Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/XyJ4JnTsfzg5kV4I-6Qp-jSMb0g.roa
File: XyJ4JnTsfzg5kV4I-6Qp-jSMb0g.roa (raw, json)
Hash identifier: Bx0vssYdWhjQ9dHPaYZijZ9SwX/LxNI8aGXijWZ8k7M=
Subject key identifier: 5F:22:78:26:74:EC:7F:38:39:91:5E:08:FB:A4:29:FA:34:8C:6F:48
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7C3BB9679E5282373C33723F3FAF9
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/XyJ4JnTsfzg5kV4I-6Qp-jSMb0g.roa
Signing time: Mon 02 Jan 2023 09:37:23 +0000
ROA not before: Mon 02 Jan 2023 09:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207409
IP address blocks: 45.9.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c3:bb:96:79:e5:28:23:73:c3:37:23:f3:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f22782674ec7f3839915e08fba429fa348c6f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:6d:6a:63:48:a6:49:c5:1b:d8:1c:d7:72:
28:de:86:f4:ef:62:cc:d9:f5:36:1c:ea:91:f9:77:
26:82:b9:0c:07:35:2e:e9:ca:f0:a5:d1:7a:6e:e7:
ee:07:21:4d:0d:14:47:c6:74:5f:21:69:57:a2:18:
0f:a0:c9:4b:8b:e7:7f:0b:d6:f0:01:25:4b:6e:0e:
91:96:10:f4:c3:cb:a6:d3:c1:0a:f5:b8:a5:0e:41:
e4:68:5f:e1:fe:84:13:cc:79:3b:89:9c:18:dd:b4:
49:f3:c9:68:41:b8:d2:17:6f:8b:e5:a3:1e:47:83:
79:d3:dc:86:33:c5:9e:a3:b8:bc:00:41:8a:78:a2:
22:dc:94:d6:79:02:12:b2:01:90:fa:6d:c3:3b:99:
fb:05:28:65:b2:1e:21:b1:74:24:a6:0a:d3:59:fd:
a4:9b:07:ba:21:e0:ed:ab:a8:08:21:48:ed:dd:13:
fe:78:2a:ef:55:f3:89:5e:4b:c1:f2:5b:69:a6:eb:
1f:73:98:bb:dd:01:e5:74:4d:d4:6d:22:08:70:78:
da:43:fd:c2:8c:b8:b1:63:61:ae:6f:17:69:1f:90:
c4:c1:24:bc:95:8f:07:e3:61:d1:5f:8e:6d:e9:0b:
d7:e1:6c:a9:6d:22:7d:bf:4a:4c:c9:28:38:31:d0:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:78:26:74:EC:7F:38:39:91:5E:08:FB:A4:29:FA:34:8C:6F:48
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/XyJ4JnTsfzg5kV4I-6Qp-jSMb0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.255.0/24
Signature Algorithm: sha256WithRSAEncryption
08:67:82:5f:4e:9a:fd:e1:ed:10:be:31:b5:fb:da:e7:ba:3d:
d7:ce:23:bb:ba:e0:cb:2e:0c:bd:9b:34:c3:de:b8:52:74:21:
17:6c:01:51:55:de:ad:a6:3c:8b:78:2b:16:e2:27:a9:18:a4:
91:29:d6:99:ce:e9:44:74:28:e8:68:0e:09:ec:eb:7b:01:eb:
62:59:0a:4e:1b:5b:39:7a:69:43:32:0c:44:4a:6e:d9:f1:16:
36:36:0c:55:49:48:ac:98:ab:33:c5:05:a5:14:d0:e0:81:d0:
b4:a1:3e:03:28:07:3c:53:d7:f6:cd:42:7f:47:c2:fe:07:87:
c8:9e:d3:8c:52:49:ac:ed:df:d8:9c:df:f2:ba:5a:34:ac:1c:
22:94:93:71:59:19:d9:25:76:21:03:81:4a:8d:4f:ae:38:c2:
6d:89:ea:2f:f3:6e:46:86:87:e5:f3:06:a3:8b:b8:ec:c5:dd:
1e:55:09:4e:70:59:cc:b8:15:0c:59:bf:48:7b:4a:16:ef:b1:
b1:ff:58:c1:44:6f:dc:a1:11:17:5d:91:1f:01:dd:00:cc:3e:
dc:7e:7c:75:4e:c3:d2:8a:59:0c:4a:52:7a:4f:65:71:44:d2:
02:27:91:e4:4d:e1:c3:4b:31:cd:14:f3:5c:94:1e:20:2a:93:
e1:1d:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org