Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/5LgvQgAWCepu7Lt7UvLhOxxiDt0.roa
File: 5LgvQgAWCepu7Lt7UvLhOxxiDt0.roa (raw, json)
Hash identifier: 7jY9TAzWOP406jEKXdsurWeeD3FQ7nfSrk/URH/fx5I=
Subject key identifier: E4:B8:2F:42:00:16:09:EA:6E:EC:BB:7B:52:F2:E1:3B:1C:62:0E:DD
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA279C113D1044A195A7FCC8A9D5F
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/5LgvQgAWCepu7Lt7UvLhOxxiDt0.roa
Signing time: Sun 01 Jan 2023 11:14:51 +0000
ROA not before: Sun 01 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24922
IP address blocks: 193.140.216.0/21 maxlen: 21
193.140.224.0/20 maxlen: 20
194.27.160.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a2:79:c1:13:d1:04:4a:19:5a:7f:cc:8a:9d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b82f42001609ea6eecbb7b52f2e13b1c620edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:73:06:49:c4:70:4d:ba:d2:07:02:53:8e:
14:bd:28:d1:4f:9e:79:8f:3f:8e:6a:02:34:11:d1:
93:98:41:0d:d3:b0:2a:07:d8:1a:cb:df:7c:7e:bc:
d9:9e:1a:bb:7f:6f:b6:d5:35:38:59:88:21:62:0e:
44:49:1b:a0:61:fd:8d:2c:d9:6d:8f:49:7c:82:2f:
c3:7d:6e:16:4c:eb:11:e9:34:36:f8:e8:ae:47:c1:
ad:d1:d0:8c:cf:72:3d:9c:59:af:9b:17:78:9c:8d:
75:e7:98:7c:01:eb:0c:77:80:48:13:6a:ad:23:a6:
05:21:84:e3:73:23:6b:f8:0b:3a:39:dc:02:9e:82:
a2:df:03:f8:d6:3d:a4:4d:c1:b3:a5:8e:fd:a4:62:
85:55:df:64:b6:95:ab:b6:19:62:fa:c2:9f:56:7b:
94:7f:b9:6c:1c:5f:af:81:db:11:da:34:6a:12:9e:
83:28:02:05:38:f7:78:f9:9e:20:73:ab:36:3a:ce:
05:29:62:2a:a7:58:e1:88:f8:3a:a2:38:20:0d:e6:
c6:00:63:64:b2:e3:2c:d0:f0:28:79:7c:70:02:4e:
87:9e:d2:31:9d:8c:df:50:a3:b4:98:e5:01:d7:8c:
09:17:32:7a:c0:4c:05:ab:4a:da:ba:60:d8:ef:b9:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:2F:42:00:16:09:EA:6E:EC:BB:7B:52:F2:E1:3B:1C:62:0E:DD
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/5LgvQgAWCepu7Lt7UvLhOxxiDt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.216.0-193.140.239.255
194.27.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:fa:de:b4:63:d7:24:c9:7d:3d:36:d3:6c:85:4f:be:83:38:
a3:7c:60:82:ba:0b:33:a0:b0:a0:2b:ca:c6:47:c2:d7:67:1a:
f7:b7:36:af:97:8e:13:e1:8d:1a:b4:cb:0b:0e:d8:a0:31:aa:
6e:6b:17:62:6c:f2:1e:d0:aa:b2:1e:f8:d8:6c:56:79:49:5b:
5f:d9:1d:ef:64:23:4c:9a:aa:a6:5b:9d:4c:53:78:5b:01:3a:
58:58:ea:ad:f7:7c:27:6d:e7:6f:9e:b0:42:c9:fa:2f:21:4a:
a8:c9:23:2e:d2:0e:c9:e9:7f:32:91:02:b1:12:30:88:9b:11:
24:05:7a:33:9d:4e:30:1e:18:bf:5f:a4:bf:d3:e2:3a:42:61:
bf:2c:47:86:ff:7b:87:f2:63:9e:31:78:22:b1:85:fb:70:b1:
41:1b:0d:35:1e:e0:3a:b9:bd:fe:2f:f0:69:c6:70:96:e7:d8:
e4:9d:24:1c:90:13:47:5c:12:2d:a5:39:6a:c6:48:4b:df:0d:
19:97:ba:81:d9:b6:a2:4f:2a:8f:77:79:95:08:1e:4c:03:de:
1c:47:87:6b:c2:1e:42:f2:8b:12:03:2f:6d:17:22:d6:74:3d:
80:e5:9f:a1:5d:e8:1c:5c:93:ce:32:d5:c8:83:57:38:4d:c8:
1a:6e:58:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org