Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/Xpnq-8li0YBdA6KkubMsGQCaHtM.roa
File: Xpnq-8li0YBdA6KkubMsGQCaHtM.roa (raw, json)
Hash identifier: XnaNr8FnIKNCKwuxPryLLa0FUk0hfmi6/EcC0cBh36k=
Subject key identifier: 5E:99:EA:FB:C9:62:D1:80:5D:03:A2:A4:B9:B3:2C:19:00:9A:1E:D3
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 018571C3018CE4A1B5624C73EFCFFD4A82C3
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/Xpnq-8li0YBdA6KkubMsGQCaHtM.roa
Signing time: Mon 02 Jan 2023 09:14:43 +0000
ROA not before: Mon 02 Jan 2023 09:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60222
IP address blocks: 5.255.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:01:8c:e4:a1:b5:62:4c:73:ef:cf:fd:4a:82:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 2 09:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e99eafbc962d1805d03a2a4b9b32c19009a1ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:71:10:c2:e7:b1:4f:74:30:f1:3f:c2:91:
3c:78:c0:7d:8b:40:5b:cb:c7:71:14:be:d5:bb:95:
cf:b0:8b:92:2e:2b:4c:9b:ca:70:40:13:0f:b7:3b:
b1:68:b7:ef:99:16:3a:44:59:1b:67:75:53:4e:8c:
41:9b:68:3d:42:55:30:2b:62:52:57:9c:bb:a6:af:
01:c7:e8:a9:ee:ba:80:42:07:7f:42:89:18:8b:bf:
d1:83:93:66:ab:ab:e5:b6:d9:38:de:c8:6c:2e:94:
0f:30:3e:75:79:db:6f:77:53:56:cf:42:26:17:39:
31:fe:f7:25:47:21:ab:3a:8e:c9:15:9b:99:94:a9:
e3:32:0c:ed:e3:b6:cd:83:3b:e5:04:f7:7c:3c:9b:
bf:4d:ff:b0:c1:0a:3d:9c:10:4f:71:fa:48:85:4c:
b0:18:7a:3e:9f:90:bc:05:e2:bc:69:03:d6:58:36:
a0:8a:ef:00:77:e9:8c:5c:43:fe:9a:18:e2:e6:08:
56:2b:3b:54:e3:a9:85:26:42:31:36:39:e8:d5:5e:
9d:96:32:34:12:ca:3d:95:58:a6:41:8b:b6:ef:a1:
25:7f:84:3b:01:ca:18:03:9f:3b:53:a8:64:2e:08:
7a:8f:a2:44:2a:d4:7b:11:7c:8f:39:b5:93:88:7b:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:EA:FB:C9:62:D1:80:5D:03:A2:A4:B9:B3:2C:19:00:9A:1E:D3
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/Xpnq-8li0YBdA6KkubMsGQCaHtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c2:42:6d:f2:e9:fc:a1:93:9c:99:0a:ed:98:91:bb:f9:0b:
bc:55:77:22:37:ce:d3:dd:5f:e1:b0:3e:f0:4a:e0:e4:62:72:
83:fb:66:50:75:5d:d0:87:71:57:c3:de:42:0a:88:9f:96:4b:
44:b7:b7:ba:0a:3a:bd:c7:c1:cd:12:69:f6:94:5e:99:e2:ce:
67:e2:c8:54:d3:94:de:cb:aa:72:26:37:6e:37:f8:67:42:7d:
7d:31:f1:e7:df:22:00:c7:f5:e6:48:f0:3d:24:a1:51:62:e6:
ec:6c:c6:02:59:7f:e6:14:8d:c2:a0:02:c4:bf:a5:3c:d9:db:
b3:81:69:31:9e:9b:51:b4:ce:7e:61:13:35:5e:20:b2:34:f0:
99:7e:a0:3f:0d:03:56:4b:01:2c:a1:54:a3:7b:c3:62:f0:b1:
ec:df:46:ca:ee:b9:16:03:c2:1f:bf:01:28:d3:e9:fe:97:5b:
9c:2b:65:3f:a1:51:0a:58:96:57:ef:e2:20:7c:bb:ca:22:94:
05:51:75:9c:a0:37:ba:53:07:ad:80:f8:94:70:38:dc:6a:2d:
bf:de:0d:61:19:85:f9:39:67:8e:32:eb:4d:47:d2:2d:fb:a9:
5c:3b:6a:37:f5:1e:49:79:ae:f8:ce:f4:9d:af:05:9b:40:9f:
7f:9b:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:26 2024 by rpki-client on console-ams.rpki-client.org