Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/prSz6TLe6zLtZDpX1MbhVbNIMOM.roa
File: prSz6TLe6zLtZDpX1MbhVbNIMOM.roa (raw, json)
Hash identifier: 3hpyRQE98903ht17i+Kemd5AUvmcZthQKNzM2S8VQAg=
Subject key identifier: A6:B4:B3:E9:32:DE:EB:32:ED:64:3A:57:D4:C6:E1:55:B3:48:30:E3
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 018BA5234C6135FFD85F111DCA09821E8166
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/prSz6TLe6zLtZDpX1MbhVbNIMOM.roa
Signing time: Mon 06 Nov 2023 14:57:15 +0000
ROA not before: Mon 06 Nov 2023 14:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212602
IP address blocks: 5.180.112.0/24 maxlen: 24
5.180.113.0/24 maxlen: 24
5.133.114.0/24 maxlen: 24
2a10:7040::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 20 Dec 2023 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:23:4c:61:35:ff:d8:5f:11:1d:ca:09:82:1e:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Nov 6 14:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6b4b3e932deeb32ed643a57d4c6e155b34830e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:f2:72:93:7f:b3:45:1f:f2:ef:5d:80:62:
60:14:1d:10:d2:c4:cf:0a:4e:f1:5f:08:a1:cc:30:
bb:94:53:1b:01:05:83:2d:c1:d5:e6:e1:10:3e:d6:
d1:38:07:8f:33:18:41:04:7b:c4:05:3d:48:f0:a0:
ae:74:7e:8f:eb:51:6e:db:fe:c3:58:b2:26:eb:98:
14:90:30:15:d1:2d:60:6d:b0:34:c6:48:53:79:17:
c9:3b:fb:c6:bc:34:99:23:a1:03:b7:ad:8b:ad:e3:
b6:fc:2a:71:e9:32:30:84:5b:bd:4d:b2:da:13:85:
e1:20:39:5c:90:78:09:4e:50:53:e2:93:81:37:40:
c2:ec:d5:29:f0:07:e1:06:ee:3f:ef:87:15:03:a8:
7d:20:51:3b:d8:0e:47:78:7f:ad:2e:a5:8f:c2:e1:
97:10:6d:52:72:2c:b4:5d:14:ba:93:a4:24:5a:8f:
94:f6:b7:1a:cb:68:56:6c:c2:b2:ad:35:ed:6e:d1:
06:13:b1:cd:c8:5e:2a:7b:68:54:07:af:ea:9a:ca:
91:b7:a3:22:9b:d6:fe:3c:93:44:49:c6:99:85:f5:
6d:f3:11:77:ea:b2:b8:df:65:b8:05:2f:e7:03:06:
71:81:92:cb:e9:6d:6a:3a:c8:63:06:2d:75:5c:1d:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B4:B3:E9:32:DE:EB:32:ED:64:3A:57:D4:C6:E1:55:B3:48:30:E3
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/prSz6TLe6zLtZDpX1MbhVbNIMOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.114.0/24
5.180.112.0/23
IPv6:
2a10:7040::/29
Signature Algorithm: sha256WithRSAEncryption
4d:cd:7a:1c:73:62:49:a1:04:08:0c:9a:3c:78:e8:b4:3a:f6:
2d:54:ec:a6:dc:fb:9b:15:f3:8b:27:f1:af:2e:16:25:93:f0:
2c:4c:32:5d:8c:c1:96:5c:3f:c4:1e:45:87:30:f0:51:ee:20:
f1:0b:59:14:de:61:57:0b:ab:ee:90:f9:88:3a:5f:c3:5a:5f:
3b:9f:6c:66:0d:d3:48:0c:52:49:bb:ad:38:32:dc:42:7a:b9:
2b:47:03:99:8c:b4:f2:5f:c0:59:5a:6d:00:11:e2:71:c5:5b:
93:aa:4c:76:02:6e:a9:82:85:1e:a7:51:af:20:ba:98:8c:06:
2c:63:86:2a:db:89:30:41:4f:d5:1f:e9:9f:dd:e5:78:a6:1b:
96:94:3f:37:67:97:b4:f4:04:2b:65:95:6f:42:89:aa:4f:99:
a3:d1:3d:4d:c5:53:87:72:4a:7e:68:cb:9e:f1:a4:84:e3:66:
c2:c3:47:16:e1:ae:e8:1f:9c:4c:fc:28:e8:95:80:9d:3b:7d:
18:c5:26:ae:80:de:52:29:8a:ca:c4:0f:04:02:4d:f2:fe:31:
ca:e8:0d:dc:db:f4:8f:98:dc:d7:e8:bd:b6:fb:82:11:47:55:
a9:cc:af:de:8e:6d:c0:a6:38:bd:ae:39:75:d9:a1:53:64:c1:
96:69:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:28 2024 by rpki-client on console-fra.rpki-client.org