Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7tOgNwb6YxZPS9MXTpbc4Kem0VA.roa
File: 7tOgNwb6YxZPS9MXTpbc4Kem0VA.roa (raw, json)
Hash identifier: DQWKF0GO1aTpHdtF0wCmUdNgzB/VmX0VG3zUhfHsvew=
Subject key identifier: EE:D3:A0:37:06:FA:63:16:4F:4B:D3:17:4E:96:DC:E0:A7:A6:D1:50
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191C1AF8CE99041AD08FC2EDDF5C854AE0D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7tOgNwb6YxZPS9MXTpbc4Kem0VA.roa
Signing time: Thu 05 Sep 2024 10:16:33 +0000
ROA not before: Thu 05 Sep 2024 10:16:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.83.148.0/24 maxlen: 24
5.175.132.0/24 maxlen: 24
5.175.137.0/24 maxlen: 24
5.230.5.0/24 maxlen: 24
5.230.9.0/24 maxlen: 24
5.231.23.0/24 maxlen: 24
5.231.32.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:af:8c:e9:90:41:ad:08:fc:2e:dd:f5:c8:54:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 5 10:16:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed3a03706fa63164f4bd3174e96dce0a7a6d150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:a8:96:77:f1:8e:df:72:a2:58:e1:b5:3f:
32:d2:cd:d0:20:1e:a3:2f:0b:b2:b4:eb:fe:5d:e2:
6d:3d:3a:8f:6e:99:ea:8e:a4:9b:bf:3d:41:42:71:
88:ff:8d:24:1b:d7:9c:ac:cc:ad:e2:83:aa:77:4d:
21:86:69:7a:40:b7:c0:61:d7:39:90:b7:c1:b0:6e:
35:22:cb:d4:60:b1:3b:20:c2:12:85:1a:45:a2:4a:
45:79:fb:2f:c5:88:87:bb:6a:d1:19:52:f7:da:47:
7f:99:57:f6:b3:fb:d7:7a:c1:fe:9a:e2:5b:99:7f:
1d:6b:73:74:93:f8:e5:af:0b:fc:dc:47:70:1c:10:
af:17:f6:77:30:c4:ac:69:a2:b0:a9:26:d0:d3:28:
00:5f:dc:17:72:a7:f7:05:4f:8f:2e:a3:93:2b:fa:
e4:71:a6:b0:3c:59:67:c4:25:57:5b:9a:e7:be:db:
07:69:db:be:0b:2d:36:c0:ea:cc:f9:16:ed:29:68:
e5:e7:44:3e:fd:d1:ea:af:94:46:06:39:10:c1:3d:
4c:19:7b:d8:fe:a0:46:6d:45:2c:4d:43:2b:94:e3:
e5:32:13:fe:e0:db:6f:cd:9b:e7:36:2d:82:a9:02:
de:49:3e:a7:f6:48:5e:aa:85:49:37:ee:da:d7:c4:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:A0:37:06:FA:63:16:4F:4B:D3:17:4E:96:DC:E0:A7:A6:D1:50
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7tOgNwb6YxZPS9MXTpbc4Kem0VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.148.0/24
5.175.132.0/24
5.175.137.0/24
5.230.5.0/24
5.230.9.0/24
5.231.23.0/24
5.231.32.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:42:52:1c:d9:57:7b:ce:95:5a:c8:23:1e:dc:96:32:94:60:
44:3c:cf:78:33:e9:ff:51:24:94:d9:21:0c:60:13:98:cf:a8:
8e:d5:79:ad:02:1f:55:7e:70:9d:e5:ed:67:5f:e5:7f:77:b9:
04:ed:20:50:d8:11:24:75:1c:84:51:f3:9d:f4:77:e0:0f:6c:
54:fe:d0:6c:f0:de:a6:d0:77:2e:43:99:67:b4:d3:8c:92:a4:
53:78:cb:ac:b4:80:83:e3:0f:5f:88:bd:c3:36:20:9e:44:a1:
1a:ca:cb:ed:de:cd:e3:1b:fa:60:e6:f4:d1:8b:01:7f:f5:96:
2b:f5:aa:9c:31:bf:88:11:25:79:66:e0:15:06:e7:2b:54:79:
11:81:d9:cf:a2:f2:d8:5e:59:f9:51:37:04:ac:36:2d:c1:eb:
43:49:87:ac:82:0f:18:4b:ee:4c:10:63:01:3f:f9:f1:2d:00:
f6:70:8e:47:ab:3d:2b:1d:83:eb:9e:de:da:95:90:68:32:1f:
73:9f:1b:61:63:26:8c:e5:a6:71:b1:67:54:14:ee:33:5f:0d:
6d:79:8e:ee:dd:2f:b3:88:25:c2:0c:78:2e:4f:98:8c:87:b8:
6d:52:e2:dd:14:8e:4f:b3:6a:85:b1:9f:8c:b6:38:91:29:55:
e3:4b:db:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 15:26:30 2024 by rpki-client on console-fra.rpki-client.org