Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/_vMRUd8E6Ic42lY8JwpMy7gTIvE.roa
File: _vMRUd8E6Ic42lY8JwpMy7gTIvE.roa (raw, json)
Hash identifier: jhcmDFIbB6e8cJ0VGaQvu55hlU0rR5DevC0kL7Stu0Q=
Subject key identifier: FE:F3:11:51:DF:04:E8:87:38:DA:56:3C:27:0A:4C:CB:B8:13:22:F1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 018F9F546B70204249D9E65C02B00CDFA608
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/_vMRUd8E6Ic42lY8JwpMy7gTIvE.roa
Signing time: Wed 22 May 2024 08:04:20 +0000
ROA not before: Wed 22 May 2024 08:04:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 5.61.202.0/24 maxlen: 24
5.61.204.0/24 maxlen: 24
5.61.205.0/24 maxlen: 24
5.61.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 18:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:54:6b:70:20:42:49:d9:e6:5c:02:b0:0c:df:a6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: May 22 08:04:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fef31151df04e88738da563c270a4ccbb81322f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:33:cd:26:8f:27:cf:60:88:e4:5b:6d:d4:
88:91:48:0d:59:8b:e3:a3:e1:6e:5d:0d:ac:c3:af:
52:57:6f:ae:cb:26:41:66:79:6b:05:c5:5b:07:25:
7a:b4:b3:e3:d5:71:28:9b:09:4c:90:7f:5e:60:36:
9c:8c:d3:3a:17:54:b0:74:1d:7f:85:70:fc:5c:ea:
c4:fb:d9:ff:c9:6d:d2:b3:8c:0e:65:c2:49:44:2f:
d4:c6:e4:d8:89:33:01:37:29:40:b0:c4:5e:36:6d:
57:76:10:d7:bc:7f:15:74:7b:82:d6:e7:a1:1d:02:
b6:cb:08:9a:93:69:22:51:63:97:83:d2:ba:59:9e:
07:a5:83:47:53:94:c0:49:d6:8a:1c:99:f0:27:c1:
5b:8d:e1:79:6c:cb:79:86:1a:e9:41:f6:4c:7d:79:
7e:0d:0f:fc:24:40:cd:f7:58:c0:f3:0c:23:04:30:
a1:71:6e:fb:12:7b:4e:33:e6:62:94:cb:57:87:8d:
12:96:b1:f9:a5:b6:90:57:dd:d7:3d:27:ad:2e:87:
63:b8:90:07:f9:17:15:90:93:16:01:86:1d:78:51:
cc:a4:af:9e:47:b5:61:d2:3a:f0:f8:b4:f4:73:ec:
1e:b5:85:6c:00:63:d8:78:5c:dd:b5:97:7f:c0:1c:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:11:51:DF:04:E8:87:38:DA:56:3C:27:0A:4C:CB:B8:13:22:F1
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/_vMRUd8E6Ic42lY8JwpMy7gTIvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.202.0/24
5.61.204.0-5.61.206.255
Signature Algorithm: sha256WithRSAEncryption
7a:b8:13:3b:96:bf:d8:a5:40:21:e5:a3:f9:8d:d5:75:94:b9:
47:6c:54:c4:10:4e:83:c6:97:5b:58:26:a0:ca:f6:38:26:1a:
7c:5b:e6:fa:97:2d:cb:a5:96:c3:7b:da:08:44:3d:97:9f:4e:
63:ff:c4:76:99:92:0f:13:12:6b:10:8a:64:4d:8f:fc:db:92:
ab:93:68:24:bd:a1:8c:0e:ed:e2:eb:ad:31:16:61:88:58:fd:
e7:1c:13:5f:29:40:8b:85:84:b3:56:6b:fa:ff:df:d7:e8:b3:
03:aa:04:98:c6:3e:0c:d5:bd:db:53:ab:52:8d:30:de:58:35:
b7:61:18:44:0d:20:ef:d3:ee:1a:20:6e:d5:72:a9:1c:8c:8f:
23:29:53:4f:12:a5:d4:36:41:1a:de:2d:17:6f:f0:62:51:fb:
eb:37:21:de:7b:55:28:6c:95:4f:70:3e:51:4e:05:fa:3f:a7:
17:15:9c:6f:3a:fc:8d:28:ae:49:d5:64:00:94:d9:ba:ab:30:
f7:ae:d7:86:17:dd:de:74:07:b4:d5:d9:4d:06:5e:bf:7b:ae:
a0:0a:8d:84:e2:e2:f5:77:b0:f8:3a:11:a0:39:b7:96:d9:41:
92:f6:18:0f:bb:6b:16:16:13:75:51:a7:88:ec:c5:0a:c2:57:
3a:77:23:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:28 2024 by rpki-client on console-fra.rpki-client.org