Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/XJF6OA8oS08F6q7H6DcIDW2XwDA.roa
File: XJF6OA8oS08F6q7H6DcIDW2XwDA.roa (raw, json)
Hash identifier: dvNjeoWKQ+vWGF6t8pgmOeiMCZgzg9vb+Gsci8fVN8k=
Subject key identifier: 5C:91:7A:38:0F:28:4B:4F:05:EA:AE:C7:E8:37:08:0D:6D:97:C0:30
Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial: 018570DE677627FDB5B7AF3FAEF93A85F20E
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/XJF6OA8oS08F6q7H6DcIDW2XwDA.roa
Signing time: Mon 02 Jan 2023 05:05:01 +0000
ROA not before: Mon 02 Jan 2023 05:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39484
IP address blocks: 89.106.32.0/19 maxlen: 19
185.239.192.0/22 maxlen: 22
2a02:13c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:67:76:27:fd:b5:b7:af:3f:ae:f9:3a:85:f2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Validity
Not Before: Jan 2 05:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c917a380f284b4f05eaaec7e837080d6d97c030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:1a:0a:20:54:51:f6:f0:ee:69:d2:68:a6:
8d:06:ae:51:75:4c:f8:0b:db:ff:b9:87:14:64:a0:
91:0a:ce:d0:4a:75:7a:17:b1:cd:fa:8a:af:10:9f:
c7:de:54:b0:19:f7:1a:b3:a5:66:cc:29:02:87:08:
4d:62:5e:5c:db:c1:10:61:17:51:24:f0:60:30:0c:
e5:05:db:e2:3b:84:50:dc:22:cf:61:b7:b1:a3:78:
5f:a4:7a:c8:6c:c7:fd:29:17:4a:31:a5:f6:35:fc:
91:3d:d3:f7:ce:9b:1d:63:5b:91:74:17:31:4c:b6:
2b:87:61:53:2e:cc:cf:b1:ac:82:e7:a0:40:78:7c:
c7:3c:8f:7e:65:14:0d:0b:3b:04:08:8e:3a:59:42:
87:a3:61:7a:1c:e9:a0:16:92:f3:36:bd:7a:de:9d:
09:f7:98:a5:ee:97:b4:e3:5c:29:4e:b8:02:b1:ee:
bb:a0:73:cf:fc:18:28:c7:13:b5:ca:9f:4d:4c:25:
eb:3a:45:45:44:57:76:5b:61:b1:ec:20:20:52:41:
c1:9b:f0:23:78:52:d9:ff:a3:1e:a8:c5:4a:4c:3f:
dc:39:af:92:71:a6:5d:78:13:57:cd:33:fb:bf:c0:
8a:50:b2:46:af:6e:74:24:fa:1c:b1:7b:31:cc:aa:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:7A:38:0F:28:4B:4F:05:EA:AE:C7:E8:37:08:0D:6D:97:C0:30
X509v3 Authority Key Identifier:
keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/XJF6OA8oS08F6q7H6DcIDW2XwDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.32.0/19
185.239.192.0/22
IPv6:
2a02:13c8::/32
Signature Algorithm: sha256WithRSAEncryption
4a:80:9a:2e:05:f7:f9:b2:46:0d:d6:ad:3c:50:0d:1d:5d:8e:
4f:c4:e7:24:6b:41:a6:8b:ad:91:ff:e5:79:a4:7c:37:79:88:
62:aa:e1:f5:bf:ee:03:3d:8d:d5:b1:f4:87:48:85:4a:0d:bd:
e8:20:5e:16:5e:7d:2d:dd:78:91:91:ce:54:9f:22:fe:c7:24:
9b:b1:2f:d6:7b:ca:5b:7b:5b:15:25:21:34:1c:4c:29:c0:cb:
b7:4a:82:78:54:ef:ed:c7:c7:f7:53:cf:89:ba:05:f4:bb:b8:
21:db:96:2a:a1:3d:b8:83:ec:32:21:3c:ea:7c:d0:41:bd:3f:
87:30:b8:e5:76:03:66:1a:02:ee:38:e2:5c:32:79:94:6a:9d:
d5:5b:cc:40:c0:d2:d7:c1:13:fd:ae:2a:73:fc:ed:6c:64:90:
b3:96:92:48:7d:e6:ed:a1:3b:81:a3:4f:43:f6:8a:d9:dd:a0:
7e:37:b8:55:d0:b8:4a:0e:59:be:1c:3f:7a:92:47:8c:6e:88:
fa:64:15:ff:6e:90:24:c2:74:1f:b0:be:35:17:0e:9c:8f:42:
15:93:91:a2:3d:dd:4c:6a:28:c6:b7:f6:d7:49:c2:fe:ad:95:
e1:03:c4:00:56:38:4e:cf:80:44:05:fe:78:f5:76:a5:ff:3a:
21:5a:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:57 2024 by rpki-client on console-ams.rpki-client.org