Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/h5dntQE0R2N6o6UkR2EhB5f5eqY.roa
File: h5dntQE0R2N6o6UkR2EhB5f5eqY.roa (raw, json)
Hash identifier: wGoxdZSx6Z+MpfQp+nGj9tS3lDzZJ00E/zBcPBAXmZc=
Subject key identifier: 87:97:67:B5:01:34:47:63:7A:A3:A5:24:47:61:21:07:97:F9:7A:A6
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018737B7A36D70187A6462080658514E3247
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/h5dntQE0R2N6o6UkR2EhB5f5eqY.roa
Signing time: Fri 31 Mar 2023 12:49:54 +0000
ROA not before: Fri 31 Mar 2023 12:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 109.206.248.0/22 maxlen: 23
109.206.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Dec 2023 15:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:b7:a3:6d:70:18:7a:64:62:08:06:58:51:4e:32:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 31 12:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=879767b5013447637aa3a5244761210797f97aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:c5:8b:cd:d1:51:1c:62:b1:96:23:73:7f:
d8:5f:66:2f:6c:9b:96:c3:ef:70:55:04:f5:e3:67:
b6:2a:b5:d8:8f:4b:54:ae:8f:2e:78:9e:05:7e:59:
5f:58:68:14:0f:2d:c1:0f:09:c4:3c:b7:1a:43:d5:
a9:1b:45:c3:78:d7:ee:46:2f:e0:1e:ab:31:eb:32:
3e:bd:3e:bf:41:1c:86:28:27:1c:87:21:0b:12:de:
f9:01:b5:f9:86:d6:05:6e:62:25:bb:f1:b4:ed:ec:
69:87:3e:48:9b:69:90:00:ef:f1:9a:82:41:25:e9:
55:50:00:11:60:41:59:1c:60:9e:fe:62:d2:f6:19:
d3:13:b5:0a:3e:a1:0b:8a:9e:a9:50:81:05:09:48:
00:b0:c3:8f:ca:97:d2:15:d0:bf:4a:f0:9b:d7:14:
f1:42:64:bd:02:02:a7:91:26:e7:e6:2e:92:a6:e8:
0d:f5:4b:4b:93:40:d7:57:5c:53:5d:57:a2:b5:73:
bb:a2:cf:0f:53:4b:a0:06:3e:b4:b2:1a:f5:c0:52:
a0:21:45:93:ad:7d:3e:6d:41:63:6d:97:ba:96:e7:
72:78:c3:b9:72:0e:09:a9:45:c0:d2:d3:e4:04:53:
29:f0:e3:b8:95:4f:a2:41:57:53:15:cc:81:79:80:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:67:B5:01:34:47:63:7A:A3:A5:24:47:61:21:07:97:F9:7A:A6
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/h5dntQE0R2N6o6UkR2EhB5f5eqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.248.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:aa:ce:58:40:93:db:15:91:40:12:10:58:f7:fa:f9:5c:33:
87:b9:80:c5:ab:21:76:79:0c:fa:0b:d9:5e:4d:aa:33:df:5e:
11:46:73:21:a5:15:15:8e:fb:59:4b:9c:c9:b4:0a:5c:84:ad:
e6:21:71:4d:b1:2b:0e:56:22:ca:55:3d:b8:fc:97:f4:03:d0:
2a:68:6b:6e:39:29:26:39:0b:52:41:70:59:bb:f1:7f:87:b6:
e0:a4:06:df:5d:1a:de:04:59:97:b7:e0:34:a3:e0:20:e3:a1:
d2:b3:1a:65:03:51:2d:57:dc:54:ea:82:b9:dd:79:53:46:c2:
82:e4:fd:92:d5:4b:20:9c:3a:cb:e0:bb:72:9b:3c:1a:1d:6f:
82:39:20:73:4a:8c:5d:fa:a3:9b:56:44:e5:70:78:56:6e:a0:
ec:43:df:a2:de:20:e3:a6:e7:ff:91:ac:3c:79:aa:20:09:0d:
34:cc:fe:65:ce:66:6b:f2:f8:5d:f1:6f:e0:e2:3b:99:1f:49:
82:1b:7f:cf:c6:2a:83:8f:9f:3a:1d:17:b9:1b:a8:c5:6c:4b:
ad:7a:4a:7e:3a:18:b0:70:6e:fd:0e:2f:16:f8:ba:20:05:84:
72:87:6a:8e:8e:c8:71:c0:c6:3d:6b:96:bc:e2:e9:2a:49:9e:
e5:c2:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org