Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/E_sK9aRRRwOD9e1qKi4hn6bxVSY.roa
File: E_sK9aRRRwOD9e1qKi4hn6bxVSY.roa (raw, json)
Hash identifier: 43MEkuRi9FkrFQmi7IV2PGEd2eFU4ZjHTUjSe9hUyhg=
Subject key identifier: 13:FB:0A:F5:A4:51:47:03:83:F5:ED:6A:2A:2E:21:9F:A6:F1:55:26
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936DA43233C09047D791B6FBDA66B8
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/E_sK9aRRRwOD9e1qKi4hn6bxVSY.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39083
IP address blocks: 5.252.232.0/22 maxlen: 24
80.78.132.0/22 maxlen: 24
2a0d:2140::/29 maxlen: 48
2a07:6f40::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 13:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6d:a4:32:33:c0:90:47:d7:91:b6:fb:da:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13fb0af5a451470383f5ed6a2a2e219fa6f15526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:2d:17:bd:f7:dd:a7:72:01:99:c0:a3:6d:
f1:27:e8:1d:d9:52:5e:49:f7:0f:36:e8:de:a6:fc:
7d:44:de:a7:81:48:65:d5:4f:38:cd:22:28:0a:c0:
61:2f:20:10:5d:49:c4:94:24:cb:38:ae:0d:61:fc:
6b:5b:9f:87:83:c8:bf:ff:8a:82:f2:06:e5:ce:72:
42:1c:c0:d0:c3:2d:75:0c:66:c1:ae:f7:6b:50:0c:
05:9a:e8:3c:d0:d0:61:33:ac:d8:55:13:d2:13:1a:
59:96:b9:c8:92:ba:6a:40:9e:d6:25:12:91:83:40:
34:f4:a9:d4:c7:8d:cc:f9:06:01:c8:23:ae:cd:bb:
c3:5a:82:c8:95:e9:ac:df:c9:6a:cf:f1:00:ae:27:
ca:d5:75:fa:56:69:3e:41:f1:25:ff:b1:be:67:08:
c9:1a:c2:4a:d0:ef:e3:84:d1:54:8f:2c:43:5e:13:
b1:d0:0a:cc:7a:d9:92:37:17:0f:9f:7b:5e:43:81:
1b:c1:24:fa:f1:31:8f:c5:d3:54:44:dc:73:01:29:
77:3b:4a:b6:d3:ea:8a:68:74:f6:c6:13:5b:26:73:
2f:cf:ea:3b:3c:80:0f:b7:c7:d4:5d:5a:86:52:c0:
ba:61:04:24:89:00:82:1d:11:e2:91:70:46:9b:99:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FB:0A:F5:A4:51:47:03:83:F5:ED:6A:2A:2E:21:9F:A6:F1:55:26
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/E_sK9aRRRwOD9e1qKi4hn6bxVSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/22
80.78.132.0/22
IPv6:
2a07:6f40::/29
2a0d:2140::/29
Signature Algorithm: sha256WithRSAEncryption
08:c3:e9:29:b7:58:0a:10:73:97:b3:bd:5c:21:64:98:eb:bc:
71:d8:2f:c2:65:f2:da:77:6a:e9:ad:2e:f4:8d:9f:ed:6f:7d:
6c:03:fa:d3:5d:ed:1a:37:a4:7d:f2:68:a6:02:f2:60:fd:13:
b7:93:88:e9:35:25:68:a0:b0:c5:be:e4:ac:04:b0:3f:42:6d:
18:99:13:4b:9b:42:19:b3:86:08:7e:c0:2e:15:11:b1:86:61:
25:11:82:d3:8f:0d:5c:8c:fe:1f:56:af:e7:86:0c:a9:06:87:
56:c9:32:53:74:5c:f1:93:7e:e0:c9:c5:22:82:51:e4:a8:fb:
29:9d:98:1f:10:87:01:45:b2:f4:ad:b6:36:3b:1f:48:5e:7d:
7d:f8:e0:f9:01:a8:37:32:7f:6f:c8:30:5a:5c:bd:dd:69:38:
aa:f8:be:d2:ef:61:5f:27:e2:eb:18:1b:68:1a:b4:80:dd:14:
90:0b:b2:4e:60:d7:12:f8:b9:ee:c2:28:0b:b5:e5:ca:a0:41:
73:50:31:fd:28:17:ac:be:4d:82:d2:46:16:4d:61:2c:4a:58:
c5:35:25:0e:62:64:85:d6:54:59:0b:11:86:11:46:c8:24:90:
94:34:c0:b7:28:e7:23:9f:fb:7a:a0:5d:0e:5f:56:d2:7a:5c:
b5:97:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org