Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SlFLqLynlFM0hWkX_tMYLpuTjII.roa
File: SlFLqLynlFM0hWkX_tMYLpuTjII.roa (raw, json)
Hash identifier: hNYzDi45R9+22nZj1dTgA9X3ClV05jR5oLBw/fvCBwA=
Subject key identifier: 4A:51:4B:A8:BC:A7:94:53:34:85:69:17:FE:D3:18:2E:9B:93:8C:82
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018852426B98AB42B1B8F900012BBF0B3BA4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SlFLqLynlFM0hWkX_tMYLpuTjII.roa
Signing time: Thu 25 May 2023 09:34:24 +0000
ROA not before: Thu 25 May 2023 09:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 213.185.90.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 27 Nov 2023 14:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:42:6b:98:ab:42:b1:b8:f9:00:01:2b:bf:0b:3b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: May 25 09:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a514ba8bca7945334856917fed3182e9b938c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:6e:60:af:f3:d2:3b:d4:24:a7:32:e4:69:
ab:d6:89:37:1e:a4:7d:f1:86:05:d7:2c:79:f6:44:
22:2b:08:49:74:a1:c0:4b:a9:dd:c9:da:0b:5a:f9:
4d:b3:31:52:78:f9:56:ba:ed:b8:01:00:d7:e5:83:
8c:42:a3:f5:25:57:ec:c7:b7:a3:e8:bc:94:17:f4:
fc:46:84:13:71:25:93:48:c8:da:e4:17:95:58:f5:
3c:aa:00:e0:2f:68:1c:c3:d3:e0:9f:b5:1e:21:e6:
ac:b7:ce:ed:a2:d9:08:5b:6f:d3:99:e8:73:25:9f:
34:53:30:99:bb:7f:6e:32:79:91:1f:73:45:b3:f6:
98:81:5b:22:21:5d:8c:31:97:77:00:24:d9:01:7e:
f7:ac:36:54:30:11:a2:67:d3:8c:9c:05:c1:7e:5c:
61:12:53:86:d5:20:47:c9:b2:40:d0:18:ac:f1:aa:
73:ea:6b:b8:f3:1f:a7:e4:b2:17:fa:e4:04:58:b9:
d7:f0:2a:49:75:6c:5d:ba:e7:29:e6:0f:d9:37:ae:
22:6b:1e:ee:23:95:38:f1:1f:4f:fd:22:d5:db:61:
84:c9:8f:3a:39:a9:ea:76:e9:d6:30:b5:21:84:d7:
4d:fb:58:3d:c6:77:65:c6:cc:d7:c4:f6:21:c7:78:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:4B:A8:BC:A7:94:53:34:85:69:17:FE:D3:18:2E:9B:93:8C:82
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SlFLqLynlFM0hWkX_tMYLpuTjII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.90.0/23
Signature Algorithm: sha256WithRSAEncryption
10:88:44:1f:a3:ab:ce:ab:cf:99:c4:6a:48:03:e4:07:30:54:
25:d8:e6:ec:e2:c3:d4:99:47:90:67:c2:29:ff:44:41:d7:cf:
80:c6:e1:cf:77:b2:b3:c9:20:19:b6:98:63:f4:0f:ae:40:06:
ae:b5:2b:23:4f:c9:3b:a3:51:2a:80:f7:6c:6e:7d:35:b9:9d:
c0:43:78:7b:3e:0d:de:16:7d:ec:65:81:90:55:3c:24:c2:9b:
77:f6:21:af:cf:3e:de:fa:a8:69:e7:ba:30:20:52:74:44:6b:
61:22:c7:80:a2:b6:b7:5b:e3:93:2e:62:e8:5d:6c:58:32:22:
af:35:c8:f0:e9:17:11:5c:53:f2:86:b3:24:e0:ff:ca:6a:c0:
59:1d:67:b1:10:2a:c9:d4:79:5d:ae:39:08:01:1f:a5:bc:f2:
b6:a1:c7:c7:55:10:ab:4d:49:d1:e9:22:87:87:15:b9:c5:b1:
02:62:a7:77:83:61:af:0e:3e:20:e4:72:52:6a:9f:2b:bc:fa:
de:86:41:4a:88:f4:42:25:7e:b2:ea:62:5b:06:f1:cc:46:c9:
a8:21:97:a4:8c:80:85:1f:b9:e9:dd:1b:8b:c5:d1:31:73:1c:
91:50:06:0a:1f:70:d9:64:01:2c:52:17:be:80:5c:9b:2f:05:
d2:93:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org