Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/xc35mLN48B7nI9Gcar8y6mn_XXQ.roa
File: xc35mLN48B7nI9Gcar8y6mn_XXQ.roa (raw, json)
Hash identifier: T6gJY/+/docXXJEjH2cpLM0jtSeA3H0/H92Q0eH0epk=
Subject key identifier: C5:CD:F9:98:B3:78:F0:1E:E7:23:D1:9C:6A:BF:32:EA:69:FF:5D:74
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 018B48D6758409E1DD8621C51CEE4C282278
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/xc35mLN48B7nI9Gcar8y6mn_XXQ.roa
Signing time: Thu 19 Oct 2023 16:48:16 +0000
ROA not before: Thu 19 Oct 2023 16:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48278
IP address blocks: 94.244.0.0/18 maxlen: 22
Validation: Failed, certificate revoked on Fri 20 Oct 2023 08:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:d6:75:84:09:e1:dd:86:21:c5:1c:ee:4c:28:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Oct 19 16:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5cdf998b378f01ee723d19c6abf32ea69ff5d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:54:f2:4f:43:7b:de:22:b8:ea:e1:fe:51:
fc:6e:ca:93:09:94:d3:b2:85:98:38:d0:bf:f1:a5:
97:6d:bc:87:9d:89:5b:ef:63:ae:ea:ec:62:38:f4:
cd:f9:28:74:7f:3d:02:5f:d0:36:2d:2a:07:93:22:
25:28:93:dd:15:29:00:fe:70:7a:3d:e6:3b:f2:a0:
25:14:25:c1:5e:97:31:3a:b1:4d:06:fa:21:60:86:
ee:02:b8:2f:8e:fa:b1:5b:1b:41:00:15:40:f8:7e:
be:5b:60:1b:e5:5a:23:f7:35:42:f1:91:2c:10:c2:
8c:5c:59:55:ad:b5:f0:30:5c:6f:46:00:93:f2:37:
a3:dd:95:da:5c:0d:3a:3f:dd:71:ee:8a:92:86:21:
80:09:98:db:e1:88:1f:9a:ff:44:e6:fa:72:f1:83:
b3:fc:37:82:bc:b6:7a:06:e8:de:d8:87:7b:a9:d3:
c9:b3:b2:bb:7f:5e:ef:b0:8f:f6:29:cf:f8:7e:b0:
7f:b4:c3:63:fa:27:ee:0f:07:d0:31:8b:c1:29:46:
3c:7f:48:63:24:bd:80:b1:4c:9b:fe:df:31:fb:65:
96:5c:71:42:20:cc:4c:b3:4a:af:f7:77:60:b5:b4:
1e:39:8b:8d:4a:8c:ee:6c:f7:0a:b7:31:27:a2:c3:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:F9:98:B3:78:F0:1E:E7:23:D1:9C:6A:BF:32:EA:69:FF:5D:74
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/xc35mLN48B7nI9Gcar8y6mn_XXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.244.0.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:73:e6:ff:d8:ee:e3:93:15:68:11:24:a9:57:78:0d:60:3e:
93:3e:33:fd:63:c6:47:94:ed:81:8f:f3:10:d5:ce:68:a7:78:
df:0b:e5:6e:45:db:16:17:49:76:4c:88:e0:a2:94:94:fe:44:
2f:fd:a2:d1:8c:80:39:b2:50:d7:82:b4:6f:98:34:10:13:77:
a4:2e:f0:98:c2:b3:ac:3d:89:e5:80:a4:20:86:81:84:f3:6d:
ac:68:55:0e:fd:15:2d:f4:11:bb:48:0e:f1:ec:43:33:9f:6b:
21:c6:fa:1a:20:2c:1a:07:fb:e0:65:ef:79:bc:b7:06:42:98:
d1:ff:fc:32:c4:45:ca:aa:d8:c4:15:fe:f1:cf:12:93:28:46:
17:46:be:d8:ba:c4:17:1b:d6:27:61:e8:c8:8f:ad:2c:a7:fd:
2c:7a:a5:fc:13:c7:96:96:62:8e:42:86:b6:9c:c5:d0:aa:4d:
89:fe:7a:80:2e:18:2c:c9:72:39:84:36:0f:06:23:77:de:19:
0f:74:83:e6:c4:fd:c7:e9:00:bb:03:8b:c3:1a:d3:2f:62:63:
73:0a:51:3f:6e:59:40:57:fd:bc:89:6a:26:eb:e9:18:d0:0f:
d5:8e:33:d8:2e:0f:29:a9:ee:5f:4f:46:9a:31:1f:52:2c:ee:
a2:92:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:25 2024 by rpki-client on console-ams.rpki-client.org