Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/XRzvyrfnNEo-Qo3pDdDI1SQZnu4.roa
File: XRzvyrfnNEo-Qo3pDdDI1SQZnu4.roa (raw, json)
Hash identifier: BpYPN3ogG5k2B6uxsPa6wsUFu5fkFLSngQLpFr/1O+Y=
Subject key identifier: 5D:1C:EF:CA:B7:E7:34:4A:3E:42:8D:E9:0D:D0:C8:D5:24:19:9E:EE
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 018CC3B72793F856A024F5D1B8F504C4DE4B
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/XRzvyrfnNEo-Qo3pDdDI1SQZnu4.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 194.39.0.0/20 maxlen: 20
194.39.16.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 06 May 2024 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:27:93:f8:56:a0:24:f5:d1:b8:f5:04:c4:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d1cefcab7e7344a3e428de90dd0c8d524199eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:9f:72:cd:40:52:2f:61:89:84:e8:24:8f:
c7:e5:39:1d:66:50:ee:0a:e9:23:df:e2:f3:23:ae:
08:d4:8a:95:67:f3:7b:10:51:82:5e:5b:8c:ca:60:
4c:cd:fb:b4:77:b1:ac:d8:63:f2:e1:4a:4d:d5:b9:
ca:c1:d0:77:7b:47:9d:88:4d:3e:21:1e:47:77:e6:
16:3f:f9:4e:62:2d:31:01:9e:51:39:cf:39:6f:43:
4a:5c:6f:8a:0c:74:9c:70:ba:cf:e5:46:83:c0:c9:
0b:1d:9e:f2:67:b0:c4:f6:2c:05:1e:bb:d9:28:88:
ea:c5:5d:21:16:8c:18:88:52:46:8a:52:de:94:bd:
67:38:f0:b6:77:d8:40:16:06:8e:4e:a8:2e:83:f1:
ea:fe:57:0e:a1:a9:30:c6:4c:aa:8d:8a:15:01:4b:
da:c7:0e:db:4d:1c:24:f4:c7:71:aa:4e:5d:4c:0d:
89:a8:e2:78:bd:42:59:01:de:41:89:33:e8:d7:e5:
d8:e7:ac:91:0b:62:f5:bf:5b:1b:c0:82:c4:26:48:
42:05:b4:61:bf:8a:8c:d5:9f:95:1b:0a:c7:fa:0b:
85:b9:07:ee:78:4c:a7:7f:e2:b4:64:92:7c:1b:a7:
26:db:10:2e:93:5b:cf:5f:83:95:9b:ab:75:26:06:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:EF:CA:B7:E7:34:4A:3E:42:8D:E9:0D:D0:C8:D5:24:19:9E:EE
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/XRzvyrfnNEo-Qo3pDdDI1SQZnu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.0.0-194.39.23.255
Signature Algorithm: sha256WithRSAEncryption
07:e0:80:32:0e:9b:f5:55:7a:52:c2:45:f5:b5:ac:c0:71:b3:
4f:38:c8:a0:be:66:5e:2d:fa:ef:1a:d3:fa:d6:08:5a:ec:2d:
ab:2d:ab:bb:d4:d3:07:c0:35:b5:a7:e7:53:31:e7:de:56:30:
a2:35:92:78:b4:ec:f8:b1:3e:1b:cf:82:68:01:76:19:52:6d:
2e:df:d0:03:93:2d:79:1f:22:45:3d:d3:93:e4:16:a0:a4:d7:
f5:02:a5:10:19:29:a5:eb:ff:cd:c5:58:65:56:37:8a:47:e8:
7b:9b:d8:1b:73:97:e3:d9:8a:09:09:ef:95:79:fe:6c:d0:4f:
fd:8d:57:4b:58:3e:f7:31:e5:63:d4:5d:7d:16:87:8f:58:83:
04:55:7b:f8:34:66:0e:6a:cb:bc:bb:20:d5:d0:25:76:1e:2f:
a9:53:0a:c5:cc:15:7c:74:00:ef:cd:0f:c4:54:0e:81:9d:a7:
d2:fb:88:5b:9d:a9:2a:38:30:6a:cf:6a:3e:32:c3:8e:4f:96:
67:0e:72:f3:03:74:99:d4:18:dc:3f:8c:ce:6c:92:d6:b3:41:
18:b7:ac:0f:b7:fa:42:13:c0:8a:ee:53:46:d7:3e:d3:cf:c5:
6b:92:db:76:20:77:86:a9:5c:9c:9d:cb:56:4a:8b:ea:df:65:
2f:73:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:34 2024 by rpki-client on console-ams.rpki-client.org