Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/xuERByO8HM9ZjjO5Z-5KDAlSt7Q.roa
File: xuERByO8HM9ZjjO5Z-5KDAlSt7Q.roa (raw, json)
Hash identifier: n5r4ZQlzs+iSUHav09Lt6N1RQVU9AmsEsbPcNH56HhE=
Subject key identifier: C6:E1:11:07:23:BC:1C:CF:59:8E:33:B9:67:EE:4A:0C:09:52:B7:B4
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 018C1153003C75927FDE97F4AB6AB099E5BF
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/xuERByO8HM9ZjjO5Z-5KDAlSt7Q.roa
Signing time: Mon 27 Nov 2023 15:08:21 +0000
ROA not before: Mon 27 Nov 2023 15:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31655
IP address blocks: 92.207.0.0/16 maxlen: 24
79.74.0.0/16 maxlen: 24
151.2.128.0/17 maxlen: 24
2a04:4440::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:53:00:3c:75:92:7f:de:97:f4:ab:6a:b0:99:e5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Nov 27 15:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6e1110723bc1ccf598e33b967ee4a0c0952b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:cd:5b:e0:ce:e8:28:48:73:9d:5f:d1:5d:
57:f8:bf:ab:b4:72:19:15:a8:b6:f7:54:f5:60:fa:
a9:4e:f4:a0:b5:66:de:d9:59:09:fc:e6:6c:3f:85:
57:bf:76:04:ee:8a:70:c9:f3:71:55:56:46:26:82:
03:c6:e7:53:a8:2a:b7:4d:fe:12:32:03:de:b8:d7:
63:c3:28:4e:cf:f7:51:eb:b4:de:e4:0d:8e:37:73:
4a:db:73:f4:87:40:3a:1e:ab:32:3a:ed:2e:a1:d1:
94:0e:0c:f6:8e:88:01:2d:a8:c0:1d:10:c0:7d:62:
20:30:50:34:db:4c:7b:63:99:ac:62:be:30:6d:60:
04:2a:a0:6c:43:b0:dc:f5:ed:94:20:cd:37:a3:5c:
92:fa:c3:d0:29:ca:03:a4:d7:ea:fc:20:9a:06:25:
f5:bf:44:17:20:30:23:6f:72:56:70:ff:68:c9:30:
4e:fe:6d:db:44:92:bc:e8:75:bd:b5:bf:e7:ca:31:
86:ae:38:0a:a7:0a:b6:2b:17:2d:61:a7:20:63:60:
b8:53:03:6d:ce:a2:64:24:08:c7:e4:69:e7:50:7e:
99:fc:64:7a:4f:00:ed:ad:ac:95:da:58:7c:ef:2c:
06:c9:de:df:b4:22:de:fc:de:b6:12:ae:30:b2:ad:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E1:11:07:23:BC:1C:CF:59:8E:33:B9:67:EE:4A:0C:09:52:B7:B4
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/xuERByO8HM9ZjjO5Z-5KDAlSt7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.74.0.0/16
92.207.0.0/16
151.2.128.0/17
IPv6:
2a04:4440::/29
Signature Algorithm: sha256WithRSAEncryption
7b:22:25:ec:e1:e8:16:dc:47:c7:88:e4:7f:f0:da:60:aa:aa:
ea:25:3e:cf:a3:0b:78:a0:99:1d:3b:df:19:3c:4d:c1:7c:ec:
f7:da:3c:b1:27:c2:03:94:0e:df:90:dc:36:42:24:77:17:3a:
4e:1f:72:51:a5:bf:f6:d5:5e:93:e1:3c:65:5b:ae:82:6d:0f:
93:6c:d4:32:a2:40:47:2c:0d:1e:f1:52:b5:88:ba:a9:04:44:
1a:f5:ab:1d:72:8c:69:7b:e9:db:ac:f8:91:b9:c4:cf:58:40:
7a:c1:99:96:22:98:78:63:c1:0d:f6:b3:f4:02:bf:25:bc:ca:
36:95:16:f2:83:d6:08:2b:ed:63:ec:a9:09:d6:aa:76:05:74:
cc:46:a7:4e:d3:47:e7:f0:09:06:fb:65:0d:2c:cc:68:74:2d:
63:3a:ed:b4:bc:a3:dc:36:18:f1:f3:62:71:7b:24:ab:e6:d3:
1a:99:2b:0e:16:26:ea:bb:f4:1f:f4:b3:71:91:bc:4b:d2:2c:
4f:cf:5e:e3:f5:84:23:37:cd:e0:e0:69:bd:0f:1d:e6:54:9f:
6f:28:83:6e:8c:57:ce:39:6e:11:db:35:f6:bb:b3:5b:4c:43:
c5:67:06:ad:fa:ea:e5:b7:1a:6e:86:e5:e4:53:e4:76:09:95:
ac:09:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:33 2024 by rpki-client on console-ams.rpki-client.org