Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/5QceMn1enqUPb1evhueSD1vAoE8.roa
File: 5QceMn1enqUPb1evhueSD1vAoE8.roa (raw, json)
Hash identifier: 2HBaQl/YNYSR2gIVUEiPdIo27ay7OHvm9voCkJqV7Mg=
Subject key identifier: E5:07:1E:32:7D:5E:9E:A5:0F:6F:57:AF:86:E7:92:0F:5B:C0:A0:4F
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 018C969073B5FBDCABD8C5F61CEA6395D1B5
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/5QceMn1enqUPb1evhueSD1vAoE8.roa
Signing time: Sat 23 Dec 2023 12:04:58 +0000
ROA not before: Sat 23 Dec 2023 12:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 213.109.76.0/23 maxlen: 23
91.239.43.0/24 maxlen: 24
195.191.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:90:73:b5:fb:dc:ab:d8:c5:f6:1c:ea:63:95:d1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Dec 23 12:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5071e327d5e9ea50f6f57af86e7920f5bc0a04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:58:41:ff:1f:f4:f9:0c:be:2d:21:83:17:
22:ad:f9:be:6b:b3:27:94:37:93:38:cf:99:3b:0e:
d9:34:44:91:6a:d4:74:0c:0e:d5:a1:36:27:51:82:
e0:f2:78:9e:8a:8c:75:1c:7d:ad:23:9c:64:7d:e1:
9d:e9:ff:2d:0d:04:d6:af:84:56:35:1d:d6:43:69:
8e:15:05:dd:91:75:c9:a4:04:06:03:1b:12:ce:63:
0a:61:7f:9b:89:b8:7b:22:8a:c6:eb:f3:6f:b9:93:
7a:df:bd:16:2c:10:06:4c:b6:4f:53:ca:b6:9d:7a:
f8:8c:18:10:7b:5b:d7:bf:c3:ca:31:a0:c0:6d:a3:
a2:05:35:3b:ac:b4:9d:72:50:6e:f1:ca:44:a3:29:
5e:67:c8:30:87:d6:81:fb:76:0a:87:4b:b9:f2:c0:
c5:10:5e:4b:f1:3c:31:1e:a7:a9:a4:ec:1f:c9:17:
5b:fc:03:9b:42:48:49:ef:c3:b5:cc:d5:3c:98:33:
4c:ba:c7:a8:8c:41:8f:b8:43:90:09:60:ea:0a:1f:
82:0c:e0:4b:a1:6d:9e:03:f0:8d:b2:3b:9e:00:33:
4f:ed:da:48:b9:1b:c8:f3:74:1d:cd:c6:92:a5:4e:
ce:09:01:c8:f5:48:c7:8d:44:5c:70:5c:cb:63:b2:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:07:1E:32:7D:5E:9E:A5:0F:6F:57:AF:86:E7:92:0F:5B:C0:A0:4F
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/5QceMn1enqUPb1evhueSD1vAoE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
195.191.65.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
64:42:e4:6c:7a:99:62:8a:71:24:b3:91:b9:29:78:50:32:66:
3e:fb:af:2a:80:84:10:10:1a:5c:a0:e0:0b:ee:bf:c5:ac:f7:
bf:53:80:ac:56:66:2f:65:92:de:e9:66:3d:b4:36:9d:45:ab:
dd:1a:79:ba:64:fb:4c:7a:02:48:25:34:54:b0:a9:9f:52:d3:
59:63:f8:51:32:57:cd:13:9a:99:d4:5e:c5:fd:2b:b4:45:82:
34:2c:c0:dd:16:98:ad:ba:29:3c:17:6d:5b:98:39:e3:dc:72:
1c:f2:e3:20:d0:bd:2e:32:31:8c:95:ca:04:41:68:81:66:73:
cf:57:73:91:76:d7:59:e8:1d:b9:4f:c6:f4:02:0e:64:bf:c7:
9e:94:41:6a:1f:22:11:7a:ac:ec:56:99:08:5f:2f:0b:35:19:
90:3b:90:59:e5:5c:de:1e:bc:3a:2b:39:30:00:a4:27:33:2a:
63:af:36:4c:e4:52:d6:7a:00:c9:6b:ef:e0:3d:c6:65:b4:a4:
83:c2:e4:54:18:e0:b8:a2:3b:c1:b3:ed:61:d9:4d:b7:a3:1e:
5d:89:c7:f9:5e:61:bd:6c:c8:70:56:40:1a:cf:03:e9:bb:bd:
9b:9b:59:78:08:ae:27:48:32:90:cc:94:4b:d5:07:6e:73:31:
1b:28:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:22 2024 by rpki-client on console-fra.rpki-client.org