Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5JaX38K5WIqtwc1CLeZi4_TD0aY.roa
File: 5JaX38K5WIqtwc1CLeZi4_TD0aY.roa (raw, json)
Hash identifier: /xSYcvbXy8TWmalfHsQQnKSmG1r4Sduk+GLq6dI3nlE=
Subject key identifier: E4:96:97:DF:C2:B9:58:8A:AD:C1:CD:42:2D:E6:62:E3:F4:C3:D1:A6
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018EB4CCA45C5F44DDDA57A7723E3BCF0BE4
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5JaX38K5WIqtwc1CLeZi4_TD0aY.roa
Signing time: Sat 06 Apr 2024 19:04:54 +0000
ROA not before: Sat 06 Apr 2024 19:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 188.209.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 05:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:cc:a4:5c:5f:44:dd:da:57:a7:72:3e:3b:cf:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Apr 6 19:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e49697dfc2b9588aadc1cd422de662e3f4c3d1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:b6:6f:51:09:47:22:c9:5a:9f:c3:aa:89:
dd:69:47:bf:f6:30:53:4f:12:79:49:f6:df:a6:e6:
07:07:fe:39:e0:0f:c3:30:2c:03:2a:eb:3c:33:d0:
3d:c2:97:1a:2c:0d:ae:dd:66:71:55:9b:d9:9e:96:
9b:a7:0d:53:5d:32:cf:20:90:dc:53:b5:7e:0f:ae:
7a:08:34:fb:03:56:6a:a7:29:3e:25:94:7a:ca:48:
3c:9c:1e:b8:67:23:c1:6b:2f:27:06:25:85:16:c7:
39:0e:44:e3:96:83:77:4c:60:47:24:a5:c3:b3:cd:
60:41:ac:47:f6:77:9b:5f:b7:1e:68:32:bb:ca:b4:
86:8d:48:24:15:b2:92:56:e5:86:7e:02:9d:b1:22:
af:33:bc:c8:1d:62:ab:b9:b1:05:fb:6e:b2:4d:32:
e7:44:fe:80:05:61:e4:aa:cd:5d:f0:82:0e:ca:78:
05:43:15:30:bf:de:83:51:0a:8d:42:b3:66:c7:04:
2a:1e:53:dd:b3:e5:af:0d:48:3a:0f:5b:95:87:d0:
4b:04:66:fe:3b:20:f3:ec:ca:b1:77:91:d0:a6:30:
d4:07:b2:b3:57:55:fc:29:2e:5d:01:e5:e3:8f:2d:
ee:6c:e3:68:97:b6:0d:20:52:2f:21:df:c9:19:17:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:97:DF:C2:B9:58:8A:AD:C1:CD:42:2D:E6:62:E3:F4:C3:D1:A6
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5JaX38K5WIqtwc1CLeZi4_TD0aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:42:df:6c:43:2a:e9:32:ad:ab:37:60:32:e0:70:ec:b1:4e:
1f:c6:db:d1:fc:14:2b:cf:eb:a5:bd:ea:e3:25:5f:f9:ca:96:
cd:75:d2:45:70:b1:23:d7:90:3c:69:d5:75:bb:f2:20:2b:ab:
19:71:ad:f6:15:b6:9a:e7:b8:20:98:7e:54:ba:8c:26:1a:fa:
2b:b0:66:d4:af:6b:d8:8b:ca:f8:09:e8:fb:c7:2b:35:2f:46:
61:c1:be:3f:66:cc:1b:2c:8c:89:a6:39:24:3c:9f:d1:55:a0:
64:9d:83:18:7c:52:cf:fe:df:75:f7:cf:ae:35:80:5b:74:1b:
d3:46:e5:7d:eb:d8:28:a0:9f:7e:c5:99:44:a0:df:07:83:70:
60:bc:70:95:7f:f8:82:ec:c3:9c:32:3d:7b:27:44:ab:b7:87:
26:13:6c:92:b8:19:9f:2f:09:c0:3e:6d:5f:86:11:42:5f:f2:
9e:ed:7a:b3:83:89:24:cb:20:1a:f9:8a:4f:c7:85:48:bb:47:
1b:c5:bd:85:7a:33:63:08:ef:62:1a:cc:be:c5:13:4c:8f:ca:
db:c3:08:95:f1:e5:09:95:8b:1e:d2:ca:58:01:ba:0d:4f:03:
7d:14:e2:0e:99:02:da:73:0e:a4:16:b8:86:59:5a:3c:8c:e9:
33:e6:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:32:44 2024 by rpki-client on console-ams.rpki-client.org