Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/XLyxoSucz--JtUHGpkKT_mghCFM.roa
File: XLyxoSucz--JtUHGpkKT_mghCFM.roa (raw, json)
Hash identifier: 8gbCKSnAY9CzvRdArR53eSyDZSB5lNQif2/OwDVAqxY=
Subject key identifier: 5C:BC:B1:A1:2B:9C:CF:EF:89:B5:41:C6:A6:42:93:FE:68:21:08:53
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 01857227C32866E709E37574341FCCB8C7DF
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/XLyxoSucz--JtUHGpkKT_mghCFM.roa
Signing time: Mon 02 Jan 2023 11:04:46 +0000
ROA not before: Mon 02 Jan 2023 11:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39373
IP address blocks: 195.178.100.0/24 maxlen: 24
195.178.100.0/23 maxlen: 24
195.178.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:c3:28:66:e7:09:e3:75:74:34:1f:cc:b8:c7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jan 2 11:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cbcb1a12b9ccfef89b541c6a64293fe68210853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:21:77:00:6a:a3:8a:06:53:37:14:f4:ca:
6e:9e:b4:58:72:5a:70:3d:c7:de:9d:3f:c2:0d:25:
82:7b:b8:ea:dd:56:f8:62:12:3a:a6:98:55:ef:fe:
5b:d8:ee:c3:d7:62:be:c9:fe:1e:ba:cc:15:22:83:
51:d7:50:ee:c3:4c:b9:ea:53:6b:25:08:32:43:aa:
ce:a1:9d:bd:e5:e5:75:d0:04:38:0f:b6:fb:44:9b:
21:1a:06:43:9c:40:a0:b4:07:4e:d7:a8:df:a4:a2:
ef:e7:24:fb:72:10:7f:93:43:91:53:03:d9:94:1d:
32:2a:65:b8:e0:01:e5:8e:35:51:cb:9a:38:7b:53:
87:51:7d:45:46:8b:56:08:9a:58:43:99:86:40:57:
86:bc:2f:ba:ee:9f:f8:9d:7f:ed:2d:e4:13:a2:f3:
da:90:0c:6a:af:25:a1:13:0a:84:19:ed:48:c3:50:
71:56:54:f7:dc:17:d3:f0:03:b7:ca:44:e1:57:f5:
5f:53:81:de:d1:24:fd:b1:c5:2a:79:c3:66:4f:c6:
c9:dc:d7:ec:87:13:ef:c3:b0:d4:00:fb:6c:cc:34:
60:b3:9f:e4:73:ca:fa:3b:22:c2:18:81:75:19:17:
46:9b:27:35:da:56:50:14:d7:0d:bf:4d:6d:05:20:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BC:B1:A1:2B:9C:CF:EF:89:B5:41:C6:A6:42:93:FE:68:21:08:53
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/XLyxoSucz--JtUHGpkKT_mghCFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.100.0/23
Signature Algorithm: sha256WithRSAEncryption
10:16:cc:3d:06:c8:9b:e4:a2:ea:2b:61:84:33:45:92:61:c1:
bf:4f:02:b7:31:00:cc:83:e4:ba:57:d6:a9:06:83:87:e3:8f:
ce:02:8d:b3:c6:0b:f4:78:f7:4c:71:c9:82:0a:71:4e:0f:43:
f9:15:07:5d:b7:d9:80:45:05:32:43:45:a9:18:b6:05:25:58:
d3:84:3e:12:ca:0d:03:f9:ce:f8:38:3f:98:d8:a5:fc:a0:4f:
1e:79:39:aa:a5:ae:ef:ff:59:41:18:c1:eb:5c:f6:3c:56:08:
a5:c3:03:06:76:68:b7:2b:32:e1:53:2c:e9:c6:47:fe:f7:27:
d0:53:c7:d3:bd:0b:48:36:ef:17:1d:08:a3:06:2f:68:d5:3d:
52:1e:f6:6a:05:38:3f:0a:22:4c:7f:3d:0c:23:68:b3:73:15:
5e:d1:ae:98:34:be:bb:ba:c0:01:1d:df:dd:48:02:90:e8:21:
3d:b0:17:6a:87:6e:63:81:77:d8:8d:17:33:60:ae:a7:42:c3:
9f:fc:84:34:b2:af:34:f2:02:0e:89:cc:6f:9b:e1:a3:66:40:
03:7d:4e:8d:1e:ad:2c:82:f6:64:6a:c0:fe:f3:cb:0e:b2:be:
34:b3:ff:6d:75:ab:a1:08:e6:b8:5e:7a:83:61:f6:f3:7b:16:
b9:1a:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:50 2024 by rpki-client on console-ams.rpki-client.org