Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xn0lhlSHgj3WgjxxkQBRvlbBeEY.roa
File: Xn0lhlSHgj3WgjxxkQBRvlbBeEY.roa (raw, json)
Hash identifier: fdFlltg4NkQaPFEnPBzxj4WP+Kb9yUA3gGf+LXkuRk4=
Subject key identifier: 5E:7D:25:86:54:87:82:3D:D6:82:3C:71:91:00:51:BE:56:C1:78:46
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192CA5D7B6AC5430082DA7151F01EDA7C02
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xn0lhlSHgj3WgjxxkQBRvlbBeEY.roa
Signing time: Sat 26 Oct 2024 19:46:16 +0000
ROA not before: Sat 26 Oct 2024 19:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.149.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 20:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ca:5d:7b:6a:c5:43:00:82:da:71:51:f0:1e:da:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 26 19:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e7d25865487823dd6823c71910051be56c17846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:75:14:af:d7:75:07:cc:f8:30:19:9c:04:
6c:00:df:0a:57:35:9d:aa:b2:66:a9:e1:cc:6f:42:
27:c0:7e:f1:b6:72:22:c6:48:3c:13:ac:a2:94:d8:
ae:16:7a:e3:42:50:63:66:64:15:4b:5a:b8:85:6e:
14:1c:e1:be:15:fe:4f:44:e2:e0:ba:5d:8c:93:5d:
d0:b3:f7:50:b3:21:36:28:3c:7d:04:ec:a7:88:8c:
34:cb:a3:9c:2b:cb:1f:85:8f:fe:07:11:d9:ef:1e:
46:39:96:3a:d0:d4:cd:4e:6b:e8:9e:fc:7d:69:c4:
c7:0b:f0:0f:3b:88:cd:68:77:a7:84:2b:0d:fc:d9:
d9:d4:e9:14:36:94:52:dd:76:39:16:29:80:d1:66:
94:00:0e:37:f0:70:d3:3a:7c:8e:10:7f:eb:23:18:
f6:a1:15:fd:3b:31:b7:e1:48:f0:ae:8a:74:65:5c:
f7:d7:a8:2a:fb:87:c1:a9:d2:37:b5:8d:5f:ba:c4:
dc:b6:98:4a:99:57:44:3b:e6:9c:99:b4:f0:50:bd:
84:d4:3b:db:49:22:44:e0:18:d8:1b:1a:46:e6:09:
46:09:7f:b3:a0:2b:f1:0d:a8:a3:69:9e:78:de:86:
52:d5:9a:36:75:65:20:48:9d:39:19:f9:e3:3c:9d:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:25:86:54:87:82:3D:D6:82:3C:71:91:00:51:BE:56:C1:78:46
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xn0lhlSHgj3WgjxxkQBRvlbBeEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
77.90.25.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:b9:c8:4a:31:9d:ff:62:88:2d:48:24:d6:08:9c:20:f2:df:
12:fa:0c:fd:b8:7c:63:7e:06:30:aa:77:f1:cb:4e:15:87:57:
37:a4:29:76:88:6e:38:3d:82:2c:86:e2:bb:30:bb:4a:38:d4:
a5:f1:7a:c7:05:cf:88:7b:cc:a5:d6:63:0c:f9:35:ac:40:42:
6a:f5:d9:c4:f0:5f:4a:3b:c8:07:db:5f:2f:bd:7b:fb:46:4a:
be:8c:4d:f5:bc:c8:a0:44:fb:88:bb:63:54:c5:9a:d0:b3:d2:
27:12:fc:51:9b:2b:74:10:60:51:fe:74:36:70:86:0a:5c:ca:
04:9e:0d:0d:b5:fd:0d:0d:90:7a:b7:7e:2b:94:fc:6f:f3:c0:
f6:03:c6:e1:a3:fd:27:a2:fc:eb:89:34:c4:0a:d3:f6:59:62:
6f:71:a5:c2:4c:88:02:2d:fc:a9:b7:25:28:19:ba:0d:5f:48:
8f:0c:9e:0e:c5:bf:60:52:38:52:93:9b:51:e4:00:57:30:b8:
20:c4:6e:ac:f5:09:8b:74:5a:41:ca:e1:fa:5f:81:e3:ca:48:
22:ea:69:0d:9f:a6:cc:55:85:ab:0b:3f:c2:c3:91:b7:d0:fa:
c4:5c:1a:64:f9:a9:6b:4e:a3:5a:c5:f8:56:de:8d:ff:ff:18:
38:4c:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 00:38:35 2024 by rpki-client on console-ams.rpki-client.org