Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/5wKsEd1gG9Utupr1Wkn02KeDV7k.roa
File: 5wKsEd1gG9Utupr1Wkn02KeDV7k.roa (raw, json)
Hash identifier: hDh/Fw4ooWfk6ES22pgejhkE3q2VneWacJKH6m2TkMc=
Subject key identifier: E7:02:AC:11:DD:60:1B:D5:2D:BA:9A:F5:5A:49:F4:D8:A7:83:57:B9
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 018751809675867CECDB6AE02E37279FCFF7
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/5wKsEd1gG9Utupr1Wkn02KeDV7k.roa
Signing time: Wed 05 Apr 2023 12:59:54 +0000
ROA not before: Wed 05 Apr 2023 12:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61427
IP address blocks: 194.88.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:80:96:75:86:7c:ec:db:6a:e0:2e:37:27:9f:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Apr 5 12:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e702ac11dd601bd52dba9af55a49f4d8a78357b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:80:df:4e:9c:16:71:43:9f:f2:b2:14:c0:
45:81:f5:51:02:2b:ff:0f:3b:10:97:0d:99:53:f1:
1a:5a:07:0d:8e:a2:15:13:fa:5c:f6:30:e0:48:58:
6e:02:d3:c9:f3:69:7d:ee:79:00:46:bc:7c:34:e0:
e8:82:c3:a0:13:85:30:62:28:76:71:c3:fc:7d:d6:
b0:f1:6e:cc:b2:5e:43:a6:94:59:e3:02:c0:3a:fa:
83:e2:ea:27:84:a4:1c:60:91:6f:bf:91:a3:a0:8f:
9a:1f:c5:8f:fe:3e:ac:52:4c:16:bf:3f:54:21:71:
d4:76:0b:7c:1f:14:57:b5:51:6e:80:25:b9:fd:32:
dc:08:b4:db:b0:09:9d:9b:fd:ac:30:e3:40:23:61:
6b:fe:5b:60:3a:39:b4:c8:dd:b5:9f:03:f2:b1:73:
c0:bd:14:89:ad:f2:32:40:7c:20:d2:2a:4e:f2:a0:
dc:0a:50:97:fb:08:98:41:b5:77:72:60:27:fe:34:
b4:e2:3d:c0:dc:70:98:15:fe:32:08:5e:de:2d:27:
8e:d0:6e:16:79:15:57:2a:6c:d2:76:bf:92:54:36:
dc:48:e4:4a:7d:24:db:72:a3:a3:49:71:7a:2b:ac:
3e:b8:7d:15:eb:11:12:81:ae:e7:d2:f8:26:23:3c:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:AC:11:DD:60:1B:D5:2D:BA:9A:F5:5A:49:F4:D8:A7:83:57:B9
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/5wKsEd1gG9Utupr1Wkn02KeDV7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.13.0/24
Signature Algorithm: sha256WithRSAEncryption
87:64:f8:91:c0:b4:13:6c:25:4a:18:1b:d5:42:e9:e1:bf:f8:
30:b4:dc:0a:b8:0b:67:7c:4f:91:92:25:9d:de:2f:6f:0e:d6:
28:bb:6d:f0:6f:4d:22:9c:9e:0d:e8:c0:b7:5d:f7:6a:5e:04:
db:45:07:b4:1b:a2:da:de:ec:fa:b7:1d:39:52:4c:1d:02:d7:
bb:e4:2b:51:f9:04:64:45:77:9a:9c:6d:9c:fa:ed:f4:77:f8:
c4:15:b9:13:89:7b:6c:b0:d0:87:c9:79:d6:35:6a:6e:63:2f:
db:72:73:e9:30:8d:dd:05:f4:cf:bd:19:81:2a:36:33:8a:d1:
86:44:db:8a:54:a4:f3:fe:41:0f:27:de:9a:c1:71:d6:a5:d1:
0a:4f:aa:a1:85:0e:4b:b1:36:b5:2e:fd:6a:b9:12:16:20:77:
bd:07:dd:cd:6b:52:cf:f2:de:b2:37:72:db:7f:27:8e:d7:10:
20:67:c5:5c:4a:fb:a1:11:c3:cf:9c:68:0f:91:4d:34:c6:59:
de:89:a1:61:17:77:45:e4:d9:7f:e8:49:60:65:3f:0b:b3:17:
cc:2a:f9:d0:da:b2:1f:c1:d1:b1:4a:04:c2:e1:97:b6:9f:ed:
1e:b3:23:ef:25:69:11:2f:6c:d4:2e:f0:44:3a:9a:df:ba:93:
df:af:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org