Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/XBI26TCAhKxpDXPvDNg8f14A2Q8.roa
File: XBI26TCAhKxpDXPvDNg8f14A2Q8.roa (raw, json)
Hash identifier: tmG24hFDRM2ng20RDRpyonW2ibRMF9EV9mAkT+TWn6k=
Subject key identifier: 5C:12:36:E9:30:80:84:AC:69:0D:73:EF:0C:D8:3C:7F:5E:00:D9:0F
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 01870393BF3792CC7EF0F7B9DE1D955A826C
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/XBI26TCAhKxpDXPvDNg8f14A2Q8.roa
Signing time: Tue 21 Mar 2023 09:50:27 +0000
ROA not before: Tue 21 Mar 2023 09:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24819
IP address blocks: 193.111.104.0/22 maxlen: 22
91.216.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:93:bf:37:92:cc:7e:f0:f7:b9:de:1d:95:5a:82:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Mar 21 09:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c1236e9308084ac690d73ef0cd83c7f5e00d90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:59:d3:e7:83:11:0e:35:ae:c1:f6:0c:bf:
2d:ab:d0:a1:a2:84:c0:e4:f5:52:8d:b4:d2:ab:4c:
af:35:22:5d:a6:1d:2b:89:b0:26:f2:46:7f:df:13:
5c:7c:66:af:51:a2:57:ed:ef:dd:41:69:68:08:5a:
da:37:36:0c:57:b0:1d:12:72:e9:fe:54:ff:ed:a6:
a3:9f:c1:7c:f5:b6:80:87:fb:f3:84:45:89:33:23:
9e:2b:5e:1c:01:57:8b:9a:3b:89:0d:c4:7a:5e:f5:
38:ba:be:d3:55:5d:92:aa:a0:e3:36:57:37:0b:82:
67:35:69:00:3e:fb:6d:01:d6:a6:6a:5c:de:e0:da:
64:a6:ea:84:54:be:ca:00:de:49:05:32:aa:20:ca:
ee:51:e2:a7:8d:98:8f:a9:45:15:ff:37:50:77:de:
e2:fc:0c:13:2e:c6:33:09:f7:c9:42:ef:b0:bb:ee:
b4:f1:9e:6c:e5:34:c4:4c:6d:75:e1:67:11:be:84:
a0:7d:74:e7:ab:e5:4e:e3:f8:1e:32:9a:3b:ac:ab:
ca:be:84:54:1b:e8:eb:37:19:cb:32:df:e8:ef:bb:
1e:32:de:ef:84:05:fa:7b:07:d7:32:01:b7:48:f9:
e2:f2:55:04:74:55:ce:88:d7:c1:d7:68:0c:a5:6e:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:12:36:E9:30:80:84:AC:69:0D:73:EF:0C:D8:3C:7F:5E:00:D9:0F
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/XBI26TCAhKxpDXPvDNg8f14A2Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.7.0/24
193.111.104.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:a7:6d:80:4f:58:5a:f4:e2:fb:bd:d6:21:22:1d:a1:c1:07:
d8:8e:8a:ed:36:28:80:4f:9e:77:e0:5c:d4:76:57:85:43:10:
ab:00:07:45:d9:28:5e:a3:26:50:43:86:bc:14:1b:19:f1:30:
eb:31:9b:d2:d6:ad:41:a9:c7:e9:c0:bb:81:a0:80:bc:20:7c:
48:02:db:66:57:9e:26:e6:cb:2e:f6:06:86:81:9a:52:3a:eb:
a3:6e:f7:65:23:3f:3b:15:37:98:e1:0e:7d:1c:4c:b0:92:30:
28:7c:e9:d9:a9:b8:29:70:f0:8c:9c:8e:22:93:5f:69:58:0a:
44:d3:cc:fa:3a:ee:22:73:91:b7:0e:ef:fa:06:f8:23:66:3e:
9e:e2:c5:2d:f9:e9:28:65:ee:e3:a8:6d:62:ec:97:25:b5:91:
17:1b:53:e3:65:f4:35:90:d8:5f:ed:51:ca:2b:f2:ad:bc:9e:
d7:2f:f9:78:66:7d:5a:27:b6:93:93:37:c4:c6:6b:ea:9e:41:
0d:63:5b:a0:49:d6:a2:47:0a:7e:96:f4:7b:7c:a1:a2:7f:83:
50:69:be:1a:34:2e:9f:1e:f2:ea:91:09:9d:d7:69:dd:5a:20:
cd:65:e7:dc:5f:c3:ea:45:cf:12:12:f8:88:d4:15:20:c2:a1:
04:3d:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:02 2024 by rpki-client on console-ams.rpki-client.org