Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XEeditt-bc3nXL1S273FY5j6-oU.roa
File: XEeditt-bc3nXL1S273FY5j6-oU.roa (raw, json)
Hash identifier: xtGAg7zCsCC9TDUDx58Tj2AfnLHBOEvtxwSaciTS1q4=
Subject key identifier: 5C:47:9D:8A:DB:7E:6D:CD:E7:5C:BD:52:DB:BD:C5:63:98:FA:FA:85
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD4A1F4A563FD05F4F4DA0687B5FC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XEeditt-bc3nXL1S273FY5j6-oU.roa
Signing time: Sun 01 Jan 2023 10:05:10 +0000
ROA not before: Sun 01 Jan 2023 10:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8995
IP address blocks: 192.165.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d4:a1:f4:a5:63:fd:05:f4:f4:da:06:87:b5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c479d8adb7e6dcde75cbd52dbbdc56398fafa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:17:db:40:ed:4c:b2:df:87:dc:94:53:b4:
9a:ce:a2:d4:9a:73:4f:cd:5f:63:9e:82:c8:8e:c0:
df:0f:25:52:47:34:2e:af:fd:d7:59:ae:53:f5:b4:
aa:16:aa:8a:6c:86:95:0e:c1:a7:2e:e7:c1:b5:eb:
7f:50:c9:49:cc:27:b8:43:94:87:c6:cf:2a:7a:c0:
07:73:b0:8a:69:8b:87:a7:b3:c9:13:01:cf:e2:58:
a0:5c:09:e8:51:12:14:26:56:fd:3c:c2:ee:01:30:
ca:7e:85:ca:4a:eb:28:27:50:fa:a6:d0:fb:d8:67:
64:5b:ee:d7:56:d2:a3:0a:f0:e7:01:7b:b1:40:1f:
1f:55:9b:0d:1b:1c:e7:95:1c:2d:af:23:b2:20:49:
d0:f5:2b:46:41:4e:b5:a2:b4:ed:f3:e5:f4:86:91:
8b:c1:df:a6:80:81:6b:3d:cd:61:78:af:06:4e:8b:
a1:b7:d8:0e:2a:41:33:17:d3:2c:40:0c:a2:4a:5d:
52:97:54:85:60:ff:41:97:e2:4c:8b:af:f0:49:00:
40:82:f6:4a:04:6e:13:a3:0d:18:b7:d0:5a:3b:62:
7e:91:02:a7:a8:b4:39:81:fb:a8:8b:54:92:21:d7:
5c:d5:b5:f9:f9:4b:df:26:9c:3d:52:f9:97:46:c0:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:9D:8A:DB:7E:6D:CD:E7:5C:BD:52:DB:BD:C5:63:98:FA:FA:85
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XEeditt-bc3nXL1S273FY5j6-oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6e:84:2f:f2:47:db:df:e6:84:f1:3d:40:f8:6b:80:0b:ed:
a8:6f:e1:89:c5:c9:9a:e4:cd:d7:4a:29:79:a6:3f:88:98:ee:
3d:49:02:11:d8:2e:e2:a6:56:07:68:dd:b2:14:28:a9:e6:a0:
b1:16:94:b7:f4:8a:0a:3d:81:4f:ba:5f:27:35:7c:c4:fd:4f:
e2:85:05:a7:07:53:cb:28:f7:56:0b:6b:1d:27:0d:9c:2c:ee:
e2:d0:64:17:93:4a:c9:d0:0e:23:b6:3f:9b:7e:29:f2:bc:42:
09:62:87:93:ec:69:94:39:2e:de:e3:e7:bb:e9:f6:bd:13:02:
b3:8d:e2:6b:ca:2e:4e:d1:d0:9a:3d:d1:10:04:77:6d:1c:04:
bc:60:52:be:1a:f7:c9:d8:3e:23:48:eb:7f:36:4f:d3:94:0c:
f5:60:f9:5f:d7:af:2f:b6:8f:3d:08:40:c8:ee:74:66:26:23:
e4:a4:ad:45:c0:32:65:df:f8:90:48:da:5b:4f:49:82:40:ea:
d0:79:da:c4:ea:dd:36:3b:42:6c:b0:06:8e:31:69:e0:ba:7b:
8b:ca:e5:ff:45:66:03:a0:6d:83:38:07:91:7b:a6:ea:d7:57:
ee:df:af:81:a3:10:00:28:db:1c:81:dc:43:25:43:c2:22:4c:
f9:e3:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org