryqrW17XIGYgiGMyvL65puRlw.roa
Signing time: Sun 01 Jan 2023 13:44:43 +0000
ROA not before: Sun 01 Jan 2023 13:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29622
IP address blocks: 109.160.24.0/24 maxlen: 24
109.160.24.0/21 maxlen: 21
109.160.24.0/22 maxlen: 22
109.160.30.0/24 maxlen: 24
109.160.29.0/24 maxlen: 24
109.160.31.0/24 maxlen: 24
109.160.26.0/24 maxlen: 24
109.160.25.0/24 maxlen: 24
109.160.28.0/24 maxlen: 24
109.160.28.0/22 maxlen: 22
109.160.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d5:f6:0e:53:92:6a:d4:a8:4c:92:3c:ea:63:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 13:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f2af2aab5b5ed7206620886332bcbeb9a6e465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:e5:83:a5:6d:97:ff:54:7a:19:6f:0c:3d:
cb:39:2f:f7:da:52:a3:a7:95:00:06:9f:61:6e:92:
dc:a2:98:d1:ae:9d:05:68:7c:0a:59:56:f6:5e:e6:
5c:29:20:7f:4f:d1:a0:f0:28:16:00:79:ce:d3:8e:
67:8f:a8:af:68:ff:91:25:71:c6:42:dd:29:a7:f6:
8d:6b:86:97:3d:54:32:72:46:22:60:f8:c1:fa:d9:
2e:ce:d4:92:6e:6c:05:71:01:38:ae:51:75:23:fd:
6b:af:35:a9:9c:c2:35:8b:f4:d1:40:c6:32:42:ad:
40:aa:51:b6:db:42:13:e7:fd:ed:e8:9e:b9:1e:a7:
43:88:3d:9e:ce:02:3c:8a:ac:17:4c:78:c8:98:76:
03:ee:b6:9b:da:44:71:d3:c1:9c:fd:1b:cf:3b:ee:
56:e0:b3:68:a8:62:7b:3b:6f:e8:ae:55:6c:a7:2a:
c8:be:88:8d:eb:39:fd:3e:7a:fc:a8:36:a6:10:13:
9c:ff:0d:e0:89:93:73:5d:28:dd:7c:4b:ff:b7:43:
55:56:f2:a9:14:39:e8:d0:ab:f7:c3:f3:8d:e5:0c:
95:41:a8:50:60:1c:76:9b:8e:77:f1:a8:99:4f:81:
b6:6a:de:cd:b4:e4:8f:db:8c:00:e2:39:95:b6:e3:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2A:F2:AA:B5:B5:ED:72:06:62:08:86:33:2B:CB:EB:9A:6E:46:5C
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XyryqrW17XIGYgiGMyvL65puRlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.24.0/21
Signature Algorithm: sha256WithRSAEncryption
67:6b:92:0e:c1:9c:65:92:92:85:11:63:0b:a2:5c:ae:f2:82:
7b:58:12:25:84:a2:2c:03:be:1b:f1:ac:72:1b:51:f2:93:f5:
ad:25:66:fd:02:67:56:09:80:3a:2e:76:c5:9f:ac:2c:07:7d:
93:fd:be:8e:4f:07:66:de:fc:a8:4b:03:a9:47:01:6a:f8:e3:
26:19:81:33:f3:21:c9:ae:be:c0:74:e3:16:67:15:e5:01:9b:
52:d2:5f:c4:f3:4d:d1:fd:d4:1f:e7:68:3a:37:b2:be:fc:48:
7d:fa:b0:8f:d7:fd:46:97:21:43:65:7c:a9:02:f5:12:4c:53:
03:f6:7b:83:9a:99:ba:b3:31:72:0d:ec:61:55:a9:8e:3e:9c:
e4:25:90:7b:b0:25:d0:13:8a:0c:ad:b0:30:7c:ae:30:0b:f5:
e4:f8:74:8e:47:9e:52:53:ab:2b:e3:48:07:97:38:00:36:57:
1c:c0:ba:a7:01:8b:1b:82:5d:3e:36:cd:41:37:77:31:e1:13:
22:44:c2:4a:7e:26:21:6f:66:4c:7d:a2:f3:dd:1b:b0:88:8d:
15:80:7e:35:3e:94:f4:51:cc:51:d5:bb:c4:c7:b8:e6:22:65:
04:2a:ae:4f:8a:2d:07:9f:85:d0:65:3a:75:2c:d6:c4:dc:2e:
04:fc:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org