Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XbRiJ1HcpgFXZx109E1VxxKwnUI.roa
File: XbRiJ1HcpgFXZx109E1VxxKwnUI.roa (raw, json)
Hash identifier: 4sdSg24fY/7w1JeesxhKeOFxJk0At6JjNfY4+hLTHXg=
Subject key identifier: 5D:B4:62:27:51:DC:A6:01:57:67:1D:74:F4:4D:55:C7:12:B0:9D:42
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018E707A45653E8DD15E2E119159F05212C3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XbRiJ1HcpgFXZx109E1VxxKwnUI.roa
Signing time: Sun 24 Mar 2024 12:40:45 +0000
ROA not before: Sun 24 Mar 2024 12:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1
IP address blocks: 85.209.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 13:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:7a:45:65:3e:8d:d1:5e:2e:11:91:59:f0:52:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 24 12:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5db4622751dca60157671d74f44d55c712b09d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:77:cd:5c:b2:1e:a4:c1:d9:f7:1a:e2:3a:
f2:1b:0f:c9:58:4a:b0:fa:aa:84:c2:ff:c6:07:6c:
96:ae:ed:e6:90:41:9f:d0:7a:aa:9d:6e:fd:0f:ef:
c4:a0:8a:f9:d7:12:f7:02:c1:ce:f1:97:ee:7e:01:
c0:b6:25:d4:4e:d0:36:bf:bb:63:de:27:f7:97:cb:
89:d0:7e:3e:30:e9:89:b4:89:2c:03:a8:7f:c9:a8:
bd:01:ed:0e:bf:d3:1b:e1:9d:13:e1:ad:1a:41:ea:
7a:11:96:31:03:e5:64:ae:21:04:b0:da:ad:43:7c:
ef:85:1c:4e:15:c2:a5:45:8b:03:58:db:9d:2d:bd:
45:62:54:c4:ff:9a:dc:5b:6d:1c:95:a8:90:b9:83:
5c:1b:a6:a8:a4:17:3d:57:35:45:1e:98:0c:ac:5a:
1f:42:ba:00:74:d0:57:e4:a3:a8:8b:8f:9a:b6:e2:
b7:a3:11:72:05:75:fb:47:45:46:af:f0:71:5a:1a:
bc:08:7f:93:d2:33:32:66:52:27:3d:cb:b2:6b:1d:
04:a4:27:a8:35:95:e0:89:7d:33:c5:81:8e:96:1d:
78:19:73:b0:85:80:71:b6:b2:1b:92:89:e1:b5:c5:
6f:96:19:4f:91:84:3e:87:b2:5d:15:17:cf:86:20:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:62:27:51:DC:A6:01:57:67:1D:74:F4:4D:55:C7:12:B0:9D:42
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XbRiJ1HcpgFXZx109E1VxxKwnUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.163.0/24
Signature Algorithm: sha256WithRSAEncryption
06:63:a1:4e:8d:52:63:ec:5d:db:54:b6:e0:bb:6d:0c:b1:5c:
b8:15:95:ad:12:9b:31:a1:84:3e:d9:02:48:29:c5:af:a5:be:
7b:5e:f6:4f:06:ad:7d:25:39:6c:14:66:99:b3:f7:56:1d:2f:
32:31:57:91:bd:9d:6c:d7:66:d2:3a:07:a4:54:96:18:73:22:
df:6b:32:b8:6b:a1:f9:69:60:00:e4:bd:6a:8e:85:6e:70:ef:
af:f0:01:4e:3c:12:27:54:a0:63:ef:c5:05:2a:9f:66:35:43:
1d:c6:bb:0b:4c:9d:f5:4c:16:0f:95:0d:dd:88:e3:19:0e:f2:
02:08:3e:7e:7c:e0:90:54:fa:11:7d:26:b2:d2:2b:7e:de:d4:
11:78:6a:d0:b2:f8:53:cd:e6:5a:16:52:6f:bb:24:41:e4:79:
1f:27:49:6b:2d:39:19:46:0d:33:9f:93:9c:f5:b5:6c:48:af:
d4:1a:96:c2:ff:b9:b0:d1:f1:98:2b:d0:8c:ca:86:cd:f2:1a:
c1:97:a7:ca:1b:46:55:f3:4d:de:d7:35:47:d8:0a:19:58:23:
fb:7b:be:5a:aa:61:ea:f4:d2:a0:4d:2a:a9:ff:9e:f7:84:ab:
b0:2c:ea:c6:09:0f:c0:48:b7:c2:e0:25:11:fd:19:67:67:8b:
27:de:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:17:30 2025 by rpki-client