Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/XKAkVgSFEeNOvc-6a857P_IWrAE.roa
File: XKAkVgSFEeNOvc-6a857P_IWrAE.roa (raw, json)
Hash identifier: aEUazm586rGGB0AD3AKbYamsIqefOfouM73sj9o5Lz8=
Subject key identifier: 5C:A0:24:56:04:85:11:E3:4E:BD:CF:BA:6B:CE:7B:3F:F2:16:AC:01
Certificate issuer: /CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Certificate serial: 01875FDD29586D895328D8D883E1A6B2C139
Authority key identifier: 43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/XKAkVgSFEeNOvc-6a857P_IWrAE.roa
Signing time: Sat 08 Apr 2023 07:55:42 +0000
ROA not before: Sat 08 Apr 2023 07:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201452
IP address blocks: 185.136.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:dd:29:58:6d:89:53:28:d8:d8:83:e1:a6:b2:c1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ffd36796e90f812a1612ec1f464de3d5e2f38
Validity
Not Before: Apr 8 07:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ca02456048511e34ebdcfba6bce7b3ff216ac01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:3c:61:e3:1c:82:6d:71:7d:93:cb:5d:71:
78:87:78:4f:a3:77:3b:6b:c4:75:c6:0e:ff:e2:72:
fc:a6:26:5e:0f:6e:65:97:69:c5:a9:2d:50:ef:19:
97:5e:03:16:17:b7:8a:82:64:34:ae:65:52:cb:1a:
fe:93:a4:4b:c6:17:a1:76:ce:e6:ea:1a:44:a1:a9:
e2:de:fe:15:07:27:8e:14:e2:eb:40:3f:9b:74:e1:
29:c1:34:99:97:fb:57:bb:c7:f5:dd:a5:44:76:7e:
66:6c:68:ac:fb:73:5c:19:9b:ce:56:e3:0a:12:06:
36:9b:71:50:23:86:0e:1e:99:cf:45:7f:4b:5c:b6:
ef:01:44:ec:65:85:05:77:01:a7:6f:70:81:f6:71:
91:55:69:9a:ba:5b:63:9b:4c:eb:97:0c:42:75:d6:
8b:ef:27:2a:cd:64:36:a1:fe:65:1b:7c:93:66:81:
1e:b2:45:f2:11:bf:13:80:24:4f:d6:02:1c:72:73:
cb:09:8a:89:6d:80:26:32:72:3e:63:55:c0:8a:67:
87:b9:ff:4a:05:ff:d8:61:a0:2b:2b:6d:c5:71:b8:
f3:32:db:2e:de:53:8b:33:a1:ce:58:f1:70:92:ab:
79:2f:b4:b1:fa:c6:fb:19:f3:16:25:01:86:72:b9:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:24:56:04:85:11:E3:4E:BD:CF:BA:6B:CE:7B:3F:F2:16:AC:01
X509v3 Authority Key Identifier:
keyid:43:2F:FD:36:79:6E:90:F8:12:A1:61:2E:C1:F4:64:DE:3D:5E:2F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_9NnlukPgSoWEuwfRk3j1eLzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/XKAkVgSFEeNOvc-6a857P_IWrAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/196f89-2421-4bc1-b305-8c6a5e0ea06e/1/Qy_9NnlukPgSoWEuwfRk3j1eLzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ec:90:1d:e4:f4:25:20:71:fa:0c:ec:14:3b:39:8e:bc:b9:
88:e7:4d:72:38:d7:2d:1f:91:84:c5:47:51:65:4b:b9:4a:e8:
47:a3:5a:d4:c6:59:dd:b1:6f:ce:b8:aa:d8:ba:f3:0e:05:1f:
45:b9:4a:78:d8:b4:1a:db:11:1b:12:0f:07:f7:39:64:95:98:
f8:eb:f8:16:d7:fb:97:78:02:b4:47:d2:ca:9a:98:01:02:a4:
8a:c6:79:15:28:c2:24:65:37:55:60:2c:e3:74:13:9c:cd:5c:
83:e3:23:4f:ae:04:7c:53:bc:80:7e:89:ea:1b:31:a8:39:25:
35:55:21:03:88:e9:dc:16:a5:e2:d0:a4:c1:e7:89:f8:46:31:
23:d5:d3:78:c2:a7:be:c3:f2:fb:f3:40:69:77:f8:4f:c2:eb:
13:b8:c5:83:2f:76:4a:39:f4:1a:d3:b3:19:9a:cd:05:17:73:
74:c7:7a:34:9f:fc:4a:77:c5:01:52:6e:b2:23:93:2e:44:f5:
66:57:68:f8:64:ed:dd:2a:2d:db:f7:30:51:f1:87:37:27:66:
ac:09:0c:36:bc:11:9c:de:cf:48:27:95:82:d0:27:bf:d3:d6:
85:1c:1c:8c:0c:3c:11:e0:2f:8f:46:67:26:38:5f:bb:98:d7:
f3:8b:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org