Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/Xq7FqWhuStvLf8_ovVMtVOArHBM.roa
File: Xq7FqWhuStvLf8_ovVMtVOArHBM.roa (raw, json)
Hash identifier: lqLTYWfvHUrMbAV7Ce4z/OcYWEOuSSn6ZEL0ODNkxvM=
Subject key identifier: 5E:AE:C5:A9:68:6E:4A:DB:CB:7F:CF:E8:BD:53:2D:54:E0:2B:1C:13
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 018CC94E18C63C5664DE8FD8350532A7CE76
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/Xq7FqWhuStvLf8_ovVMtVOArHBM.roa
Signing time: Tue 02 Jan 2024 08:33:07 +0000
ROA not before: Tue 02 Jan 2024 08:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43647
IP address blocks: 213.148.18.0/23 maxlen: 24
213.148.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 14:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:18:c6:3c:56:64:de:8f:d8:35:05:32:a7:ce:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Jan 2 08:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eaec5a9686e4adbcb7fcfe8bd532d54e02b1c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:97:bf:4e:97:05:b5:d9:58:f6:8b:d8:5f:
d6:99:7d:45:77:c1:29:c6:d8:99:d0:99:18:50:67:
cc:06:d9:34:4b:2e:5e:cd:d3:e2:44:81:70:83:6b:
d2:ef:3f:15:58:aa:5d:a1:32:e8:26:fd:7b:7f:d7:
df:d8:75:2d:79:ed:dc:58:96:b9:25:6d:c0:ed:d0:
27:fd:24:22:50:49:c1:46:fa:da:45:3a:71:7e:70:
51:fc:52:9b:7b:9f:bd:7e:f9:2c:5a:1c:72:0f:0b:
67:74:38:c1:ee:a5:d9:12:93:78:c2:f7:bc:44:84:
b2:42:a7:7c:fb:63:a2:8c:2b:65:e2:18:2d:61:2b:
9b:5f:6d:96:1f:41:e7:35:74:4d:96:f9:d1:2c:49:
c9:60:97:09:12:49:69:61:e2:2e:17:03:f2:ad:ac:
5f:bf:94:73:fb:0e:d3:2d:80:f8:49:49:d1:45:d0:
ef:ba:43:1d:7c:54:5e:7c:47:3e:cf:7d:22:7d:70:
1e:98:da:de:28:22:c1:2f:85:05:7c:e0:33:04:e8:
8b:c4:e6:02:1d:b1:84:2f:62:a0:4f:99:ce:a8:b2:
c7:3f:b7:01:32:ed:7b:e4:60:3b:7b:74:5e:94:26:
e8:77:cc:14:5e:18:a1:eb:62:40:29:19:a7:c5:4d:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AE:C5:A9:68:6E:4A:DB:CB:7F:CF:E8:BD:53:2D:54:E0:2B:1C:13
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/Xq7FqWhuStvLf8_ovVMtVOArHBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.18.0-213.148.23.255
Signature Algorithm: sha256WithRSAEncryption
8a:df:b0:37:4b:59:64:e4:0e:2d:07:b4:7b:70:3d:da:b6:af:
c6:6b:6c:a7:e1:9d:95:3a:a8:34:2c:fb:9f:5f:d0:a1:ed:a9:
5a:75:f2:8d:9a:8c:05:bb:40:c0:fa:95:17:00:e7:6c:9f:c9:
7b:f0:48:d0:d5:ed:8b:79:3a:8b:20:78:c0:89:e3:23:13:3c:
0b:5d:92:17:48:49:cc:14:ff:db:a1:08:c7:d8:68:f5:04:dc:
ce:58:2d:fc:31:41:f4:8c:cb:38:a5:47:42:4f:ae:a0:30:60:
91:e1:9b:3f:c9:5b:4b:d4:16:fb:e8:49:9a:b0:bb:45:d8:29:
a2:fc:d5:d7:3f:78:75:1f:1c:a2:76:73:46:88:97:8c:8a:0c:
01:b0:77:8b:51:22:b4:b6:1d:af:ec:b7:8e:68:9f:f9:f2:8b:
ce:c9:08:66:70:5d:dd:df:69:04:3d:eb:7f:c1:af:2f:88:74:
bf:e5:eb:dd:6a:49:9e:99:26:73:a7:35:17:f5:be:8c:3d:bf:
8c:49:45:d6:c1:ec:56:19:9b:60:80:a7:34:71:6c:86:b9:af:
8c:bf:48:64:25:e9:06:c7:d0:07:7f:28:45:9a:c1:92:d4:27:
a3:b1:43:18:c0:07:76:16:46:98:7f:d6:cc:07:bb:4e:71:9c:
08:9e:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org