Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/bADxWijBIufGpmQQFCJNEjGccu0.roa
File: bADxWijBIufGpmQQFCJNEjGccu0.roa (raw, json)
Hash identifier: f9aGkeC+nrI5IsnN2DeL+gVr+udBRhrtvp7VO9TGAs8=
Subject key identifier: 6C:00:F1:5A:28:C1:22:E7:C6:A6:64:10:14:22:4D:12:31:9C:72:ED
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01857070503182AE694E54B0BB3FE6861491
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/bADxWijBIufGpmQQFCJNEjGccu0.roa
Signing time: Mon 02 Jan 2023 03:04:46 +0000
ROA not before: Mon 02 Jan 2023 03:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56724
IP address blocks: 185.61.252.0/22 maxlen: 24
5.149.152.0/23 maxlen: 24
5.149.154.0/24 maxlen: 24
5.149.159.0/24 maxlen: 24
2a04:ee00::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:50:31:82:ae:69:4e:54:b0:bb:3f:e6:86:14:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jan 2 03:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c00f15a28c122e7c6a6641014224d12319c72ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:b4:21:55:91:7f:9f:8a:b0:78:6d:1c:2a:
3d:2e:f6:fa:6b:c1:d9:4d:25:bc:03:8e:82:89:4a:
92:dd:e5:a3:ac:b5:08:da:94:e7:9c:ea:f8:cd:90:
07:7d:f7:17:86:17:43:72:c3:e5:09:f1:8c:62:2e:
c5:ed:33:33:41:54:bb:8c:c3:78:44:3b:a4:91:65:
1f:20:34:84:51:85:a0:ed:8d:04:0b:25:03:42:99:
4d:ca:ea:fd:a2:5d:b5:64:29:e0:9e:27:13:c2:0c:
90:03:21:70:87:7c:95:b4:5f:ef:b5:8e:61:16:d2:
73:af:9e:ea:f4:9a:6b:1f:ca:96:f9:c9:5d:65:f6:
b5:79:dc:17:58:0e:8e:6d:ad:22:4b:63:98:3f:64:
f3:ab:71:05:e5:54:13:60:a9:24:93:77:74:01:81:
55:f1:54:9a:fa:cb:9e:58:84:57:27:11:9d:f5:0c:
aa:68:32:f5:94:67:0f:19:35:85:90:df:eb:a7:a9:
94:e8:ca:08:73:06:95:33:27:fb:57:12:9b:2e:2a:
00:c0:7c:89:a6:8d:e8:09:3b:5a:7a:65:6c:29:43:
79:0f:1e:88:e4:a5:26:f5:78:1b:ff:5b:cd:96:b1:
a1:94:fd:03:4a:eb:40:80:54:f6:89:b5:98:35:39:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:F1:5A:28:C1:22:E7:C6:A6:64:10:14:22:4D:12:31:9C:72:ED
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/bADxWijBIufGpmQQFCJNEjGccu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.152.0-5.149.154.255
5.149.159.0/24
185.61.252.0/22
IPv6:
2a04:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
98:aa:9d:d4:37:88:bd:11:1f:f9:6e:92:74:e8:32:a1:83:15:
88:a8:93:17:07:68:4f:b7:d6:b3:6e:49:b0:79:97:f3:6f:8c:
41:9f:c7:f6:d2:54:02:a2:b6:71:4f:61:87:0a:81:e5:f2:fc:
8d:b4:88:7b:c6:b9:eb:56:61:91:90:63:a3:12:46:84:98:74:
f1:17:0c:d0:11:b0:b4:a5:50:0a:a1:25:81:55:57:37:85:c9:
d9:3e:77:78:ba:b5:fb:74:c4:c7:a8:8d:54:10:a4:84:4b:65:
f2:95:57:a4:2c:a4:b0:b6:b5:97:bf:5e:5f:7e:84:9b:39:9a:
dd:70:58:cd:e9:25:e6:dd:2d:4d:4a:8a:d2:9c:6b:4a:b6:4c:
85:50:2f:b4:82:7d:85:e7:5e:7c:bd:6e:8b:a7:77:13:a9:50:
73:3d:74:f8:04:49:d5:4f:d7:3f:73:7e:9d:3c:d2:11:7f:32:
44:53:bd:da:5d:84:1e:8f:fa:3b:64:e1:aa:18:bf:ce:f2:35:
25:f7:41:43:2f:88:5e:70:8d:bc:9c:d8:c9:f1:4f:86:2a:1e:
9e:6c:d8:bd:37:08:3f:cf:83:40:52:a2:37:56:2f:15:da:a1:
2d:e5:d5:a9:c8:52:a3:7c:3b:ab:25:a8:ff:19:2b:28:6c:ba:
00:6b:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:34 2024 by rpki-client on console-fra.rpki-client.org