Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/5I4ri4zglq9gdTtF0uO0BA6l2PA.roa
File: 5I4ri4zglq9gdTtF0uO0BA6l2PA.roa (raw, json)
Hash identifier: VrZk8ZkdhsxvUFk6G5qztLYRZfvJVxptWNmhma+kUug=
Subject key identifier: E4:8E:2B:8B:8C:E0:96:AF:60:75:3B:45:D2:E3:B4:04:0E:A5:D8:F0
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 01857139D5E2F042EB2191A5BE3A6072126B
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/5I4ri4zglq9gdTtF0uO0BA6l2PA.roa
Signing time: Mon 02 Jan 2023 06:44:53 +0000
ROA not before: Mon 02 Jan 2023 06:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31518
IP address blocks: 194.113.141.0/24 maxlen: 24
185.255.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d5:e2:f0:42:eb:21:91:a5:be:3a:60:72:12:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Jan 2 06:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e48e2b8b8ce096af60753b45d2e3b4040ea5d8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:0a:15:69:cd:40:8c:0b:28:a6:2b:b5:64:
ef:4a:a1:1b:b3:29:8e:2b:61:94:42:8a:0d:d6:87:
89:fd:97:e9:57:c0:6d:9f:62:e5:c8:57:e9:9e:1a:
e3:96:ff:0a:78:ce:87:7d:aa:b9:d5:31:9e:7f:48:
5e:29:88:df:5e:b7:a3:e3:07:47:f1:d2:b4:e4:17:
57:5b:78:a3:81:d4:7d:7e:03:ed:97:0e:72:64:66:
21:3b:a4:22:fb:8c:c1:ac:e9:0d:ac:df:08:11:ca:
b3:4d:84:a6:2d:6c:65:b4:cb:a1:3e:ef:60:a3:28:
d2:73:a4:58:85:1a:fd:48:35:56:d3:f4:9e:c9:e6:
d2:b7:5e:2f:2a:e8:04:53:27:8c:6e:60:8a:33:94:
8e:b3:54:25:5d:c3:dc:40:d7:59:df:8d:08:7e:89:
29:9f:c7:4f:3f:0a:78:20:15:7c:e1:a7:aa:52:c5:
29:b1:e1:d4:29:4e:6b:33:61:e5:1f:19:82:3d:0d:
ea:de:75:a3:01:14:5e:73:fc:43:b4:f1:ad:cf:f8:
14:04:bc:83:54:fc:ae:54:65:ed:e8:90:e3:3b:a2:
0b:b8:af:75:10:66:91:de:25:ca:e8:c4:68:3f:8c:
7f:af:8e:4a:4c:a2:f1:8c:f9:58:2c:de:fe:d1:90:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:2B:8B:8C:E0:96:AF:60:75:3B:45:D2:E3:B4:04:0E:A5:D8:F0
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/5I4ri4zglq9gdTtF0uO0BA6l2PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.188.0/22
194.113.141.0/24
Signature Algorithm: sha256WithRSAEncryption
08:40:fb:8a:80:95:9b:31:79:2c:ad:23:11:72:b5:47:27:c7:
93:fa:16:da:7a:e8:e7:82:2f:f7:4d:b1:92:0f:cd:85:2e:e4:
2a:cd:d6:84:6a:17:22:14:35:91:0e:11:b4:64:9f:4e:10:fc:
02:33:f0:63:32:58:cd:e3:51:f8:5c:aa:a3:ed:04:51:c3:4d:
32:02:d4:18:69:0f:ca:26:75:0c:ed:22:1b:5a:10:85:9d:65:
43:15:ff:56:dd:94:fe:2a:34:4b:76:ec:0c:24:e3:69:db:da:
a0:ff:38:99:6d:b4:86:8e:51:46:49:a9:74:8d:b2:de:61:fa:
48:24:46:1a:a6:59:28:69:ca:4f:ba:e2:58:4b:72:65:28:4c:
ab:dd:28:c9:c1:eb:f6:13:1a:92:e6:f3:9d:8a:e8:c3:84:20:
a0:be:fe:cd:b0:a8:fa:6f:40:42:f7:b5:ee:8c:18:bd:52:e8:
04:a1:a8:58:02:a5:d5:eb:84:ba:62:c3:5b:8a:12:e2:54:4d:
af:fd:10:38:45:00:a7:ba:80:06:be:73:39:ee:19:8a:9f:33:
5e:2f:35:f7:d8:3a:11:f5:05:17:2a:5d:fa:d2:55:06:50:aa:
49:a2:29:40:ed:b6:8e:ea:4c:39:fb:60:f0:28:7f:d2:e2:1b:
ef:c9:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:29 2024 by rpki-client on console-ams.rpki-client.org