Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/wS7f8NtLupPOnRnlUvktzK7T838.roa
File: wS7f8NtLupPOnRnlUvktzK7T838.roa (raw, json)
Hash identifier: Q0lFkNgKHyYZhkf/QdsCgHI4YSWPfGGFq9ptYmPZxIw=
Subject key identifier: C1:2E:DF:F0:DB:4B:BA:93:CE:9D:19:E5:52:F9:2D:CC:AE:D3:F3:7F
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 018572A7FF700C0B26F36C49B5D2E1671B04
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/wS7f8NtLupPOnRnlUvktzK7T838.roa
Signing time: Mon 02 Jan 2023 13:24:50 +0000
ROA not before: Mon 02 Jan 2023 13:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.137.156.0/24 maxlen: 24
2a10:a100::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:ff:70:0c:0b:26:f3:6c:49:b5:d2:e1:67:1b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Jan 2 13:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c12edff0db4bba93ce9d19e552f92dccaed3f37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:57:71:4e:2d:f9:00:b0:b3:db:4d:ef:b3:
3d:cc:6d:89:f3:f1:5a:00:58:25:c3:57:55:fd:08:
b4:a2:34:37:0b:d9:3a:7d:38:e0:9c:45:fc:3f:49:
29:58:7f:58:a0:ca:98:5c:e6:3f:89:b2:56:89:ad:
25:23:73:9e:f2:f7:22:19:a7:42:90:66:4d:25:16:
ee:cc:81:51:fc:37:b2:4a:1c:12:da:6a:d8:b4:ee:
fe:fd:36:e4:f4:52:5f:96:bd:ce:90:2f:20:47:d7:
43:ef:86:f0:5c:e2:07:19:86:16:17:b5:eb:a3:3c:
5e:30:e4:a3:ac:77:45:91:b4:20:8b:03:67:87:4e:
6a:bf:38:d6:86:77:47:90:44:c9:74:ba:dd:be:ed:
41:2d:47:7a:df:91:d2:79:50:7e:29:2f:23:e6:27:
84:5e:69:72:d3:9c:b8:0e:ce:57:4e:2b:9b:ca:e5:
d9:5b:3b:9e:69:76:37:6e:cf:a9:7c:97:b7:0a:29:
4d:f3:b0:8a:73:9f:10:4a:3a:29:ea:22:98:f0:a1:
40:47:3c:90:fd:dc:38:63:6f:05:a3:52:29:34:db:
af:96:8b:ee:61:91:a8:e1:ce:89:8a:ee:c6:9f:5c:
6d:ae:dd:41:ea:0a:da:64:8f:c7:08:e0:6f:9d:c2:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:DF:F0:DB:4B:BA:93:CE:9D:19:E5:52:F9:2D:CC:AE:D3:F3:7F
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/wS7f8NtLupPOnRnlUvktzK7T838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.156.0/24
IPv6:
2a10:a100::/32
Signature Algorithm: sha256WithRSAEncryption
00:f4:b6:a8:6d:ac:76:73:c0:11:e3:e3:0c:ea:d7:ee:6c:28:
9b:3d:cd:88:9e:a8:f6:80:41:ab:01:73:0f:68:7f:43:ed:e9:
2a:2b:7f:f6:e4:73:65:59:7e:d2:50:e6:13:f6:22:58:79:7e:
da:20:be:d6:ce:d1:1a:f9:ae:c7:9f:31:e2:89:80:18:60:0e:
f6:9e:95:b4:69:4d:1e:f7:34:36:c9:e3:c4:23:19:6f:46:61:
64:78:25:9a:b3:6a:81:3f:b0:d6:35:b4:96:b2:17:84:c0:78:
13:82:52:3b:e5:26:37:c9:c9:28:e9:cc:32:92:36:7d:30:68:
98:f5:4d:bc:05:74:af:d3:ab:97:47:a1:45:0c:3e:26:a5:90:
21:21:6e:5b:6f:6d:1f:43:aa:2d:fe:7e:6d:7e:4d:a9:18:c1:
30:94:68:54:9c:71:f9:55:3c:a7:f3:74:51:f5:3a:5b:05:8b:
eb:ba:8b:dc:2c:be:5e:ce:aa:06:e2:5a:2a:8f:47:cb:4b:a9:
45:78:86:e9:15:ce:78:ad:79:da:74:79:36:b5:b1:f7:f7:bc:
5d:bc:ff:8d:77:5f:de:fe:93:a0:5c:29:85:1b:5a:b7:e0:74:
04:c0:f6:2b:f2:54:fb:13:45:5d:ad:fb:69:09:81:80:9d:bb:
4c:93:a0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org