Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/5MPzIk7-Q-ncJ_SIToqPfiixJhc.roa
File: 5MPzIk7-Q-ncJ_SIToqPfiixJhc.roa (raw, json)
Hash identifier: CxJJDyKwyks4ebInT45njaU+kuj1HTnAhh0+GvdkVIc=
Subject key identifier: E4:C3:F3:22:4E:FE:43:E9:DC:27:F4:88:4E:8A:8F:7E:28:B1:26:17
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 01856CCB0E77BB85EDF25EC178B34BC5C874
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/5MPzIk7-Q-ncJ_SIToqPfiixJhc.roa
Signing time: Sun 01 Jan 2023 10:05:24 +0000
ROA not before: Sun 01 Jan 2023 10:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204320
IP address blocks: 188.74.39.0/24 maxlen: 24
2a03:4b27:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0e:77:bb:85:ed:f2:5e:c1:78:b3:4b:c5:c8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 10:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4c3f3224efe43e9dc27f4884e8a8f7e28b12617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:04:98:1b:d8:40:c1:f9:81:9f:63:7a:1d:
5f:5a:00:57:67:9c:54:a9:a9:e0:9c:00:92:2c:ed:
37:b7:a7:77:f8:36:fa:c4:0f:c9:4e:60:a6:43:5e:
ff:24:9d:0e:3b:5f:21:47:e7:ed:d0:d3:2f:9a:b1:
56:a8:d8:00:e1:b2:9b:9c:c6:61:76:5d:30:8c:fe:
8b:d8:e5:79:e3:01:70:33:7c:10:df:38:66:b9:67:
d8:01:d1:3e:44:50:dd:2c:09:6e:55:bd:94:e8:c6:
34:01:b6:46:79:a4:5f:24:92:45:42:18:e4:25:aa:
d7:3c:f7:38:c1:68:71:81:9e:2f:1e:bc:83:4a:11:
05:6d:43:4f:90:4f:31:d4:51:8a:12:17:f7:0e:c3:
59:30:b4:8c:ad:7c:ae:5d:39:a6:8f:f1:c3:1d:31:
31:4d:6c:75:b2:b2:a0:b6:9a:f0:49:e3:b0:28:3c:
17:33:1b:bd:99:88:e2:3a:ae:aa:ca:b1:b3:94:fb:
b8:7c:78:7e:e2:56:47:0f:f5:5c:a1:d0:2b:c8:24:
ed:a0:9a:29:5d:08:83:24:79:dd:3c:5e:4f:0a:97:
29:9d:7a:26:54:2f:93:7e:47:84:b7:a0:23:06:6c:
bf:29:b3:ed:5c:85:3b:15:e2:3d:b1:3d:ba:27:ff:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:F3:22:4E:FE:43:E9:DC:27:F4:88:4E:8A:8F:7E:28:B1:26:17
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/5MPzIk7-Q-ncJ_SIToqPfiixJhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.39.0/24
IPv6:
2a03:4b27:f000::/36
Signature Algorithm: sha256WithRSAEncryption
21:52:3a:11:51:0c:85:79:1d:e8:02:f4:e7:9c:91:98:d2:e4:
c2:1a:a4:78:ce:47:6b:04:3c:27:25:e2:43:16:ef:39:82:0f:
88:05:87:f5:66:4f:d2:eb:fa:45:92:7b:81:fa:c2:46:09:27:
c7:f0:0a:9e:58:0e:e3:ec:34:4f:5b:72:b7:d2:d6:eb:42:8a:
4b:76:ff:df:e5:8c:ad:59:80:37:6f:c7:93:5a:e2:bb:b4:5e:
90:97:24:e7:ac:4e:9f:2a:47:81:8b:f4:f6:80:e7:59:69:c0:
6a:57:c8:e9:be:64:63:4c:5d:5d:b7:49:eb:bb:c0:93:63:7d:
c6:b2:5a:cf:0a:f1:1d:dc:10:79:20:54:f6:fa:f1:8b:9d:df:
bf:d3:27:df:c5:c2:76:0e:45:d4:12:95:43:bc:2a:3c:89:58:
11:ae:66:f4:86:bf:fa:f5:1c:c2:07:50:dc:f5:1b:98:bf:34:
58:af:93:83:86:d6:f2:df:dd:a8:7e:96:f2:ec:0c:30:31:ca:
e0:6d:53:aa:02:f9:0a:d3:8f:94:1e:9c:ee:2e:0d:b6:c0:dd:
70:49:4f:2b:6b:c4:19:b4:d3:ea:d0:02:82:ab:3b:0c:41:4a:
e7:97:9d:2d:18:3c:a1:95:ca:dc:ed:48:41:62:c0:5f:84:46:
07:e9:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org