Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/e9fqDnkzuYhocNdXyUv627R_63U.roa
File: e9fqDnkzuYhocNdXyUv627R_63U.roa (raw, json)
Hash identifier: PX24ZyAoV+SlsoG5NyOiw1+/ZFoS1cMaPvOImP135to=
Subject key identifier: 7B:D7:EA:0E:79:33:B9:88:68:70:D7:57:C9:4B:FA:DB:B4:7F:EB:75
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F4290A689A8292A53F460EC0646BA63
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/e9fqDnkzuYhocNdXyUv627R_63U.roa
Signing time: Sun 01 Jan 2023 21:35:11 +0000
ROA not before: Sun 01 Jan 2023 21:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 5.152.182.0/24 maxlen: 24
5.152.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:90:a6:89:a8:29:2a:53:f4:60:ec:06:46:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd7ea0e7933b9886870d757c94bfadbb47feb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:5f:1c:42:06:ff:c4:b7:c2:b0:68:fe:60:
4d:c7:06:0c:9b:53:7a:bf:c4:c2:ea:03:a1:b3:36:
d0:55:17:4d:18:fa:ad:a7:18:c6:d7:6d:5a:5c:a9:
76:27:dd:1d:ac:38:94:5d:1c:21:da:5f:df:64:77:
4f:f8:b1:45:db:9c:cc:18:ca:1a:f5:f6:04:4c:2e:
e4:00:5b:4e:04:3c:89:c4:ab:cc:40:36:84:65:57:
d3:63:bb:9b:73:55:90:9e:61:b6:51:17:14:0d:c9:
b0:28:09:16:3b:f4:9b:23:b2:37:29:a0:59:8f:01:
47:7f:f7:c8:09:12:23:2a:ef:aa:1a:37:0e:a4:e3:
c4:b2:3a:e5:de:fd:73:4c:d3:ca:26:2c:fc:4d:2b:
18:29:da:78:60:15:3b:23:7c:ad:bb:70:72:c9:78:
3d:5d:3a:73:8b:ce:a3:da:75:9d:76:cd:2d:db:32:
4b:46:58:5c:60:a0:cb:f3:b7:f1:d6:f3:a6:4d:34:
4d:a4:91:e7:67:08:96:a6:45:e8:c7:d4:9e:10:c2:
54:da:0e:ef:f2:c5:f6:14:1a:d2:a7:49:a9:db:f5:
57:91:31:9f:77:c9:53:d3:2f:a0:18:f8:d5:30:34:
00:61:8e:4e:19:a1:78:b9:ef:87:73:2b:f7:83:e4:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:EA:0E:79:33:B9:88:68:70:D7:57:C9:4B:FA:DB:B4:7F:EB:75
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/e9fqDnkzuYhocNdXyUv627R_63U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.182.0/23
Signature Algorithm: sha256WithRSAEncryption
77:89:14:2e:8f:36:f5:3f:2c:38:ca:8a:2f:a7:d1:1b:58:79:
0c:e4:fa:ac:5a:f9:a3:19:ba:f9:a7:98:ea:13:9f:d8:20:23:
9a:f9:61:30:4d:44:16:d4:76:1c:38:6a:2b:c2:a7:3f:16:85:
99:58:24:7c:b6:35:83:85:1d:87:05:32:7b:48:f4:60:da:cb:
5c:f9:f4:a8:cf:e5:8f:79:53:bc:65:1f:22:14:07:1e:d0:3b:
3c:0b:35:1e:be:58:b4:b8:1f:34:82:72:d4:60:75:43:9b:8c:
27:11:57:e2:44:0b:23:29:0c:80:b7:da:25:7a:e4:0e:83:f7:
3e:50:e7:b8:49:1c:fe:aa:5c:64:d8:7f:32:09:f8:ad:dd:e6:
12:e3:95:a1:06:4f:6e:90:af:af:4c:74:63:bc:e4:c5:3c:8b:
1a:7f:56:5a:1e:f4:ed:39:23:a4:df:0e:3f:48:02:1d:ec:1f:
7b:33:d7:13:50:2f:ff:40:16:2d:6c:a5:6d:7e:59:7c:88:ed:
d7:a3:ea:a0:12:7a:3b:35:73:3d:8b:60:fe:26:61:79:27:ff:
51:6a:af:c8:88:f9:28:34:3c:5e:6b:f2:81:7c:90:ce:c8:85:
66:41:c2:f1:65:49:b5:d7:01:37:85:c3:7d:f3:21:8b:a2:0c:
f5:57:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org