Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/5cFdqO_Ee--Q9Cyn2FQagVCsSII.roa
File: 5cFdqO_Ee--Q9Cyn2FQagVCsSII.roa (raw, json)
Hash identifier: UaJ8BOS9WSycInyO8xWHofLJlZWCN9MNHN4V8/MSofs=
Subject key identifier: E5:C1:5D:A8:EF:C4:7B:EF:90:F4:2C:A7:D8:54:1A:81:50:AC:48:82
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 01902DF03238144B013CCE1C883140E63324
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/5cFdqO_Ee--Q9Cyn2FQagVCsSII.roa
Signing time: Wed 19 Jun 2024 00:40:34 +0000
ROA not before: Wed 19 Jun 2024 00:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131222
IP address blocks: 193.219.98.0/24 maxlen: 24
194.5.252.0/24 maxlen: 24
195.5.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 01:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2d:f0:32:38:14:4b:01:3c:ce:1c:88:31:40:e6:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Jun 19 00:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5c15da8efc47bef90f42ca7d8541a8150ac4882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:54:70:d7:64:28:a2:8d:a6:e5:fc:a0:e6:
07:29:71:92:b9:86:73:8d:a4:48:06:30:84:37:eb:
f2:dd:6c:b2:3d:af:a6:f9:5b:ba:81:4d:b0:53:6d:
83:c7:10:42:f3:74:57:e8:62:21:ec:ff:73:2b:21:
be:c5:07:1c:a7:a5:e4:a0:52:5b:4f:8e:f5:9c:0f:
43:2e:5e:10:3d:ae:8f:e7:26:71:b4:6b:11:7e:75:
3f:32:fc:83:2c:89:29:47:94:9a:27:fb:ea:e3:5d:
dd:39:ed:7f:cf:58:b9:36:74:a0:00:ae:61:0c:d2:
86:ad:8a:3f:fc:7a:78:d9:5b:fd:65:2b:7f:3c:6d:
a8:36:f2:77:37:82:43:a7:7f:64:1c:3b:10:62:52:
2c:48:21:ad:c2:96:ac:3a:0f:7c:3e:c5:23:4e:4f:
42:19:51:8b:a7:bb:63:24:14:53:1f:88:1f:57:74:
54:25:f1:91:15:fe:e7:5d:8c:c3:39:f9:38:4e:5e:
06:b1:d3:a6:ca:43:5d:bb:ab:36:ca:0b:91:a1:f2:
f9:19:4b:4b:9d:76:c1:d8:ee:e6:6c:d5:cd:52:71:
29:ca:68:7b:2a:44:af:67:70:79:5c:8c:47:f6:0d:
e2:cc:7d:ca:68:ad:23:cf:b1:fd:b7:cb:9b:eb:5e:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C1:5D:A8:EF:C4:7B:EF:90:F4:2C:A7:D8:54:1A:81:50:AC:48:82
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/5cFdqO_Ee--Q9Cyn2FQagVCsSII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.98.0/24
194.5.252.0/24
195.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c7:50:06:07:ff:70:b0:2c:f9:3b:a0:4a:7a:bb:f0:b8:a2:
4f:4a:84:a8:38:2e:1b:ce:73:2a:11:c9:a0:36:4b:a1:1b:13:
08:cf:dc:6a:dc:89:10:b5:7c:48:7f:af:93:7a:8b:53:0c:92:
01:7c:7b:00:c6:6e:64:86:ba:dd:4e:a9:f3:b1:49:b7:6a:60:
3d:bf:a6:71:96:dd:8f:3c:71:bf:55:fe:eb:94:24:2e:fa:43:
c0:51:f8:c5:7b:98:ef:ee:0e:ec:17:e2:bb:cf:74:05:18:f6:
86:5a:5f:ab:c0:c7:37:ea:dc:d6:88:6d:16:03:db:46:e3:b4:
67:44:20:e8:be:d1:c9:0b:27:b5:00:59:90:e7:e8:53:92:0c:
4f:7b:ee:87:11:03:bf:1d:73:70:2d:5e:ac:6b:f5:ee:9f:72:
80:f3:d2:22:57:0d:8f:05:08:ab:11:e6:fc:a3:2c:a5:43:32:
10:18:84:ec:14:99:e7:ff:b9:e2:60:b7:f4:dd:1c:a9:8b:a1:
c8:87:22:05:b8:e7:ce:5e:d0:28:df:a6:33:f0:a7:eb:9a:cd:
30:fb:cb:b4:5a:d5:70:a5:ba:1f:e1:73:f5:79:2a:15:bc:1f:
37:2a:5b:9d:3d:9f:45:6a:64:75:18:e1:f0:5c:1c:4d:c2:f9:
85:93:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 03:02:28 2024 by rpki-client on console-ams.rpki-client.org