Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XZNAxrTb7qiaLSd4beoSDDCG9IA.roa
File: XZNAxrTb7qiaLSd4beoSDDCG9IA.roa (raw, json)
Hash identifier: Fco46fkYh+W9P8BegjoWy1BdsNR1lHS7yJfPBJtD4oM=
Subject key identifier: 5D:93:40:C6:B4:DB:EE:A8:9A:2D:27:78:6D:EA:12:0C:30:86:F4:80
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018774749030A116A4FB4A8A691BBB94B8EB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XZNAxrTb7qiaLSd4beoSDDCG9IA.roa
Signing time: Wed 12 Apr 2023 07:53:28 +0000
ROA not before: Wed 12 Apr 2023 07:53:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 194.5.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:74:90:30:a1:16:a4:fb:4a:8a:69:1b:bb:94:b8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 12 07:53:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d9340c6b4dbeea89a2d27786dea120c3086f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:95:99:59:6f:ec:17:1f:a0:b6:45:2e:f7:
06:95:7e:80:2d:64:ff:e6:bb:d1:24:a9:ee:c9:28:
7f:91:05:cb:7a:0d:c2:3f:83:9e:83:15:33:af:46:
1d:e2:b2:bb:2e:20:26:2d:88:37:fb:15:00:42:73:
1a:b2:56:5d:61:e5:df:bb:47:9c:09:0b:e4:ba:c9:
df:18:d6:52:3a:de:f5:f5:20:f1:c9:e2:e2:f1:65:
1a:5a:eb:8c:00:8a:0d:67:72:8c:67:e9:b8:b5:ea:
25:40:06:25:08:b7:2c:33:9c:48:cd:7d:4d:78:07:
23:ff:66:7b:35:65:d6:dc:3a:9f:dc:3d:89:c0:6d:
9a:97:79:e5:cd:6f:b1:09:7e:e6:dc:75:82:37:6f:
b0:6f:5c:32:d7:79:65:80:57:dd:8b:86:ef:78:23:
8e:ac:2b:c1:53:d6:60:bc:bf:f2:1e:ef:cf:9a:3d:
d5:ed:84:71:71:0f:a9:f6:58:89:7e:b2:d0:09:cd:
b9:99:36:2a:7b:0e:9e:ba:50:05:ff:6b:22:87:be:
ee:50:10:82:9a:13:3b:2e:71:d7:35:94:2e:60:0f:
44:23:2b:bd:94:2a:b0:eb:41:9b:0d:b8:40:84:a5:
a1:33:22:e0:f8:4d:4c:9a:9a:87:df:1f:05:bb:f2:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:40:C6:B4:DB:EE:A8:9A:2D:27:78:6D:EA:12:0C:30:86:F4:80
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XZNAxrTb7qiaLSd4beoSDDCG9IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9e:f0:68:3a:34:04:ba:f9:44:f2:59:ef:2a:eb:8f:16:d3:
53:26:53:a3:8e:0c:3c:b1:3b:b5:28:3d:fd:44:3e:4e:f6:1f:
fd:32:e8:d2:45:9e:97:f9:f4:5b:d9:56:50:19:60:bf:84:7e:
c0:c9:27:08:01:95:6e:ee:b5:7c:c6:ea:fb:11:5d:21:36:2a:
53:f8:f1:ca:60:ed:09:57:52:47:f6:e4:ec:68:18:a0:b3:59:
fc:b6:73:3b:fe:00:fa:b7:74:74:11:03:68:a1:9c:d9:9c:55:
22:20:84:fb:3f:fa:60:e6:c5:49:44:a1:dd:91:91:83:0a:e6:
9a:d4:17:77:ee:29:1d:e2:21:43:44:d4:2b:3c:a2:b8:f0:3f:
9a:e1:63:e7:92:74:e0:c2:86:92:74:10:a1:df:62:15:01:1e:
93:01:86:ef:06:ae:0f:92:14:ad:f1:b2:bf:a3:87:9f:30:79:
dd:99:04:a3:41:a5:9f:ec:cf:c2:7e:c7:aa:aa:c5:b3:20:39:
ed:bf:94:4f:13:8a:51:58:7d:e8:ec:42:85:10:50:a3:6a:0c:
e0:d5:0d:b8:69:d7:e1:0e:1b:7e:96:84:ae:6d:8b:b0:1a:7b:
14:a1:d1:cc:a3:30:fd:4a:21:65:c5:03:e9:ab:0b:27:93:70:
11:ae:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org