Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/XneoqTWCZxNojdPjRBRYhFQ0C3g.roa
File: XneoqTWCZxNojdPjRBRYhFQ0C3g.roa (raw, json)
Hash identifier: basOsGj1lLeQuy4vMhJqmPc8uAzta4Hyu2y3L+rmgQo=
Subject key identifier: 5E:77:A8:A9:35:82:67:13:68:8D:D3:E3:44:14:58:84:54:34:0B:78
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0187A443869DC0F96B07251368BD536EA5AF
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/XneoqTWCZxNojdPjRBRYhFQ0C3g.roa
Signing time: Fri 21 Apr 2023 14:41:41 +0000
ROA not before: Fri 21 Apr 2023 14:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:43:86:9d:c0:f9:6b:07:25:13:68:bd:53:6e:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Apr 21 14:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e77a8a935826713688dd3e34414588454340b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:07:a0:0a:69:4b:af:78:92:d7:b0:e5:72:
28:18:c7:a7:66:cb:1b:74:17:3c:51:e1:76:89:c1:
6b:91:14:ba:9b:ff:71:1f:2c:f3:d3:f2:e8:06:81:
dc:9f:ad:77:aa:12:21:75:7a:f9:71:dc:d6:bd:32:
0c:4f:88:32:22:1b:c6:0e:64:00:75:4f:cb:9d:83:
73:b6:1c:b8:92:64:12:2b:cd:dd:b8:40:a0:84:0a:
71:5f:ba:12:37:ad:93:54:89:b0:a7:b2:7c:95:25:
91:7f:06:21:dc:86:4f:9e:3d:7c:f3:b6:1e:38:95:
f4:b4:17:31:d3:0d:06:19:4f:f0:66:49:cc:3d:ac:
ad:27:09:7a:34:d2:0c:68:9f:55:c7:b7:79:48:f1:
99:a5:d7:97:dd:06:8c:d5:45:41:fa:7e:b1:c7:78:
c3:75:41:c3:8d:92:d0:89:c8:60:e5:b1:59:9e:b8:
d1:0c:4e:fb:4a:42:d4:75:7d:bb:cd:61:f0:ff:fc:
75:96:4c:83:39:ec:8a:e2:80:c1:41:28:e0:a9:87:
d9:eb:3a:75:d4:1b:37:54:5e:61:99:ac:a8:b0:2d:
93:3e:14:40:34:1d:0c:b0:71:fe:7f:1e:07:ad:71:
f2:ac:f2:82:ad:2d:d0:47:7b:c4:33:92:d0:07:cf:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:A8:A9:35:82:67:13:68:8D:D3:E3:44:14:58:84:54:34:0B:78
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/XneoqTWCZxNojdPjRBRYhFQ0C3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.147.0/24
Signature Algorithm: sha256WithRSAEncryption
19:75:7d:d9:08:75:6a:d3:72:76:19:e7:0d:3b:64:43:fd:52:
ab:23:e6:28:a8:be:f3:59:2c:58:b9:62:96:d4:89:53:cb:48:
92:11:ab:e6:9f:49:0c:6d:ab:63:3a:2a:5b:9f:1a:d4:2d:94:
ce:cf:e1:7e:da:cf:a9:a2:42:ac:d8:63:16:92:82:bf:41:72:
b9:4d:7d:f6:03:68:7f:3b:d1:81:66:c7:ad:05:6f:d5:c4:65:
4c:db:8f:6c:9f:27:83:c3:3a:f0:05:41:a8:14:28:1b:ac:11:
80:df:34:48:08:e5:fe:87:87:53:aa:6f:81:66:0c:b3:a6:a8:
11:ad:4d:75:8e:8b:0f:d0:aa:61:1d:4c:24:91:cf:90:a1:82:
ae:5e:48:6c:f8:dd:88:43:65:a4:a4:7b:f9:2a:81:fa:48:d2:
0c:97:44:c4:09:eb:43:7c:6d:d1:62:7b:1d:cb:f6:57:ca:77:
8e:34:29:a9:25:f1:2f:21:cf:ac:cd:8a:38:b4:ad:be:4c:6a:
b2:38:2d:39:fb:31:63:6a:af:5a:e8:9b:38:06:0e:5f:54:ae:
cb:b8:13:77:74:d7:ed:36:98:ed:cf:45:f0:c7:ac:f0:c1:04:
6b:b7:e4:2d:26:e7:a4:75:1e:04:20:be:94:38:15:38:33:ff:
a0:f2:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:53 2023 by rpki-client on console-ams.rpki-client.org