Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IXIYLb6I-OEj3otDTGc5-adB0qg.roa
File: IXIYLb6I-OEj3otDTGc5-adB0qg.roa (raw, json)
Hash identifier: 5fIPNQ/pjDFfqOsJRdlIUozAMryCPfb4lK2HKzRiXuY=
Subject key identifier: 21:72:18:2D:BE:88:F8:E1:23:DE:8B:43:4C:67:39:F9:A7:41:D2:A8
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018D2660C21DAEBC6162901897F14D4CD92E
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IXIYLb6I-OEj3otDTGc5-adB0qg.roa
Signing time: Sat 20 Jan 2024 10:18:11 +0000
ROA not before: Sat 20 Jan 2024 10:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 5.144.177.0/24 maxlen: 24
5.144.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 21:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:60:c2:1d:ae:bc:61:62:90:18:97:f1:4d:4c:d9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 20 10:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2172182dbe88f8e123de8b434c6739f9a741d2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:cd:2d:c0:07:43:a8:6d:f0:08:20:21:c3:
92:5a:f4:d5:3e:1d:5d:e7:38:fa:fc:9f:21:2c:db:
7b:3c:cd:74:1d:c5:3f:42:4c:df:3e:3c:0b:fc:4e:
d3:0e:40:78:16:e5:4d:0c:e1:2d:4d:b3:d4:1c:ab:
01:87:5a:ba:b9:0b:c7:2e:d8:b3:1e:8a:5b:69:be:
bb:4c:ca:7f:3a:b9:60:0d:64:df:b3:92:4c:b2:09:
a8:ad:b2:f6:6f:96:c7:dd:dc:39:9d:fa:67:21:ce:
9a:e0:95:90:49:ed:fc:76:73:15:bd:17:07:8e:9b:
0e:12:b9:62:a1:5f:d6:7a:b2:16:51:fe:7a:d5:7d:
b8:eb:b4:81:3e:35:09:b5:e5:be:5c:d5:9e:db:c6:
ee:5a:5a:dc:3e:f8:06:ce:37:87:85:e9:c7:ea:0f:
71:35:8a:41:e9:95:b5:e1:39:c4:8f:85:01:ce:96:
ab:62:d1:43:26:59:3d:e5:e1:51:0d:bc:6e:6f:96:
05:ae:03:81:db:91:6d:e6:99:0e:54:01:1f:3c:ce:
95:95:3e:5c:40:d3:1d:c5:a6:a1:c4:51:23:18:13:
40:87:69:e5:bf:39:90:6f:30:87:58:dc:96:8e:af:
61:82:b9:c3:74:17:c6:29:3c:13:0c:96:aa:d3:81:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:18:2D:BE:88:F8:E1:23:DE:8B:43:4C:67:39:F9:A7:41:D2:A8
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/IXIYLb6I-OEj3otDTGc5-adB0qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.177.0/24
5.144.180.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c3:40:75:e6:a3:b9:09:4d:f4:b7:83:63:bc:1b:c2:bf:18:
d0:45:9a:f2:7d:2e:86:af:0d:55:ed:d8:8b:ff:30:33:b0:ae:
24:2f:40:c4:63:b1:b3:2b:97:ab:cf:66:b9:30:2f:8f:3f:5b:
a6:03:57:16:86:1f:90:bf:24:cb:20:af:62:96:56:c2:96:10:
7d:ce:52:1a:89:0e:2a:3a:ff:80:65:47:21:bb:75:fa:c7:34:
82:a0:40:2a:0b:a8:1e:2d:ac:b9:aa:f4:a6:01:88:86:37:dd:
22:ff:cd:1f:de:83:31:62:49:7b:65:23:f3:a9:f4:73:4e:50:
c4:fb:2d:06:e6:83:e8:c4:a8:1d:3b:1f:1a:6f:ee:3e:00:2a:
3a:5b:d5:43:3e:2d:a7:20:d1:39:47:29:b6:96:18:9a:6e:ca:
93:95:c0:12:c7:cc:5b:94:fa:74:b4:bf:8d:b5:6d:8c:aa:c3:
53:55:04:11:f1:fd:86:14:49:05:07:23:b0:de:8b:04:cc:0f:
e3:26:73:8a:9d:cc:02:c7:fe:fe:d8:ab:13:81:0a:dc:11:e1:
65:08:f1:e0:93:15:bc:29:d6:ab:26:2a:43:8d:63:24:1a:06:
d7:25:83:8c:3d:d4:7f:d0:5f:57:6d:c1:64:dd:ad:af:a5:67:
3b:e3:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:14 2024 by rpki-client on console-ams.rpki-client.org