Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5J_J-WsROKum7q9eZywwCBtiSfw.roa
File: 5J_J-WsROKum7q9eZywwCBtiSfw.roa (raw, json)
Hash identifier: jCm5fBQGNKbwPmUkrmyIbsaM97lIvOm7i+f9OOz8DwI=
Subject key identifier: E4:9F:C9:F9:6B:11:38:AB:A6:EE:AF:5E:67:2C:30:08:1B:62:49:FC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018570676876CD31F4C725B376261E2DC9BC
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5J_J-WsROKum7q9eZywwCBtiSfw.roa
Signing time: Mon 02 Jan 2023 02:55:03 +0000
ROA not before: Mon 02 Jan 2023 02:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.243.114.0/24 maxlen: 24
185.243.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:68:76:cd:31:f4:c7:25:b3:76:26:1e:2d:c9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e49fc9f96b1138aba6eeaf5e672c30081b6249fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:8c:19:bc:90:10:a9:47:d5:d8:77:f4:1f:
14:40:88:b6:51:cc:e9:86:39:47:17:0d:55:be:12:
2f:e3:96:2e:fb:88:1f:2f:92:4f:9a:cd:31:dd:89:
be:8f:06:1a:90:5d:cb:a3:40:91:39:8b:13:9d:e2:
cd:ba:bf:8e:ff:06:6e:f1:cf:7d:8f:3a:c3:9d:ca:
7b:66:52:b9:34:d3:ca:64:34:07:b9:00:ea:ef:e5:
da:0e:0a:11:30:7f:c7:92:9b:48:61:38:23:64:08:
1c:7a:77:05:9d:34:ef:81:a6:ef:95:38:6a:c8:c4:
ed:da:76:ff:79:4c:7b:e8:74:55:fc:f9:be:9d:f4:
55:89:5f:c5:5a:92:10:0c:6e:77:2e:bb:34:08:3d:
e7:3f:d9:eb:6d:d8:86:ce:c3:42:2b:f5:2d:0a:90:
19:d2:7c:e5:b3:e6:34:e5:a1:9d:c6:4f:49:cd:16:
3e:a0:0a:80:ce:60:2e:d3:1e:46:ab:5a:83:22:49:
9d:7d:83:3b:d1:2e:79:d2:35:8c:0a:b4:d2:07:4c:
a0:6f:31:08:8d:45:11:38:6b:9b:e7:b6:40:54:46:
96:84:f2:d8:cd:52:fb:b1:42:23:3c:9e:8e:39:e5:
1d:5c:1c:21:4d:2b:75:fd:36:20:66:7b:77:f8:be:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9F:C9:F9:6B:11:38:AB:A6:EE:AF:5E:67:2C:30:08:1B:62:49:FC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5J_J-WsROKum7q9eZywwCBtiSfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.114.0/23
Signature Algorithm: sha256WithRSAEncryption
32:04:63:0f:07:98:84:7d:07:32:2b:99:fb:a0:da:78:b5:d1:
5a:40:5a:c1:1d:e0:4b:a1:d7:d7:84:38:0b:29:90:60:18:c2:
3c:cf:ef:43:ee:c2:24:d7:05:19:49:ac:c9:9f:b0:db:0f:3b:
69:2b:ce:15:ab:93:70:bd:89:f0:c7:96:d3:d1:f5:29:72:5d:
02:58:cd:28:c6:4d:53:f6:5d:1e:3b:42:e7:2c:fa:69:bf:d0:
02:c5:1b:37:8d:65:a1:f2:c3:53:3a:9c:9e:8b:6b:29:b6:71:
d4:1c:84:09:f7:4c:42:49:d7:89:fe:b0:64:15:1a:a6:d7:3e:
6a:a1:62:27:e6:d1:03:44:4a:e4:39:03:5f:4d:50:3b:67:d6:
05:51:7a:be:7a:5a:aa:69:9e:02:7d:8f:39:2f:e6:02:1d:4b:
64:76:db:ff:e0:2e:e8:bb:1d:cc:da:05:3d:b9:ab:6e:14:e4:
de:c5:80:01:09:7b:42:e1:d2:e9:6f:fc:58:84:fb:18:0e:bb:
c6:8d:8c:bf:56:59:aa:94:25:12:d4:cf:38:71:26:09:d3:03:
6c:eb:c9:1f:23:a1:14:d8:6c:24:b9:ef:77:01:14:3d:5e:89:
e3:9a:69:8f:e1:f0:78:5d:f8:be:56:27:52:2a:30:cd:3d:16:
6f:17:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org