Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/XVS4BX0UWGEqE6D0rN3h-vsA-7E.roa
File: XVS4BX0UWGEqE6D0rN3h-vsA-7E.roa (raw, json)
Hash identifier: wXEjzDPkkDrPZIAk3quSaAVxiXQDkWjtnzJ8Mw5aTrQ=
Subject key identifier: 5D:54:B8:05:7D:14:58:61:2A:13:A0:F4:AC:DD:E1:FA:FB:00:FB:B1
Certificate issuer: /CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Certificate serial: 01856DD40CA2EAFF40691D03A74B9E07CCC9
Authority key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/XVS4BX0UWGEqE6D0rN3h-vsA-7E.roa
Signing time: Sun 01 Jan 2023 14:54:51 +0000
ROA not before: Sun 01 Jan 2023 14:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34863
IP address blocks: 176.116.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:0c:a2:ea:ff:40:69:1d:03:a7:4b:9e:07:cc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Validity
Not Before: Jan 1 14:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d54b8057d1458612a13a0f4acdde1fafb00fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:4e:7c:83:e1:4f:83:dc:3a:3a:5f:b2:c9:
ef:9a:47:aa:ca:2c:bc:5a:fa:aa:ac:41:a1:b9:74:
b0:bb:87:67:c4:4b:3b:a5:44:02:78:e6:50:31:c1:
c4:bd:b4:66:bb:7d:4c:1b:71:89:b5:9f:21:66:38:
d5:3f:7b:22:38:dc:f4:05:bc:62:d8:88:f2:8b:96:
3c:94:69:c5:56:26:94:7c:f8:18:59:5d:b0:25:10:
5a:6d:d5:13:b4:e3:91:42:1d:8b:46:d1:a5:7c:85:
95:7f:5b:cb:cb:72:d2:c1:da:a3:22:2b:9b:52:6b:
19:e1:69:c5:b6:97:15:53:14:9c:a7:62:1e:60:34:
f8:51:d0:97:41:9a:3c:7b:aa:f5:3e:24:e8:4e:d8:
d2:c2:d4:e9:c9:28:1d:f4:0a:bc:84:8d:f3:a1:04:
83:9f:54:35:6c:d4:e7:a3:a8:af:86:70:3f:50:99:
6d:e4:c2:ad:19:ed:35:77:e4:61:40:9c:4f:9a:30:
68:3d:6d:f3:d9:a7:79:2d:15:a4:d1:70:92:65:c2:
31:c1:cb:8a:ab:5b:a5:55:cb:4b:6a:e6:9d:3d:a2:
04:0c:5c:b9:b1:fa:7c:b8:1c:88:24:84:41:b3:c5:
c5:ac:c9:ff:ea:12:d9:74:a7:9e:2b:2e:7d:73:4a:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:B8:05:7D:14:58:61:2A:13:A0:F4:AC:DD:E1:FA:FB:00:FB:B1
X509v3 Authority Key Identifier:
keyid:6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/XVS4BX0UWGEqE6D0rN3h-vsA-7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.26.0/24
Signature Algorithm: sha256WithRSAEncryption
50:98:c9:64:87:a8:e2:99:3e:5d:58:9e:66:a8:9d:a9:ee:1e:
b4:d4:f9:b9:7d:c7:95:dc:5d:51:dc:2a:6c:da:9a:d0:81:65:
1b:f1:27:0a:e6:92:ae:d4:09:f0:be:36:77:8b:03:83:47:06:
73:32:65:8a:88:b7:25:4e:50:24:c6:74:da:5e:b8:5d:88:b2:
7d:72:fc:56:e0:fd:e7:01:dd:4b:35:72:3a:e3:06:da:c7:ea:
08:a8:86:cc:84:68:01:3f:aa:79:71:16:d2:3e:65:ea:3d:14:
b6:93:39:70:77:d6:d8:c1:5e:c5:ca:64:d8:d1:08:1c:2f:3e:
ed:50:9e:7d:20:46:38:3b:fb:0c:71:c4:0f:0c:4a:50:0b:03:
94:ea:4f:d5:ab:7b:9d:7c:b2:6a:d2:b6:32:e9:d2:74:67:05:
35:2d:45:47:98:39:09:11:b5:e6:77:d3:0d:4c:ea:e0:e6:3c:
46:bd:fb:63:d6:e6:09:c8:3d:e9:93:a3:e6:69:f9:46:8c:4e:
a9:94:2a:6b:8e:e6:66:3b:9a:3b:a0:a8:db:c8:b6:8d:69:8d:
f9:27:79:cc:f7:ef:47:74:36:ca:ac:5f:9b:17:4c:91:b5:20:
9b:76:f6:5c:f1:4d:c0:5a:51:c8:ff:6d:59:c9:b9:ce:e7:d5:
1a:b9:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:04 2024 by rpki-client on console-ams.rpki-client.org