Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/xkspLcaFPByaH9sdTZCO-eI2cq4.roa
File: xkspLcaFPByaH9sdTZCO-eI2cq4.roa (raw, json)
Hash identifier: 6ThwBD6Xl13bmTu6iKVGrCo3rigwqF7eupLqKxh7S/M=
Subject key identifier: C6:4B:29:2D:C6:85:3C:1C:9A:1F:DB:1D:4D:90:8E:F9:E2:36:72:AE
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01869D838B71E5D5F9B124B0C457457ECA93
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/xkspLcaFPByaH9sdTZCO-eI2cq4.roa
Signing time: Wed 01 Mar 2023 14:11:29 +0000
ROA not before: Wed 01 Mar 2023 14:11:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 89.185.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:83:8b:71:e5:d5:f9:b1:24:b0:c4:57:45:7e:ca:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Mar 1 14:11:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64b292dc6853c1c9a1fdb1d4d908ef9e23672ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:12:f8:be:55:77:ef:c7:e6:48:3c:45:59:
ca:3e:b8:eb:f6:a5:08:6f:76:0b:dc:63:ea:fc:87:
28:92:10:fa:d1:97:62:0d:43:4f:10:9d:54:9f:a4:
4b:f0:39:ef:38:58:c6:47:14:c5:eb:cc:ec:22:78:
d6:15:d1:df:9d:13:4c:63:11:f7:f9:92:d0:5e:14:
ef:26:98:c3:c5:0c:89:f3:f9:bc:12:e6:46:1d:20:
98:90:cb:62:db:1e:48:06:96:ce:f2:76:ab:61:1c:
2c:2f:99:73:6b:13:d7:95:66:f8:30:0a:1d:05:9a:
7f:26:63:16:a0:21:b9:13:99:cf:7b:81:29:93:16:
37:57:bb:b2:84:21:68:00:31:7e:12:a6:fa:a5:28:
38:68:a3:ca:a0:6f:93:81:68:71:2d:f9:56:f4:83:
e7:eb:f7:ea:ec:db:04:cf:5c:5b:03:e7:17:fa:e1:
10:ca:7e:8d:b1:97:3c:40:11:08:6b:09:75:89:08:
ba:66:e6:e3:95:9d:77:47:ba:bc:4c:67:d1:18:98:
0d:61:1d:db:7b:6c:64:0b:18:92:86:d4:6e:25:7a:
1e:91:3e:0a:91:e3:4d:c7:21:b7:ba:bb:74:be:e0:
54:86:de:c8:2d:75:06:c8:6f:d8:3a:58:59:1e:78:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:29:2D:C6:85:3C:1C:9A:1F:DB:1D:4D:90:8E:F9:E2:36:72:AE
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/xkspLcaFPByaH9sdTZCO-eI2cq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:27:f5:61:5a:e4:45:d0:30:49:c7:a7:b0:bb:ff:b1:23:d9:
a1:55:7e:ae:cc:40:c7:02:c0:73:e4:77:f4:54:d5:24:fe:14:
c7:4a:0a:eb:43:ef:fc:de:5c:70:5b:a1:06:5d:7e:c3:6e:e5:
54:9b:f5:39:09:43:80:cf:2b:c5:38:78:89:00:15:73:61:22:
db:c9:2b:78:bf:c7:78:13:fd:9c:c3:cf:b2:97:e5:78:6a:7c:
e9:10:50:f2:3d:95:08:76:ff:d4:d8:a0:ba:d2:1b:e9:a2:9d:
61:ce:42:e1:0c:eb:23:29:48:a9:9a:cd:65:bd:d5:ce:c3:e1:
99:0b:d1:1c:95:b3:e6:62:fa:83:f6:ab:6c:ac:f0:bc:dc:e1:
f1:27:77:87:6a:90:be:ba:8e:45:7a:66:4e:b1:7e:aa:9b:1e:
b2:1b:39:58:29:40:5c:21:2c:af:5f:1d:a1:76:4b:33:a8:d5:
0d:72:20:27:6e:46:da:4d:67:0f:4d:f6:e2:67:7c:1a:08:70:
32:2a:51:df:dc:e5:09:6c:2c:93:e6:7d:d4:32:00:fd:14:92:
91:a7:f8:5d:a2:bb:df:1e:91:f6:52:1c:0b:97:c0:d2:f1:7f:
0f:93:1f:23:81:ff:19:33:6e:a5:3a:5f:2f:fc:d2:64:29:47:
fd:a5:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:06 2023 by rpki-client on console-ams.rpki-client.org