Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-shuTve2pSoiwExMrh-FUQbkplI.roa
File: 1-shuTve2pSoiwExMrh-FUQbkplI.roa (raw, json)
Hash identifier: W7cc6L+Mgv7jDvxFsH0xmh60eDWQAmP3wmBdd3aHo6I=
Subject key identifier: FA:C8:6E:4E:F7:B6:A5:2A:22:C0:4C:4C:AE:1F:85:51:06:E4:A6:52
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01919B362646D10338E5CD491E58C1CBCEDB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-shuTve2pSoiwExMrh-FUQbkplI.roa
Signing time: Wed 28 Aug 2024 22:58:22 +0000
ROA not before: Wed 28 Aug 2024 22:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214323
IP address blocks: 5.83.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 04:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9b:36:26:46:d1:03:38:e5:cd:49:1e:58:c1:cb:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 28 22:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fac86e4ef7b6a52a22c04c4cae1f855106e4a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:1e:3e:4f:90:93:07:1e:f2:0a:07:f6:36:
94:be:25:91:c4:e0:1c:05:77:cd:42:62:b6:4c:56:
46:0e:5d:ea:e3:62:3c:56:0b:14:04:c0:11:f8:21:
2e:49:2b:67:9f:f5:a2:53:38:1c:38:c7:7b:5c:d3:
dd:c2:98:a3:9d:5b:66:78:49:28:03:c4:7a:09:c8:
61:7a:58:b7:c2:0a:63:49:20:d8:53:71:18:32:fc:
ba:db:c9:90:e2:35:3d:c7:5f:64:b3:5a:d5:45:c3:
8b:2c:49:34:26:72:2d:fb:a0:2b:7a:44:85:02:a0:
95:6c:81:22:32:c2:e3:07:58:aa:02:63:85:00:dd:
ef:8e:b3:9d:83:c1:e4:80:44:5d:76:3b:dc:77:cc:
94:04:b9:45:f1:bc:f4:dc:aa:e7:58:b3:ca:de:f5:
79:b5:c1:33:5c:c0:28:af:fe:71:70:81:bb:08:61:
c6:e0:f3:8c:5e:a3:03:f2:9d:ad:65:f3:6d:90:f0:
f4:6b:60:f1:4c:85:de:92:98:c8:8c:d0:b7:76:c2:
b3:3d:6d:eb:62:13:0a:97:5d:47:78:1a:bc:a5:22:
ff:52:f2:d7:c5:a7:d0:00:f1:ce:9e:2c:84:55:21:
bc:d5:f7:d0:26:ba:7a:9e:14:b7:0e:ea:8c:fd:3b:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C8:6E:4E:F7:B6:A5:2A:22:C0:4C:4C:AE:1F:85:51:06:E4:A6:52
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-shuTve2pSoiwExMrh-FUQbkplI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d8:91:b9:d9:2d:eb:47:c5:8c:ac:7d:70:aa:ae:19:f8:34:
c4:da:0e:9d:15:a0:cb:cf:1b:c1:2a:4b:c6:61:a0:7d:65:ca:
02:8d:f2:17:42:cc:62:a2:f3:ef:3f:c5:dc:d5:01:bc:4f:52:
e6:66:e9:1b:1c:80:e6:57:a2:e1:4a:b0:2b:f4:76:cb:4e:49:
f4:cb:d7:84:ef:26:1d:79:42:95:94:6e:1b:e6:d1:67:e8:74:
5a:16:02:64:5e:ce:61:e0:aa:5c:57:30:aa:48:b5:d4:e4:59:
32:3b:bf:24:e1:90:83:03:d1:60:49:52:6d:c0:4c:81:17:59:
fd:61:99:85:14:65:02:83:22:fb:55:f7:a1:56:bf:70:a4:3c:
f1:4d:56:2e:50:7c:02:47:58:08:9b:91:70:76:a9:ba:99:13:
60:e1:a5:57:d0:c8:f3:db:3c:00:6a:46:77:b7:f9:49:0c:28:
09:8a:50:ab:d0:11:a8:c8:a9:9c:17:d7:dd:9e:69:38:76:4e:
11:b1:e1:21:7b:88:0c:36:76:c3:f3:dc:7e:4d:ec:7e:b3:24:
b5:67:50:98:94:3e:9b:93:3f:c9:46:87:96:8f:cb:b7:df:49:
bf:b8:b8:f2:f3:26:ab:bb:44:3e:72:f3:ef:fe:c9:5e:3f:1c:
e7:c8:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 06:37:41 2024 by rpki-client on console-ams.rpki-client.org