Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/VSlOozqLtV_L2ZTpzS0Nr3fp2q4.roa
File: VSlOozqLtV_L2ZTpzS0Nr3fp2q4.roa (raw, json)
Hash identifier: jxyIx+uwS4esMljrpfxT1DclS2FYv3w+sV6Ya1NXb4s=
Subject key identifier: 55:29:4E:A3:3A:8B:B5:5F:CB:D9:94:E9:CD:2D:0D:AF:77:E9:DA:AE
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 018C8680F158ACF4D599BC7CD5E465CF36D5
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/VSlOozqLtV_L2ZTpzS0Nr3fp2q4.roa
Signing time: Wed 20 Dec 2023 09:14:06 +0000
ROA not before: Wed 20 Dec 2023 09:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210767
IP address blocks: 5.183.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:80:f1:58:ac:f4:d5:99:bc:7c:d5:e4:65:cf:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Dec 20 09:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55294ea33a8bb55fcbd994e9cd2d0daf77e9daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:48:dd:82:ea:25:df:8b:31:31:98:02:b2:
02:74:e7:38:60:e9:26:ab:11:83:a3:f1:99:ac:b9:
58:f8:07:32:48:3d:8c:92:5e:ad:6f:fd:57:07:96:
a8:45:45:fd:3c:25:d0:0f:28:ab:c2:40:fe:4e:91:
1c:9c:05:9c:6f:4a:40:9e:6d:2d:34:20:97:02:a2:
f9:9e:78:4a:dc:4a:e5:51:b7:b1:cb:6f:5f:f1:c5:
a8:3b:4c:cb:de:7d:05:d5:48:52:49:dc:66:1c:74:
37:df:6d:b9:39:79:ef:e0:b3:80:0c:d6:0c:c8:58:
c5:1f:27:c4:4c:8a:14:f1:a2:52:45:87:9a:d1:46:
cc:d6:fc:b8:db:1e:e6:20:74:df:50:fb:20:72:94:
08:21:d6:ea:11:2e:28:a4:1c:ae:ff:7e:29:e8:88:
ef:ef:29:d4:78:3f:9c:b7:a2:d4:50:64:b6:57:2b:
6c:13:3b:84:10:df:e2:29:ca:e8:b2:56:09:b0:3f:
82:12:33:1f:1d:10:13:21:fe:db:c6:f7:7d:f3:70:
d0:6c:9d:c5:8e:42:e1:5c:dc:44:dd:42:f5:e6:1d:
ee:39:6c:e6:52:27:e7:39:d0:a7:2d:50:f8:92:15:
3b:53:dd:01:8c:13:ec:d6:65:2f:01:d7:6a:e6:3d:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:4E:A3:3A:8B:B5:5F:CB:D9:94:E9:CD:2D:0D:AF:77:E9:DA:AE
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/VSlOozqLtV_L2ZTpzS0Nr3fp2q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.151.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:11:1d:96:3e:47:52:f0:24:3d:1a:a5:aa:79:7d:a0:35:38:
47:bf:c0:3c:a6:15:ad:fd:63:d8:f4:65:3a:3f:81:8c:85:1b:
9e:11:15:58:90:ed:9d:f1:d1:24:05:a8:19:39:15:21:b9:ac:
f3:c0:a0:9e:6d:64:c1:e1:89:96:f4:0e:6f:de:5c:f5:14:05:
43:e5:df:75:db:5c:cd:bd:f4:e2:2c:c0:c0:53:49:3a:5f:da:
40:b6:5f:b9:0c:17:9d:c3:56:9b:f7:d7:59:79:21:0b:a4:65:
09:e5:57:da:59:d5:ac:31:25:59:ea:19:a0:bc:f7:9d:ae:3c:
e0:37:bc:91:de:85:62:c2:b1:9b:a3:7c:f8:bc:3f:ba:ad:ea:
56:b6:d8:e7:16:d3:fe:ef:a9:b6:87:d9:1d:10:42:68:1e:89:
79:40:c7:42:42:9e:4a:11:bf:4f:d6:be:28:38:3a:41:be:2a:
86:bd:02:ae:40:99:9c:31:7c:db:cd:48:58:aa:49:fa:55:48:
9e:57:2f:06:c7:6b:0e:bf:cf:9c:bf:c0:10:0e:92:a4:ed:00:
dd:91:ac:15:d5:96:bf:d6:dc:05:d6:82:c4:e4:4f:8b:09:94:
0d:4f:5f:07:a6:99:cc:f6:5d:1a:89:f4:f3:8c:c7:2d:e7:20:
0b:97:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:07 2024 by rpki-client on console-fra.rpki-client.org