Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/s5cs8BRy7YHeVIEpKSxXmMTT-ok.roa
File: s5cs8BRy7YHeVIEpKSxXmMTT-ok.roa (raw, json)
Hash identifier: 8hi+OR/W1Aqw4v4MOSKfApwiKmlM/GjtvhJpcHRSJyE=
Subject key identifier: B3:97:2C:F0:14:72:ED:81:DE:54:81:29:29:2C:57:98:C4:D3:FA:89
Certificate issuer: /CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Certificate serial: 018570152F0F3A2D1057F77196E0DEA721F2
Authority key identifier: 4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/s5cs8BRy7YHeVIEpKSxXmMTT-ok.roa
Signing time: Mon 02 Jan 2023 01:25:14 +0000
ROA not before: Mon 02 Jan 2023 01:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8803
IP address blocks: 194.124.217.0/24 maxlen: 24
193.8.176.0/24 maxlen: 24
193.8.179.0/24 maxlen: 24
193.8.177.0/24 maxlen: 24
193.8.178.0/24 maxlen: 24
193.8.180.0/24 maxlen: 24
193.8.181.0/24 maxlen: 24
193.5.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:2f:0f:3a:2d:10:57:f7:71:96:e0:de:a7:21:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a407ca3a6af469a31bb52030fcd911c91e66c1b
Validity
Not Before: Jan 2 01:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3972cf01472ed81de548129292c5798c4d3fa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:e9:29:79:44:6c:42:e2:c2:c8:de:ed:6f:
29:62:8f:bf:3a:18:41:18:48:ae:3b:8c:38:09:ef:
85:72:7b:25:a4:ed:f6:51:95:94:78:45:b8:66:82:
54:cf:32:22:3f:9f:32:bc:36:f2:2f:11:ef:c6:f7:
1f:98:9b:61:c9:e1:25:75:6e:78:c8:64:cc:22:03:
c4:f3:9b:7f:66:8d:a6:fb:01:95:68:68:d7:a6:7d:
3f:c6:23:97:0e:d8:84:44:60:47:35:18:34:3c:ce:
ba:c9:a7:14:04:3b:13:5a:95:c0:81:e0:4e:83:c6:
8d:ba:a8:80:0e:90:78:a0:f9:cd:a2:5e:e0:fd:53:
80:b2:42:81:00:b3:94:3a:53:ac:f5:64:fe:e5:ce:
36:1a:14:70:b7:b3:34:31:71:d3:51:db:f0:b2:98:
1f:54:f1:6c:97:9d:3e:ce:8b:53:ac:ab:98:95:a4:
58:c2:17:a4:02:c7:74:de:62:91:cd:a0:b4:67:1e:
2b:e6:72:5c:54:cd:d9:9b:c7:80:9c:6f:0f:f5:1d:
f1:4e:52:72:e1:a7:ae:f5:45:ad:17:56:36:c9:dd:
1c:60:65:2d:10:5a:ef:08:03:35:b9:9d:bb:e0:28:
21:c3:ea:27:0f:41:e5:d9:0f:7f:b8:dd:88:12:21:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:2C:F0:14:72:ED:81:DE:54:81:29:29:2C:57:98:C4:D3:FA:89
X509v3 Authority Key Identifier:
keyid:4A:40:7C:A3:A6:AF:46:9A:31:BB:52:03:0F:CD:91:1C:91:E6:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkB8o6avRpoxu1IDD82RHJHmbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/s5cs8BRy7YHeVIEpKSxXmMTT-ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d28341-11fa-43f7-8729-4cd81e9f8cba/1/SkB8o6avRpoxu1IDD82RHJHmbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.172.0/22
193.8.176.0-193.8.181.255
194.124.217.0/24
Signature Algorithm: sha256WithRSAEncryption
98:72:9a:91:53:37:08:4b:4a:f6:a3:43:fc:43:ef:e6:d9:22:
2f:1c:a5:ba:9b:94:45:b5:8c:55:fe:b0:7d:c4:fa:a2:87:17:
01:af:ff:68:ca:7d:a6:8f:20:e5:4e:55:53:f5:d5:72:9b:e9:
8a:3a:d0:90:99:21:e3:de:ae:00:21:1f:5b:7e:53:80:b2:2e:
63:92:13:ad:dc:f6:06:4a:42:d9:4f:3e:04:9f:f8:b0:20:c1:
4a:14:98:75:bc:65:0b:ce:9c:3f:2a:34:f2:1e:51:88:55:f2:
82:75:43:09:a9:71:ed:23:fc:1f:94:76:d1:ac:ac:cf:d5:88:
f0:05:41:86:e6:6a:3f:6e:72:48:f7:1b:d6:8f:99:e5:9b:e0:
6a:90:9a:b5:d2:45:88:9b:7f:c0:59:3b:af:f7:06:15:1c:46:
ea:87:0f:a0:bd:03:94:f5:3f:86:2a:11:19:a1:48:2b:07:51:
2d:62:82:02:60:9d:65:a9:34:d0:8d:af:54:e3:fc:ea:60:66:
dd:1e:13:3f:7e:58:5f:2d:1d:a2:56:fa:45:0d:16:4c:bf:b6:
27:b4:f3:07:c5:26:b7:29:34:cf:d2:85:f3:6e:56:fe:3c:8a:
df:72:f4:b0:2e:dc:5f:72:65:dc:d0:b5:9b:23:ea:cb:1d:81:
20:8d:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:29 2024 by rpki-client on console-fra.rpki-client.org