Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-zeAzedwHMxqm0AwNfFmF2hCNpk.roa
File: 1-zeAzedwHMxqm0AwNfFmF2hCNpk.roa (raw, json)
Hash identifier: n2jMgBDJPv9BGhNo5yrfK/Vxx+KH5R9BsFs3DWoj1us=
Subject key identifier: FB:37:80:CD:E7:70:1C:CC:6A:9B:40:30:35:F1:66:17:68:42:36:99
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01909847670AB3688C4FF471EC32BED23A41
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-zeAzedwHMxqm0AwNfFmF2hCNpk.roa
Signing time: Tue 09 Jul 2024 16:15:34 +0000
ROA not before: Tue 09 Jul 2024 16:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59592
IP address blocks: 5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
5.231.200.0/24 maxlen: 32
77.90.20.0/24 maxlen: 24
185.13.158.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jul 2024 15:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:47:67:0a:b3:68:8c:4f:f4:71:ec:32:be:d2:3a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 9 16:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb3780cde7701ccc6a9b403035f1661768423699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:ed:91:43:f8:5e:b4:34:16:ac:9e:66:da:
49:66:90:89:ab:e0:6d:88:a5:33:98:93:ce:30:ec:
61:6d:49:4b:83:6a:a6:72:4b:21:ba:d7:41:d2:de:
89:cc:90:8e:82:cc:40:7f:42:f5:ce:8d:40:15:b7:
ab:e1:db:74:30:a3:0e:bf:03:a2:07:a2:33:1d:51:
04:07:3d:56:f0:78:13:c3:f2:fd:b8:c8:4a:d9:23:
a0:db:c7:3d:0a:66:f2:cb:b9:65:69:a2:85:3e:0c:
ad:90:90:df:53:70:a0:7a:70:32:bc:0f:71:9a:cd:
8b:b5:66:88:7a:70:3b:c3:54:21:22:00:3b:ff:65:
93:03:cd:81:57:4a:c8:91:b0:d1:bf:48:d1:a2:f3:
24:23:91:a5:03:af:5a:61:a3:7d:82:70:41:0a:0f:
58:51:a0:04:91:e3:72:a9:e5:dc:2d:df:52:0d:c7:
77:d3:ec:25:ca:5c:0f:c2:57:3b:b4:c2:ab:2e:e2:
49:42:fe:3b:49:ce:9d:e1:23:07:cc:85:ca:eb:a4:
5c:66:5a:25:2e:8f:4e:25:d8:de:7b:fe:5d:2d:23:
09:ae:c9:eb:b9:f5:8f:01:63:ad:d9:70:e8:19:8c:
94:14:a1:5a:fa:6b:7f:a6:b1:14:da:20:26:a5:01:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:80:CD:E7:70:1C:CC:6A:9B:40:30:35:F1:66:17:68:42:36:99
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-zeAzedwHMxqm0AwNfFmF2hCNpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
5.231.200.0/24
77.90.20.0/24
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8d:8b:64:86:2c:63:fa:2d:3d:08:05:7a:11:0f:5b:24:88:
c0:32:ad:9f:c9:46:60:1a:3c:72:65:4d:d6:c4:a4:38:cb:d0:
8b:ad:f5:ce:f2:79:62:cf:5a:6a:11:45:c1:9b:46:65:22:2e:
09:2b:5f:60:fa:f9:f5:90:76:3e:de:ab:82:f8:ca:13:86:a9:
84:02:09:4e:cb:1a:e4:1c:c0:06:cb:e3:70:35:c3:56:45:b5:
e4:2c:a7:02:7f:17:1c:73:e1:cb:d6:ad:2e:cb:d1:e9:94:c2:
0a:cd:e4:4d:3f:b7:16:c0:1f:ee:a5:d5:69:56:00:a9:3f:b6:
a7:8c:12:79:18:b5:73:74:aa:55:c8:87:55:1b:47:da:b0:44:
8d:1a:44:cf:81:b3:63:f9:13:14:dc:57:24:87:cc:aa:46:d7:
96:95:7c:c2:51:06:7b:a7:1c:fa:14:b4:a7:7d:94:a5:de:c8:
d3:a0:f6:3e:dd:68:3f:17:82:1f:cc:50:19:c4:a9:0c:d3:1d:
a4:4c:1e:83:e1:e9:29:37:00:0d:7c:7b:b0:34:32:3b:07:28:
4f:95:9c:62:c7:90:56:21:dd:2c:17:7b:48:56:55:d2:14:fa:
1e:eb:a9:3a:9d:38:d4:c4:38:69:16:21:da:43:61:b2:88:98:
b3:67:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 18:24:55 2024 by rpki-client on console-fra.rpki-client.org