Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/XZUoDcxs91ELQ7wkMAKvXfDjIZc.roa
File: XZUoDcxs91ELQ7wkMAKvXfDjIZc.roa (raw, json)
Hash identifier: sBTbuaSzc/cJINV0a6L+vwoNP/CrpasmzDtSEHJoHBA=
Subject key identifier: 5D:95:28:0D:CC:6C:F7:51:0B:43:BC:24:30:02:AF:5D:F0:E3:21:97
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01923E0D3FEA9D032D3BB886B0BE95273278
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/XZUoDcxs91ELQ7wkMAKvXfDjIZc.roa
Signing time: Sun 29 Sep 2024 13:51:48 +0000
ROA not before: Sun 29 Sep 2024 13:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43358
IP address blocks: 62.102.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 27 Oct 2024 10:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:0d:3f:ea:9d:03:2d:3b:b8:86:b0:be:95:27:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Sep 29 13:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d95280dcc6cf7510b43bc243002af5df0e32197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:dd:5b:34:af:1a:9f:f6:09:0c:1e:41:8b:
8c:1c:ee:77:30:fe:fc:08:36:e1:30:a5:e7:b1:04:
8a:4b:fe:08:94:bf:52:a7:4f:fb:9f:9f:37:ca:e8:
28:9e:c8:e0:69:22:94:01:74:18:e3:52:97:e5:5c:
c4:ea:40:50:66:c6:7f:83:89:f2:d9:a2:1d:75:29:
a2:26:42:f3:31:e3:12:a7:2f:f3:c9:2a:ff:8d:59:
af:27:cb:e5:df:fd:ec:07:d4:f2:21:96:68:70:14:
54:b2:92:d2:f7:99:59:b7:5d:ce:a6:fc:70:f9:98:
5c:a2:93:1d:4d:de:cb:46:5f:31:6f:b0:43:d6:16:
47:b9:f1:8e:d1:52:cf:0d:01:18:78:bd:a8:d0:17:
a1:26:81:d4:7e:a5:23:20:05:0e:f5:47:9e:61:6c:
5e:88:89:55:39:bf:0a:37:7f:75:69:d7:65:1e:b3:
fb:96:3c:d3:b8:f5:df:91:88:c5:09:70:1d:76:96:
30:7b:a6:ee:81:03:05:95:4f:aa:d1:77:cb:70:71:
70:4a:0b:c6:4d:84:0d:b4:e1:2f:de:fd:06:56:fe:
ad:8d:9c:6e:ac:b1:31:0b:34:d1:a3:07:25:4d:7e:
10:6e:f6:ac:46:84:5b:64:cf:53:c2:d7:25:36:a1:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:28:0D:CC:6C:F7:51:0B:43:BC:24:30:02:AF:5D:F0:E3:21:97
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/XZUoDcxs91ELQ7wkMAKvXfDjIZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:ff:4b:54:e8:51:bd:c2:b3:5d:f7:a0:ba:6b:17:6d:be:5b:
02:c4:5b:2c:57:7b:86:38:22:02:7f:73:bd:92:8d:ee:71:96:
2b:ce:06:2a:b9:63:6f:b2:86:4e:98:49:85:29:7e:b3:65:6e:
a9:f4:2f:9b:3a:72:f8:a5:17:1b:f3:74:44:0d:94:ac:81:c1:
5d:6d:51:45:b9:41:36:11:eb:ec:cc:df:97:29:94:43:8b:e4:
76:a1:16:b6:8c:27:c8:db:5a:80:ae:34:7d:f8:4c:08:cf:c7:
95:b1:0c:b4:30:38:0d:0c:2a:5d:79:62:42:40:ee:31:00:9a:
da:5a:82:db:12:fa:ce:72:45:de:e8:6c:68:c2:7c:2c:1c:b5:
35:a9:13:b1:1e:b6:34:6b:0c:3f:3c:7a:aa:04:bc:d5:c4:6d:
21:58:1a:d7:11:1e:ac:3d:00:cc:cf:22:e1:78:2e:d0:58:2a:
71:87:8a:58:0d:10:55:01:f6:28:65:0f:d0:6e:04:eb:b4:c6:
86:d3:6d:8e:04:3d:a0:2d:a7:52:df:2c:cc:94:13:68:81:cc:
31:88:30:c2:e8:4f:7e:54:2a:51:2c:80:c5:3c:6c:19:01:af:
2a:8c:55:8c:84:33:b5:7e:dc:db:03:d5:5e:fb:1f:e5:a7:75:
81:a1:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:05 2025 by rpki-client