Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s5djEGSQc6PHceFAH-8xbtNQIBA.roa
File: s5djEGSQc6PHceFAH-8xbtNQIBA.roa (raw, json)
Hash identifier: S/p2eTBk6iaNxHctjbdT1QlLIYx4wDknyy7svk4AAjc=
Subject key identifier: B3:97:63:10:64:90:73:A3:C7:71:E1:40:1F:EF:31:6E:D3:50:20:10
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CD5495DC9A3593FB2D72C6C6F3AF2
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s5djEGSQc6PHceFAH-8xbtNQIBA.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12846
IP address blocks: 90.188.0.0/20 maxlen: 20
90.188.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d5:49:5d:c9:a3:59:3f:b2:d7:2c:6c:6f:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3976310649073a3c771e1401fef316ed3502010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:ff:85:c1:78:70:96:18:9e:da:f4:39:6e:
17:54:ed:9e:3c:be:18:ec:79:b5:88:46:0a:ff:72:
31:63:f0:02:e8:b2:f7:2c:e8:c1:54:32:65:d5:52:
e1:b1:87:ea:2e:f1:60:0d:ce:db:d6:4e:2a:22:f9:
6d:a1:41:07:a3:64:01:59:99:10:3b:b8:c3:b0:9c:
c1:e6:47:8e:a1:fc:1a:aa:56:7b:63:ba:66:e1:ba:
26:9c:eb:2c:b4:8c:de:3a:49:61:97:04:10:1a:10:
d3:59:f2:2f:7b:ef:5d:13:f1:3f:71:6f:00:f5:ca:
13:b7:59:c2:62:29:59:b5:92:8f:c5:b1:98:49:a8:
d4:99:28:53:61:71:43:f9:c8:c2:1b:5b:b9:94:6c:
3f:f1:3a:fc:66:46:77:f0:69:9b:48:6b:6e:83:c3:
cb:9b:c7:97:e0:ad:df:0d:48:5f:ca:de:50:e3:2a:
0a:77:9b:9a:3a:07:83:cb:4c:88:ae:b0:46:0d:96:
5b:bd:f5:ef:db:7b:2e:47:3d:5d:62:e1:bf:8f:b3:
90:9f:cd:5f:56:d0:f2:46:a2:26:b4:50:3d:d7:a4:
6f:fa:e9:05:53:0a:a8:29:2b:bd:c9:06:50:45:0c:
93:59:e7:b2:6e:4a:36:03:66:c3:a4:17:86:4e:05:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:63:10:64:90:73:A3:C7:71:E1:40:1F:EF:31:6E:D3:50:20:10
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s5djEGSQc6PHceFAH-8xbtNQIBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.188.0.0/19
Signature Algorithm: sha256WithRSAEncryption
64:7d:b4:6b:e1:12:06:ff:d2:96:3c:2b:81:bf:e2:02:7e:81:
0d:0b:16:07:9f:b7:42:61:5e:8f:9d:9b:6b:f5:72:01:3b:b2:
d9:ca:36:01:26:fe:19:d1:e5:76:a8:7c:18:cf:84:b6:0c:a0:
86:d5:9f:e3:0d:22:9b:76:35:37:fe:3a:7b:40:58:d1:31:9c:
f9:59:77:86:f0:08:74:5d:bc:88:32:6f:56:d6:47:06:1a:5c:
d2:a2:41:0d:87:08:06:2f:ac:af:77:bb:70:8d:f4:fa:96:1c:
17:fd:ef:e7:78:3c:24:31:15:27:e4:ee:59:6b:b1:77:34:ff:
6c:7e:fa:b7:4e:1b:27:48:c2:84:03:c8:ae:99:85:de:6d:06:
4f:ca:d7:bf:09:19:76:9c:5c:66:02:ab:e5:f2:25:33:0b:c5:
40:7e:a5:d6:06:82:ef:0f:25:e8:0d:c0:f8:05:9b:fd:33:d8:
98:ce:d4:03:cf:df:71:2e:cb:07:97:a3:f0:92:bc:95:24:46:
0c:2c:d6:18:79:cb:9f:44:e6:7d:db:cd:78:8d:9e:eb:aa:b9:
d6:2a:9f:14:00:c4:3a:82:f8:b9:59:e9:46:77:81:aa:d6:86:
49:c9:77:13:e5:d3:01:a6:52:d7:2d:75:92:a9:81:31:bc:cd:
77:ca:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org