Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XxGeVv6BWzYC__XuPPbpHizxVk8.roa
File: XxGeVv6BWzYC__XuPPbpHizxVk8.roa (raw, json)
Hash identifier: B8O+25m581R3WuyGIxMrtq/y4I9zTtXI2U8PHMHef58=
Subject key identifier: 5F:11:9E:56:FE:81:5B:36:02:FF:F5:EE:3C:F6:E9:1E:2C:F1:56:4F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018921B8DEC23F3F823537111AF6A596EDCA
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XxGeVv6BWzYC__XuPPbpHizxVk8.roa
Signing time: Tue 04 Jul 2023 16:25:10 +0000
ROA not before: Tue 04 Jul 2023 16:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201971
IP address blocks: 84.54.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:b8:de:c2:3f:3f:82:35:37:11:1a:f6:a5:96:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 4 16:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f119e56fe815b3602fff5ee3cf6e91e2cf1564f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:61:09:bc:e6:82:81:34:c2:23:8d:f9:e7:
ed:dc:85:ac:46:d1:82:35:49:75:12:dd:39:6b:0e:
0c:f3:da:79:e7:4d:df:c3:08:58:37:1e:c7:64:8d:
ed:37:ba:3b:ec:25:0e:2a:8a:e5:b3:34:d2:30:2f:
ba:31:3e:11:34:62:14:a5:fb:96:78:70:b0:28:a0:
20:02:fb:de:f1:fe:89:90:df:4d:e1:26:11:8e:ec:
e2:08:2a:d6:fe:9d:39:d4:0d:40:50:9b:99:74:2b:
2c:8f:28:29:82:32:5a:1a:7a:f7:47:24:58:4b:2f:
22:52:b3:51:c3:e4:07:53:59:17:44:34:19:66:40:
f4:d6:06:2f:d0:24:32:2d:a8:88:91:fd:cb:73:26:
21:b6:e1:ad:c1:20:d6:08:ef:5e:34:ff:7d:10:24:
49:98:d5:32:3a:56:61:20:63:eb:bb:98:de:05:37:
88:6d:99:f8:f3:71:68:fb:d1:e8:97:71:ca:17:d4:
7a:6b:d2:63:fe:64:c5:c1:29:51:03:6e:70:b1:ce:
1b:bf:77:e0:e8:8c:09:11:66:37:ca:ff:e5:23:a3:
86:60:cd:a8:b4:ca:b0:39:ea:15:45:16:24:31:a8:
89:36:61:6b:3e:6f:42:bc:67:c5:e4:99:5f:e6:2c:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:9E:56:FE:81:5B:36:02:FF:F5:EE:3C:F6:E9:1E:2C:F1:56:4F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XxGeVv6BWzYC__XuPPbpHizxVk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.54.0/24
Signature Algorithm: sha256WithRSAEncryption
14:aa:0b:18:8c:70:12:1d:3a:31:8d:a4:e6:a8:77:c0:17:04:
95:e7:9a:54:f8:74:74:c4:f3:08:7a:8d:72:52:38:cc:63:52:
96:62:81:54:77:96:86:e2:43:6b:39:c6:ab:bd:90:36:a8:91:
ca:99:24:3c:2c:d7:12:20:f7:01:99:60:ec:06:33:bc:60:fd:
2a:db:6b:37:db:ac:35:33:88:cd:d2:db:4e:21:21:61:a9:fb:
a5:9b:f8:af:75:4e:e1:fe:1b:3a:33:0f:cb:75:df:f4:04:a6:
d6:0d:5f:19:af:7b:06:87:76:c4:84:a8:fc:76:c5:ab:64:0c:
ad:99:71:b0:15:d1:1a:8b:99:15:19:8d:99:b6:89:6c:48:dc:
ca:93:69:35:60:94:49:a4:93:9a:e9:69:5b:b2:fc:35:67:28:
5b:fd:ae:e6:2e:69:4f:46:3a:ca:a5:20:ba:db:ec:21:16:86:
72:35:5e:87:18:f1:6f:47:a1:73:04:a9:f8:7d:22:52:64:90:
11:99:36:33:06:dc:58:63:67:a6:f1:b7:8b:92:05:d8:b7:bb:
24:ea:75:3b:c9:3b:a8:d7:dd:e0:a0:55:3f:cb:1b:31:66:62:
54:be:e1:a3:87:16:9c:e6:e9:30:b7:58:95:3f:c4:5b:68:82:
72:9b:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:06 2023 by rpki-client on console-ams.rpki-client.org