Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/L5ZGVfQkVfuoah_rIM9CpZ32fRs.roa
File: L5ZGVfQkVfuoah_rIM9CpZ32fRs.roa (raw, json)
Hash identifier: FRvdXeLFxEAxbzhHYI1EC7fSori/bF1n26N3n9p6Oqs=
Subject key identifier: 2F:96:46:55:F4:24:55:FB:A8:6A:1F:EB:20:CF:42:A5:9D:F6:7D:1B
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 0189404D3E89721B773559E84C58C432734E
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/L5ZGVfQkVfuoah_rIM9CpZ32fRs.roa
Signing time: Mon 10 Jul 2023 14:55:51 +0000
ROA not before: Mon 10 Jul 2023 14:55:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208124
IP address blocks: 185.254.165.0/24 maxlen: 24
91.209.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 13:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:4d:3e:89:72:1b:77:35:59:e8:4c:58:c4:32:73:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Jul 10 14:55:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f964655f42455fba86a1feb20cf42a59df67d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:34:e6:4e:10:4c:19:01:1a:6e:73:f6:f3:
21:8c:83:31:74:23:46:a2:4c:1f:ba:34:34:70:d0:
3e:00:25:32:45:87:58:2c:48:59:0e:45:ab:e6:77:
0c:23:2c:f3:dd:ee:0c:ba:d7:1a:fe:df:fb:14:98:
86:e7:2c:91:ee:70:4c:b8:26:be:6f:8b:ab:fc:f8:
18:ef:98:30:80:6f:63:70:a0:2f:a5:b3:08:95:85:
6a:b2:b0:c1:c3:f2:2c:31:87:cc:b5:f2:a3:49:2e:
2f:65:8a:c5:13:76:a0:9b:ce:69:e8:d9:f9:fa:f1:
26:66:ca:27:dd:69:6a:c2:a3:dd:1c:c0:5c:4e:90:
c4:6f:06:a8:da:3e:b2:d1:e2:5e:31:b3:d0:5d:dc:
c1:6f:c4:eb:f7:7a:2f:41:2b:25:16:c7:06:db:c5:
0c:b6:d1:85:a9:3d:bd:a5:c5:a6:be:7e:c9:f5:b7:
9d:c6:0e:0f:7c:a0:4d:09:22:ca:ab:11:83:b1:de:
f3:3a:6e:3c:d1:1a:53:26:40:ab:ca:b3:38:31:16:
67:2d:bc:b6:a0:b7:ed:9a:24:77:f5:31:5b:f5:1b:
35:b6:e7:86:88:b3:2b:be:7b:a2:a5:13:87:19:86:
94:b8:dd:f5:08:2d:91:d3:67:76:af:b2:c7:ad:0f:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:46:55:F4:24:55:FB:A8:6A:1F:EB:20:CF:42:A5:9D:F6:7D:1B
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/L5ZGVfQkVfuoah_rIM9CpZ32fRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
185.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
68:bf:3f:fd:4f:51:ee:f4:9d:b8:81:da:92:05:e4:7c:9d:de:
e9:56:f8:fb:bb:11:32:ea:d9:e9:d4:b7:ac:fc:a8:d4:a6:9b:
c3:9a:e2:71:dc:d9:0d:6f:69:f4:44:29:4f:13:9c:25:7b:e5:
e1:a0:87:ec:e2:73:d0:5d:0e:24:46:b0:2e:ab:84:6e:25:ae:
4b:38:5c:ab:8e:cf:c2:07:9e:b5:78:27:2a:09:c4:fe:7d:fb:
fe:32:21:ec:bf:c2:74:da:91:a8:c7:4c:9f:66:35:e1:d3:74:
f5:08:f7:5d:3b:73:ac:78:87:d8:83:60:e8:d7:7d:55:f3:51:
01:0f:05:97:bf:32:81:0c:e5:fc:a3:6d:7b:be:b1:82:7e:4b:
98:24:22:32:1e:13:7f:69:7c:90:cd:be:b6:65:e7:b8:c9:48:
19:e0:92:6d:5c:1e:ef:a5:58:60:dc:31:e0:5b:37:c4:73:d6:
18:63:7b:d8:96:b1:88:99:3e:62:f0:24:f5:23:af:64:c6:3d:
6b:ab:af:2c:a3:77:7c:35:12:1a:18:18:65:4d:2f:79:52:b2:
2f:13:19:02:8d:01:a5:63:af:2f:9b:48:58:6d:a6:82:8d:9f:
97:42:60:fe:c5:36:9b:f4:60:06:3c:b0:f6:0f:f5:f8:dd:38:
ca:73:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:50 2024 by rpki-client on console-fra.rpki-client.org