Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xmYpT53TYoNp32xF3p_KD1iZxns.roa
File: xmYpT53TYoNp32xF3p_KD1iZxns.roa (raw, json)
Hash identifier: W38pIdYIcKxoHSYPk4UCq3c1HSm07COoiRqs6xfnxPM=
Subject key identifier: C6:66:29:4F:9D:D3:62:83:69:DF:6C:45:DE:9F:CA:0F:58:99:C6:7B
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 01895368E7D7185C79C623626168DEC3DCD2
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xmYpT53TYoNp32xF3p_KD1iZxns.roa
Signing time: Fri 14 Jul 2023 07:58:51 +0000
ROA not before: Fri 14 Jul 2023 07:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15517
IP address blocks: 62.65.128.0/19 maxlen: 19
62.65.137.0/24 maxlen: 24
94.78.0.0/18 maxlen: 18
2a01:330::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:68:e7:d7:18:5c:79:c6:23:62:61:68:de:c3:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Jul 14 07:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c666294f9dd3628369df6c45de9fca0f5899c67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:64:ea:0e:d7:41:68:1d:5c:96:25:f0:10:
3f:0d:72:87:49:e5:3d:ce:c6:31:16:57:e5:44:39:
03:82:ee:43:c2:97:47:27:4f:2f:62:ff:50:b0:b6:
68:1b:75:4f:ff:01:ee:1f:6a:b6:92:4d:d9:05:d1:
e5:05:9b:3f:ae:e4:29:99:12:ed:e1:13:b0:4c:04:
b3:26:93:b5:8e:fa:8e:4e:d2:6b:f8:07:e5:cc:c9:
06:55:c9:e0:f7:f4:bb:89:ad:69:be:a6:d8:be:63:
db:80:65:b7:0b:7d:b8:f1:78:4b:78:80:f1:ab:12:
8e:f8:ba:41:14:05:5f:0d:e4:81:ee:ed:ec:fc:11:
4f:03:74:dc:0a:a5:ac:f9:30:13:a8:be:2e:98:97:
84:2a:9b:c0:9e:b4:b8:17:42:49:51:bc:5b:5a:9a:
e9:f1:be:d2:7f:0e:bc:43:27:21:00:29:2e:22:e9:
40:e4:5e:8a:d6:9f:82:84:44:e1:63:ce:8b:1a:78:
cc:72:8b:a8:fe:e1:15:7a:b5:24:a4:b0:b5:9c:29:
37:93:e5:be:b3:3d:f3:8a:f0:3b:c5:92:2f:04:01:
c8:3b:ff:a2:6b:c5:cb:ff:7e:ff:30:c0:12:fb:cc:
23:a1:1a:9d:8e:94:bc:50:c0:4a:cb:b7:19:56:8d:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:29:4F:9D:D3:62:83:69:DF:6C:45:DE:9F:CA:0F:58:99:C6:7B
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xmYpT53TYoNp32xF3p_KD1iZxns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.128.0/19
94.78.0.0/18
IPv6:
2a01:330::/32
Signature Algorithm: sha256WithRSAEncryption
23:ea:88:b5:8c:fa:ea:44:0a:31:f3:e3:30:cd:ab:00:69:9c:
a4:87:fb:87:f0:cb:0c:6d:d1:5c:1a:f2:19:02:45:a0:d9:83:
29:0d:4e:47:64:10:3d:1f:4b:89:f3:2d:da:02:e7:ae:14:05:
21:75:43:06:45:9f:e3:8f:63:45:d7:b7:4c:d6:4e:47:7f:e2:
4c:29:c4:7b:0e:ee:ab:f9:df:db:40:55:21:f7:2d:f9:ca:2c:
be:37:1b:c0:41:5c:e1:1e:7d:c6:8a:e1:ac:0d:77:52:f9:38:
fb:63:4f:25:17:77:b2:a2:e8:d6:9f:de:f3:32:2c:cb:d8:85:
42:03:4e:98:ce:df:62:03:f1:36:c5:7a:96:d2:e9:be:bd:82:
41:fb:21:75:e8:95:3c:9b:fa:9f:ad:42:69:76:54:55:03:61:
04:88:b2:42:5f:5a:ea:18:e0:1e:ae:50:1d:de:05:d4:cc:90:
de:81:26:96:84:e3:6f:df:fe:06:55:38:57:25:f8:cd:fe:f6:
52:60:18:ad:c8:da:6d:e3:63:97:74:8d:e2:9d:71:20:ee:83:
7f:17:87:8e:1e:30:5d:a0:ce:d1:e9:55:43:b9:19:69:5a:2d:
20:a9:bf:b4:af:33:10:8c:3d:fa:61:a0:16:78:1c:99:67:43:
09:9f:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:31 2024 by rpki-client on console-ams.rpki-client.org