Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/0B5r2T0R9ucodiF8kRnfO4XUwI8.roa
File: 0B5r2T0R9ucodiF8kRnfO4XUwI8.roa (raw, json)
Hash identifier: 3Yx3OqHNH4hj9KgQDEUN8ggFE8SXeNx0Xcu+qsXL6bQ=
Subject key identifier: D0:1E:6B:D9:3D:11:F6:E7:28:76:21:7C:91:19:DF:3B:85:D4:C0:8F
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0187130A2826A72C6BDFFA52B06AD3704D85
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/0B5r2T0R9ucodiF8kRnfO4XUwI8.roa
Signing time: Fri 24 Mar 2023 09:54:05 +0000
ROA not before: Fri 24 Mar 2023 09:54:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 178.249.152.0/21 maxlen: 21
31.134.200.0/21 maxlen: 21
46.244.0.0/19 maxlen: 19
5.10.192.0/24 maxlen: 24
185.51.52.0/23 maxlen: 23
31.41.255.0/24 maxlen: 24
185.205.52.0/22 maxlen: 22
2a02:1668::/32 maxlen: 32
2a02:166b::/32 maxlen: 32
2a0f:ba00::/29 maxlen: 29
2a06:2602::/32 maxlen: 32
2a0b:1c0::/29 maxlen: 29
2a0a:e80::/29 maxlen: 29
2a05:2900::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:0a:28:26:a7:2c:6b:df:fa:52:b0:6a:d3:70:4d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Mar 24 09:54:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d01e6bd93d11f6e72876217c9119df3b85d4c08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:ee:6b:4e:4a:a6:e6:a0:27:76:30:7f:bd:
e3:52:59:29:db:25:1e:13:ee:0f:55:7a:a8:8b:a2:
e5:f5:79:9f:d0:1a:1e:c1:e6:5b:d1:16:d2:c0:f0:
ed:a6:8e:90:18:0f:0a:c8:ea:a2:c1:17:98:e8:b4:
c1:81:59:e7:7b:49:bd:76:64:c3:0c:52:3a:e5:e1:
91:e7:52:cf:3a:ac:c5:e2:e2:f4:d3:44:85:b5:49:
3e:d4:86:70:ae:24:95:f3:25:43:91:e4:74:b7:da:
1b:2e:5c:c0:a5:bb:04:a8:c2:56:21:32:bf:7c:0a:
c6:32:52:ec:90:ae:4f:ff:34:f4:66:d7:bd:6c:d7:
a4:5a:0e:ff:9e:ec:0f:2f:15:29:44:96:ef:53:01:
31:2a:8f:81:ba:f8:4e:3a:b9:a2:b7:61:5b:21:78:
9b:fd:88:a4:e1:e7:99:c3:06:b1:1c:0e:89:e6:f5:
1a:47:6b:ac:f4:8b:29:f6:e0:77:ce:71:ca:2d:0a:
8a:ea:30:f6:e3:03:dd:ae:12:97:89:f4:1e:1a:5f:
9c:2a:21:be:90:04:c0:f8:e6:ff:ea:b8:38:04:01:
4a:67:b9:42:29:cf:6a:e1:cd:87:1e:7c:2a:03:54:
89:53:32:63:bf:0a:5a:c4:01:ed:89:f9:5b:ac:c7:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:6B:D9:3D:11:F6:E7:28:76:21:7C:91:19:DF:3B:85:D4:C0:8F
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/0B5r2T0R9ucodiF8kRnfO4XUwI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.192.0/24
31.41.255.0/24
31.134.200.0/21
46.244.0.0/19
178.249.152.0/21
185.51.52.0/23
185.205.52.0/22
IPv6:
2a02:1668::/32
2a02:166b::/32
2a05:2900::/29
2a06:2602::/32
2a0a:e80::/29
2a0b:1c0::/29
2a0f:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
55:1e:4f:43:36:70:82:dc:7b:58:2b:4c:6f:61:c9:c1:27:4d:
19:b0:e4:28:00:83:8d:00:a4:bc:a2:6e:b0:c8:d0:c8:f0:f7:
d9:91:98:72:b5:c3:a2:1a:47:ac:ad:77:f5:0f:53:2a:9c:e2:
d4:7d:69:6a:13:d8:94:d0:6c:4f:95:38:6d:d3:7e:11:b6:36:
95:f7:fb:b0:12:45:36:86:d8:ad:61:5a:79:ff:34:f2:91:a5:
46:43:28:8d:22:0c:4d:d0:1c:7d:8b:6d:fe:a2:9a:47:39:a5:
ce:bb:d5:5c:d9:0d:33:d3:51:ca:00:6d:8b:27:34:ea:a5:b3:
94:f6:00:df:82:c5:6a:3c:8b:c0:f0:f9:41:0a:c1:32:72:10:
97:2d:40:0f:83:bc:11:98:c8:88:c4:4a:a1:ad:72:c6:a9:85:
c6:8f:7a:ec:4f:6a:d6:57:25:8b:df:4a:ee:d3:ab:fd:c3:29:
56:7d:fc:fb:6e:03:23:31:87:ac:37:70:dc:ea:5b:f5:22:b2:
1b:e2:01:c2:51:09:65:b4:18:19:86:85:86:dc:90:42:4f:28:
1c:48:0d:8f:de:a0:b0:36:04:8a:a7:94:d0:9b:f3:0a:8f:77:
a9:7f:a4:a4:e4:70:12:a7:ab:24:f5:db:a5:b1:6d:eb:0d:cc:
20:02:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 11:24:46 2023 by rpki-client on console-fra.rpki-client.org