Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/avKdraHqY0ARBlvXX4ixzPpxAmM.roa
File: avKdraHqY0ARBlvXX4ixzPpxAmM.roa (raw, json)
Hash identifier: fo+EbJywZIxqmr8TCEBIIWVnhXq6DRiTQWU2OZOLOHo=
Subject key identifier: 6A:F2:9D:AD:A1:EA:63:40:11:06:5B:D7:5F:88:B1:CC:FA:71:02:63
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 0188C575FC5A7D3709F23543108C4D579DBC
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/avKdraHqY0ARBlvXX4ixzPpxAmM.roa
Signing time: Fri 16 Jun 2023 18:27:03 +0000
ROA not before: Fri 16 Jun 2023 18:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 151.186.192.0/20 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Jun 2023 18:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:75:fc:5a:7d:37:09:f2:35:43:10:8c:4d:57:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jun 16 18:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6af29dada1ea634011065bd75f88b1ccfa710263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:a7:5d:20:97:15:9a:2f:19:2e:73:a2:79:
53:ee:00:eb:1e:7b:47:08:ea:ac:15:e6:45:3d:db:
7d:32:11:02:9d:1f:61:ea:84:d9:37:47:f2:ca:69:
54:f8:2f:13:f2:10:db:dc:a4:b8:3d:9a:cd:bb:f8:
27:c2:2a:08:35:03:ff:3b:92:74:6c:36:ab:be:0d:
8b:61:ea:7d:8d:b8:2a:72:e9:e9:ac:ef:cc:ee:b2:
96:ee:80:ec:79:1d:3f:23:12:75:84:d0:3e:01:27:
1f:55:be:db:f4:13:5e:3d:35:82:a1:17:40:e3:a1:
96:d0:a2:91:b4:e9:ef:36:08:fb:bc:74:e0:85:e3:
36:0a:ed:4a:de:a4:64:92:38:11:93:76:28:7a:4c:
5c:3e:26:58:a5:75:ee:78:4b:63:34:7f:33:8a:2b:
46:df:f9:03:fe:6c:13:2c:10:12:4b:e7:27:9d:b1:
ff:ce:a5:1f:c6:83:c5:8d:30:c5:af:76:fb:2c:6a:
4a:7a:63:b0:77:89:59:a1:25:7c:d5:3d:87:06:62:
64:7f:b9:4b:a4:3a:c8:c4:80:2a:02:8d:79:5b:7b:
fc:a6:1f:9f:e0:67:74:78:ff:36:3e:99:36:a2:c7:
48:0a:16:b9:55:47:4d:04:8e:8d:60:70:ea:90:87:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:9D:AD:A1:EA:63:40:11:06:5B:D7:5F:88:B1:CC:FA:71:02:63
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/avKdraHqY0ARBlvXX4ixzPpxAmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.192.0/20
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
26:ab:d2:e7:13:15:49:f3:35:6c:7c:c1:55:aa:6a:27:d1:ed:
38:52:22:90:a0:47:50:cc:04:42:bb:4c:85:ec:b8:ce:fb:94:
71:46:08:f3:9c:60:b8:6f:a6:88:92:69:61:39:6b:81:2f:94:
0d:b9:47:95:2c:3b:7a:8d:45:1d:4b:53:12:ce:58:70:e5:4d:
b0:c5:d2:1e:37:7f:0b:a5:70:ab:dc:35:c3:ec:a2:0c:7e:0d:
f7:d5:3a:29:22:b7:e3:4a:9b:85:e9:91:e4:38:5a:22:88:9b:
5d:1b:cd:f8:9e:cf:81:25:a3:a1:25:92:dc:c8:31:77:51:59:
6b:25:b8:5b:43:6f:15:5b:04:b1:e1:8a:02:b4:ed:48:2f:96:
08:f7:70:10:a8:a4:85:40:a2:e5:c6:3d:f5:f6:2e:b4:2d:8e:
90:3b:87:ba:73:80:6d:02:ce:f6:77:c0:e8:77:45:0c:bb:2a:
80:5b:54:d4:6c:07:34:99:41:5c:92:94:36:42:e3:80:e9:c3:
25:fa:17:64:c4:de:6c:97:97:01:d1:47:c3:88:ed:c0:34:b0:
ad:a3:16:bb:4d:26:54:ac:cf:e5:30:0f:78:e4:bc:d2:60:28:
37:9a:37:c5:30:dd:f7:2d:83:df:08:1c:73:c4:5f:d5:8d:4d:
12:45:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:55 2024 by rpki-client on console-ams.rpki-client.org