Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/5WuIxCdCjFesUKolvSdBi0zvzsc.roa
File: 5WuIxCdCjFesUKolvSdBi0zvzsc.roa (raw, json)
Hash identifier: X6ORlvi9nX/RyDW87y92DydXVw7YIgPR5jh/MrzG1Kw=
Subject key identifier: E5:6B:88:C4:27:42:8C:57:AC:50:AA:25:BD:27:41:8B:4C:EF:CE:C7
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 01856C25CCE30B066376771054A50DECA69D
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/5WuIxCdCjFesUKolvSdBi0zvzsc.roa
Signing time: Sun 01 Jan 2023 07:04:54 +0000
ROA not before: Sun 01 Jan 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.239.162.0/24 maxlen: 24
193.239.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:cc:e3:0b:06:63:76:77:10:54:a5:0d:ec:a6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e56b88c427428c57ac50aa25bd27418b4cefcec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:99:56:54:05:ee:94:fa:b0:0a:e9:39:51:
f9:a3:b0:5c:ce:95:f7:6c:f5:3b:00:6f:77:90:2d:
a2:28:66:0c:f4:bc:6c:93:ad:ef:62:54:b6:a8:7f:
8a:e9:85:92:fe:cf:6e:73:a7:1d:d2:3c:ae:eb:01:
fe:db:7a:24:5e:10:c2:64:5b:bd:97:cf:e6:2d:dd:
9a:40:b8:a9:3c:69:0a:55:88:54:f5:8e:71:7e:32:
d7:c4:10:c1:fb:f4:13:e0:e8:7d:6c:46:8f:57:02:
53:e7:83:64:04:9c:29:4d:d5:4b:20:71:e3:7f:84:
0a:bc:cc:82:ca:4b:79:2f:ee:6c:5f:a5:4e:dc:be:
0d:c9:c7:31:85:1a:a7:be:93:aa:c6:3e:45:ff:47:
b2:da:43:53:aa:2a:34:d7:63:4b:89:e3:42:2a:83:
6f:cb:ef:8f:b1:8b:8c:67:48:be:30:8c:81:0a:67:
8a:94:64:a1:af:7f:03:02:c1:21:d4:e5:65:a5:0a:
c1:87:24:52:fe:b1:38:8d:ac:63:9f:cb:2e:40:ac:
90:a5:11:88:8a:06:43:54:69:d0:3d:e9:24:2f:aa:
6e:6a:97:a1:c9:38:4f:1b:52:27:2b:a4:82:45:33:
93:ab:fd:f2:04:e0:fd:53:24:ce:f5:cf:b5:9e:0b:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:88:C4:27:42:8C:57:AC:50:AA:25:BD:27:41:8B:4C:EF:CE:C7
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/5WuIxCdCjFesUKolvSdBi0zvzsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
05:d8:f5:06:21:98:f2:7d:7e:cd:0a:03:fb:7f:23:50:a2:36:
eb:aa:60:80:44:9d:de:be:19:7b:68:95:e8:39:b4:f3:ad:11:
14:5f:b9:ab:d0:57:7d:c8:df:40:15:07:dc:39:5d:c9:0e:11:
7d:3c:9b:78:f2:db:d8:ba:1a:ce:78:37:4d:4c:6e:c5:89:9a:
7f:ff:06:9d:21:e0:38:3f:82:53:5e:0d:55:1a:4d:b8:b9:68:
7d:9a:45:50:ae:4b:c1:aa:92:82:d3:82:52:6d:20:71:29:50:
6d:2c:16:a8:a1:0f:15:3f:17:fb:16:4f:ce:29:4e:04:e9:bc:
b8:c3:85:6d:59:b9:51:fe:b7:b4:45:58:ba:d9:34:af:5d:47:
16:a4:fe:fe:7f:09:90:c4:c1:ea:aa:91:4f:42:39:c2:9e:e8:
78:df:c2:ca:d2:34:5e:0d:f6:05:6a:02:b0:05:b6:85:5b:b1:
d0:c0:34:38:5b:19:b9:c5:0c:c4:cd:f3:e7:4e:a4:ba:0d:65:
b7:13:c3:48:aa:ae:51:ee:73:9b:44:d0:09:2c:23:5d:6d:28:
65:e0:de:1a:62:0f:09:f8:44:7d:33:b0:c2:21:06:6d:a9:6b:
bc:bf:ba:77:c5:cd:3e:5c:97:7b:d1:88:6a:fd:2f:9e:7b:57:
1b:a0:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:35 2024 by rpki-client on console-ams.rpki-client.org