Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa
File: XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa (raw, json)
Hash identifier: cfEuICO17LkGx89ZozuA7pvuhSX61B1NPSN57bdo4TY=
Subject key identifier: 5F:1B:31:4C:39:B3:ED:B4:D2:C4:4E:E9:41:F4:ED:F4:F7:2B:37:0E
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 0188059BB0668131B4073EA7397D0F2F1D08
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa
Signing time: Wed 10 May 2023 12:21:09 +0000
ROA not before: Wed 10 May 2023 12:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34273
IP address blocks: 193.138.200.0/22 maxlen: 22
46.17.192.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:9b:b0:66:81:31:b4:07:3e:a7:39:7d:0f:2f:1d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: May 10 12:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f1b314c39b3edb4d2c44ee941f4edf4f72b370e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:eb:f4:a8:4a:fd:29:3f:42:12:30:8c:92:
e8:6e:d4:fe:3e:4f:92:e9:b4:b0:9f:e0:ec:82:87:
18:e9:ca:4a:17:64:7a:e3:2b:6e:a8:d0:c8:1e:33:
24:0a:14:b4:7e:55:88:f7:e2:9b:b7:57:8d:83:e1:
11:b4:44:19:35:40:59:8d:e8:36:0b:cf:91:15:5c:
52:e6:b9:87:81:10:5a:9a:0c:88:7f:48:f7:62:81:
84:90:08:db:78:88:5e:e3:ad:06:0b:19:7d:e8:ec:
54:d6:be:a5:47:d8:41:59:56:81:ce:e2:bb:89:ef:
df:f7:eb:1f:ec:3d:cf:cb:0a:8c:cc:59:5d:3c:a4:
0a:c5:a8:64:19:e9:8e:87:60:65:36:83:7c:88:e9:
98:10:36:04:42:da:b2:a4:ec:8e:91:d3:7d:52:b4:
1e:86:5a:96:c5:23:f8:aa:21:b8:b0:ee:aa:3c:3c:
7e:58:ba:0a:3e:c7:c9:88:0d:80:b3:a1:60:e6:64:
e4:0d:be:64:e9:0b:46:2a:34:88:22:ee:68:a9:13:
d0:9e:ed:27:2e:d4:b7:e6:87:0e:fd:1f:c8:34:23:
34:6c:f0:11:88:66:9f:a7:e1:68:03:3f:a9:d0:09:
78:75:8c:df:77:5c:25:0d:a3:c1:bf:5f:79:42:14:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1B:31:4C:39:B3:ED:B4:D2:C4:4E:E9:41:F4:ED:F4:F7:2B:37:0E
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/XxsxTDmz7bTSxE7pQfTt9PcrNw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.192.0/21
193.138.200.0/22
Signature Algorithm: sha256WithRSAEncryption
58:d6:fd:eb:68:6d:61:bd:6f:22:fd:20:33:59:91:17:99:d9:
cf:80:80:93:ec:be:dd:ad:17:b6:21:d1:c1:56:e0:cf:64:c0:
70:90:b5:21:fb:68:4e:41:fb:ee:a8:ba:81:d8:e9:6b:54:fe:
3a:57:2b:15:18:a7:2b:b6:dc:ca:a1:09:54:75:7a:d8:45:b5:
23:01:fe:d4:43:e5:f5:09:43:38:fd:6b:8b:ea:53:75:50:43:
f5:c9:d7:ea:cb:a8:3f:d1:56:e9:7d:e6:0f:61:8e:73:fa:9b:
16:14:fd:f2:71:f7:91:05:ae:cd:fb:91:09:22:63:ee:f0:5f:
73:2b:cc:18:a3:0b:f5:d5:0d:c2:b6:dd:81:12:37:7f:2a:71:
f3:70:78:16:00:17:07:ae:f6:0c:f7:40:c2:ae:a2:a2:50:a9:
8a:f2:b2:b7:55:19:f6:c0:07:30:49:35:96:2a:3a:47:ec:36:
2c:fc:38:9e:37:b2:3d:1f:23:11:02:30:29:7d:bb:2e:41:a3:
2c:a6:5d:8a:67:df:5e:20:41:50:00:59:23:a5:ba:51:f9:8a:
f5:92:81:e4:63:33:78:95:ce:48:e1:ae:0b:e5:51:06:8b:1a:
ee:b1:af:d0:48:b2:a3:01:48:34:1d:45:e4:65:8b:9c:c5:42:
36:c7:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:57 2024 by rpki-client on console-ams.rpki-client.org