Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/XGfMRGZ1C2CrZKs793yRaWzlaaw.roa
File: XGfMRGZ1C2CrZKs793yRaWzlaaw.roa (raw, json)
Hash identifier: jznx5G4ZcobAE2hQ53/CsKvczWY4YJPW6uAaLGSw3Ys=
Subject key identifier: 5C:67:CC:44:66:75:0B:60:AB:64:AB:3B:F7:7C:91:69:6C:E5:69:AC
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 018570D53E186628F91F64A8B70D2A339D9A
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/XGfMRGZ1C2CrZKs793yRaWzlaaw.roa
Signing time: Mon 02 Jan 2023 04:55:01 +0000
ROA not before: Mon 02 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20910
IP address blocks: 185.242.184.0/24 maxlen: 24
2a13:6000::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:3e:18:66:28:f9:1f:64:a8:b7:0d:2a:33:9d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Jan 2 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c67cc4466750b60ab64ab3bf77c91696ce569ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:29:ad:93:76:d7:32:98:47:20:e0:18:7c:
c3:7e:9b:13:f2:24:62:40:25:a1:75:5d:31:9b:f9:
e6:3c:53:6a:f8:a4:c6:33:6e:fd:77:79:76:69:af:
2e:a1:96:01:87:d8:cc:d7:0d:71:9e:2e:47:a5:c7:
33:e2:7c:89:58:74:b3:89:70:68:9f:6c:b2:bd:f6:
70:64:5f:be:bd:6f:67:f8:b0:db:61:c5:da:38:48:
b1:57:e9:5b:29:b6:f4:cf:fd:2c:21:c4:0b:e5:21:
4a:d4:4e:74:62:27:a2:50:fd:90:37:02:00:96:cb:
7b:c9:93:32:a8:50:9b:67:fc:c9:e6:62:e0:7a:25:
0d:72:4a:04:a0:9c:67:f0:f1:08:38:3e:42:6b:0d:
73:21:7b:8f:2e:a6:7d:33:80:04:b0:60:9a:29:00:
36:3b:a3:b7:09:80:4e:88:3f:e8:37:c5:4e:f6:02:
35:18:b9:c5:c7:99:d6:c1:1f:16:02:6f:0e:cc:6a:
eb:de:4e:4d:06:f0:c0:16:d3:15:4f:7f:99:bb:83:
ff:a0:98:2c:e2:c4:b4:7c:e8:cf:42:6f:06:c1:b3:
9e:78:43:12:6f:32:b0:20:9d:0b:30:61:4e:ec:ba:
0e:e7:34:47:5c:7b:18:cc:f3:f3:a6:04:8d:fc:5b:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:CC:44:66:75:0B:60:AB:64:AB:3B:F7:7C:91:69:6C:E5:69:AC
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/XGfMRGZ1C2CrZKs793yRaWzlaaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.184.0/24
IPv6:
2a13:6000::/29
Signature Algorithm: sha256WithRSAEncryption
83:51:2e:d0:15:5b:87:56:e2:0c:c4:54:2c:fc:e4:dc:ce:b2:
2b:40:90:e7:82:f2:91:63:81:a4:ff:34:98:a7:0a:9a:9f:88:
82:f7:55:2c:aa:30:40:0e:37:af:8a:7a:45:43:86:2b:2c:eb:
f3:2b:b2:e3:27:79:c8:5b:41:df:f9:cc:7d:03:41:c7:54:b1:
f9:f5:56:be:e3:56:ad:8b:c9:d3:84:b5:d8:42:8f:15:d5:30:
ee:da:aa:36:85:2d:4d:2c:f0:57:60:a4:bd:75:b2:c3:f3:45:
3d:c2:95:df:ad:65:3e:a9:c2:54:07:05:62:49:b9:8d:78:dd:
64:59:ad:82:e4:2e:b6:b4:72:e5:19:88:84:d5:72:1d:e5:45:
2a:9a:51:c8:8a:bb:a7:4f:ce:9c:e2:9c:92:bd:81:c4:f8:3d:
c7:d5:52:95:d2:56:c8:7f:f9:b8:ea:93:63:70:bd:46:26:48:
6d:d7:79:34:c7:6f:dc:13:63:6f:66:84:18:41:9f:0e:8c:df:
8a:44:b2:3f:90:ea:95:e2:7f:c7:84:62:df:77:31:d2:d1:98:
46:5c:7b:3a:55:ec:29:6c:77:1d:7d:66:71:4a:ec:55:13:d8:
58:3b:91:8d:de:6e:b3:58:9e:aa:ee:3f:ee:83:29:2e:0c:e3:
34:07:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org