Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XA5XMV6a7U62aJmmMIrJR1UvqAo.roa
File: XA5XMV6a7U62aJmmMIrJR1UvqAo.roa (raw, json)
Hash identifier: s7wCwULDkeOwh1kKiwgsFUTSCEeslHzEcGewQkid2+k=
Subject key identifier: 5C:0E:57:31:5E:9A:ED:4E:B6:68:99:A6:30:8A:C9:47:55:2F:A8:0A
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8B9E1E99FD08B8600846A5065F63576
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XA5XMV6a7U62aJmmMIrJR1UvqAo.roa
Signing time: Wed 25 Jan 2023 11:39:34 +0000
ROA not before: Wed 25 Jan 2023 11:39:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47480
IP address blocks: 89.167.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:b9:e1:e9:9f:d0:8b:86:00:84:6a:50:65:f6:35:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 11:39:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c0e57315e9aed4eb66899a6308ac947552fa80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6f:00:1e:4b:89:fd:03:8f:e6:d8:67:75:b1:
10:a5:36:86:6a:5d:26:2a:b0:d5:56:82:a2:f4:e3:
84:d9:45:dd:1d:70:68:59:c7:fc:d6:36:08:3b:82:
50:b6:b3:ae:fb:8c:90:21:10:a8:c0:3b:0f:b6:af:
cf:20:be:82:29:b6:7e:52:50:58:4f:19:a5:1c:78:
b3:2e:af:83:98:46:b5:b8:0e:64:0e:31:f2:1e:aa:
a7:0c:de:0f:f9:9f:93:c2:24:48:e8:1c:4d:d1:af:
e6:b3:b6:1f:49:dc:2a:16:65:3f:4b:12:0f:e9:c2:
29:8a:59:78:a7:79:1a:45:2a:a8:58:7d:89:42:5a:
18:9f:dd:a1:e3:01:53:10:0c:db:19:93:58:a1:06:
7a:57:02:c1:8c:2d:82:ec:9b:52:07:38:63:e9:9e:
5e:8f:d9:21:f7:5d:c7:73:6d:d4:91:17:b7:73:32:
1d:00:b2:39:86:f2:74:c9:07:0f:0a:23:ae:e1:54:
0e:12:08:93:f0:89:49:dc:a5:32:b1:3c:06:ec:9a:
43:65:93:ea:44:17:27:f0:f5:3c:59:ca:8e:e5:12:
e1:2c:8f:95:22:d0:c9:2c:bf:75:99:d0:55:e0:5a:
2c:05:22:16:da:2c:8b:be:cb:62:69:b0:4b:ac:3c:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:57:31:5E:9A:ED:4E:B6:68:99:A6:30:8A:C9:47:55:2F:A8:0A
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/XA5XMV6a7U62aJmmMIrJR1UvqAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.239.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8e:f4:cc:8b:f4:f3:53:8e:24:8d:d5:28:3c:1f:bc:41:9c:
9d:c1:52:87:09:a3:1b:71:33:6c:a2:fb:b6:92:48:fd:12:44:
3a:75:ae:81:22:1e:bc:1e:00:8b:c2:10:6a:95:87:cc:40:9d:
0b:b7:2d:5c:3e:2b:bb:2a:22:74:16:e5:06:23:30:22:c4:2f:
0f:87:cc:b4:33:c2:27:9b:2b:93:9b:5f:17:61:c0:42:ce:6d:
b2:47:0d:04:01:69:b5:75:d9:71:f8:a6:9d:d3:05:44:e0:4d:
4f:50:21:d0:22:95:a7:d1:50:8a:ad:80:df:96:79:2a:86:6a:
6d:e7:44:3a:93:a1:96:b0:16:23:c0:0d:cd:24:e7:cc:74:1d:
6b:86:3d:dd:db:95:a6:ea:23:74:f9:99:91:e8:b5:83:07:93:
9a:1f:a7:fd:b5:27:68:64:92:c2:f9:09:fa:10:55:86:5f:17:
2b:4e:5f:00:61:df:f9:ea:32:6b:f7:c5:fb:12:d5:2f:33:c0:
fa:b3:9f:7d:f8:0f:17:bc:2e:ec:9c:c9:e1:97:9e:81:62:44:
6b:0a:ee:b0:43:36:d2:b8:96:8c:ce:a2:c8:86:1a:52:9d:ab:
54:e4:38:30:64:37:e9:c2:d3:69:54:e0:9c:30:1f:58:13:27:
44:8c:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:53 2024 by rpki-client on console-fra.rpki-client.org