Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/XTX3M75_ibwS_A47QIm4Ee2-WeQ.roa
File: XTX3M75_ibwS_A47QIm4Ee2-WeQ.roa (raw, json)
Hash identifier: +fHqD/znueMw8OO+GxS4MLyTT9QWEtJr2HXWZDXXz6s=
Subject key identifier: 5D:35:F7:33:BE:7F:89:BC:12:FC:0E:3B:40:89:B8:11:ED:BE:59:E4
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 0185706750AD5936BE3CFD89F157F73B7DAA
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/XTX3M75_ibwS_A47QIm4Ee2-WeQ.roa
Signing time: Mon 02 Jan 2023 02:54:56 +0000
ROA not before: Mon 02 Jan 2023 02:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203903
IP address blocks: 185.158.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:50:ad:59:36:be:3c:fd:89:f1:57:f7:3b:7d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Jan 2 02:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d35f733be7f89bc12fc0e3b4089b811edbe59e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:b9:61:96:69:c1:d8:10:e1:ff:8e:34:bc:
82:6e:19:12:50:e6:ce:8d:be:72:0d:ac:5a:48:56:
1a:8a:e1:9b:ca:01:dc:78:dc:c6:d9:54:10:a8:cf:
4c:b1:b2:83:4e:f3:69:c7:4f:12:f1:ef:6f:56:db:
73:ed:08:8a:25:2f:4a:97:3a:00:6b:5d:21:60:d6:
7d:47:f2:01:b4:1c:9a:6c:e2:3b:98:3d:03:8b:ca:
2f:a1:88:28:f7:40:5f:42:e9:c7:6e:b8:7f:58:91:
43:95:30:b1:d4:a9:9a:f0:7a:b0:7f:fb:27:e6:2d:
1e:af:31:26:07:0a:5d:53:10:cd:c8:03:6f:fc:79:
b5:3d:36:21:e7:8e:69:cb:20:4f:f0:56:5f:c9:32:
19:68:ac:09:6b:f9:f8:9d:77:5a:0d:cf:6d:6a:d4:
27:4c:ee:a6:6b:fe:bf:e0:ba:e9:62:62:83:12:4d:
11:44:61:d4:d7:fb:6b:68:fb:01:75:9a:89:bb:ec:
03:bf:93:54:27:bd:68:c5:2a:36:28:6f:68:58:9e:
05:a2:97:e3:73:84:ce:e1:44:0e:1b:12:51:c3:6b:
e8:72:d6:8c:b9:9f:c0:65:12:d2:45:bf:18:96:6b:
f4:a4:89:5c:3e:d4:df:18:53:3f:3d:a8:a9:fa:30:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:F7:33:BE:7F:89:BC:12:FC:0E:3B:40:89:B8:11:ED:BE:59:E4
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/XTX3M75_ibwS_A47QIm4Ee2-WeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.175.0/24
Signature Algorithm: sha256WithRSAEncryption
55:32:b9:b9:3a:4a:b3:16:43:7a:c5:1d:c1:d0:19:85:bb:0b:
f5:2f:09:2f:bd:5a:60:54:83:bf:97:31:a9:2c:1c:bd:8a:1a:
37:23:60:d3:9f:92:aa:7f:34:4e:f6:80:87:d7:79:b2:ba:ad:
bb:8c:bc:e4:60:7d:b1:ff:ff:b9:70:4c:d6:84:d1:16:e6:8a:
74:94:93:4f:88:97:4c:d3:ea:ef:54:e0:d2:8d:f6:e8:b6:a6:
d7:b8:9a:e1:f9:c6:b6:88:d0:72:30:13:c8:83:80:6e:30:3b:
5d:61:80:b5:58:7c:6c:26:ea:49:77:c4:1d:1d:b1:73:52:18:
a2:eb:d2:b4:3a:cf:09:06:0b:21:39:e0:16:92:ef:da:3e:13:
08:c8:63:39:5e:28:46:37:eb:c8:9c:ac:c2:53:84:e9:87:93:
6e:85:7a:c4:fb:f3:d7:0a:1e:9b:82:35:39:e8:36:6f:d6:e8:
13:f1:26:7c:cb:df:a0:1a:fd:3c:7d:1e:81:c2:22:bf:e9:98:
e2:c5:91:5c:b5:be:58:b1:2b:4b:bc:d6:97:1d:7b:71:c5:e4:
d7:ea:45:4e:b4:eb:e4:1f:a9:7e:66:ab:11:bd:55:91:b9:91:
90:fa:42:e0:69:e6:bf:8e:7e:da:d6:8d:1b:3b:0c:0f:57:78:
93:81:db:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:47 2024 by rpki-client on console-ams.rpki-client.org