Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/VwrLgJ6p837eINvsR5Z8l5M8s_Q.roa
File: VwrLgJ6p837eINvsR5Z8l5M8s_Q.roa (raw, json)
Hash identifier: OtdU+/O1m+BYNvoDZqXaJ1dcGVkR8jfdgOh+iob+hxk=
Subject key identifier: 57:0A:CB:80:9E:A9:F3:7E:DE:20:DB:EC:47:96:7C:97:93:3C:B3:F4
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01892B7B8A63043E8C2BBCDFFACF7270A2EA
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/VwrLgJ6p837eINvsR5Z8l5M8s_Q.roa
Signing time: Thu 06 Jul 2023 13:54:23 +0000
ROA not before: Thu 06 Jul 2023 13:54:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8330
IP address blocks: 5.57.88.0/21 maxlen: 21
193.203.5.0/24 maxlen: 24
2001:7f8:17::/48 maxlen: 48
2a00:eb20:abcd::/48 maxlen: 48
2a00:eb20::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Sep 2023 14:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:7b:8a:63:04:3e:8c:2b:bc:df:fa:cf:72:70:a2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jul 6 13:54:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=570acb809ea9f37ede20dbec47967c97933cb3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:c3:6c:e0:af:c2:ed:37:3a:bd:aa:dc:62:
36:d9:93:64:8d:48:ab:8b:09:fb:9c:43:a3:74:36:
a1:df:5c:84:f9:be:03:64:96:86:13:75:70:fe:1b:
a1:5b:d9:ef:7e:86:6e:65:64:de:0f:ad:ec:95:66:
ef:77:65:dc:cc:66:ea:a8:74:c8:ad:55:af:6f:ea:
f1:e6:a3:12:26:33:ff:98:db:6d:68:53:87:50:4d:
d6:30:ee:ab:81:b7:a8:3a:fd:e3:67:16:75:31:38:
f0:5b:36:34:5f:d6:14:a3:e4:06:de:61:96:d2:17:
40:c9:8f:e7:69:2f:ca:26:14:e6:e6:e8:9d:cc:fe:
d7:6d:cd:0a:1e:21:d2:c3:99:5e:46:59:d9:38:66:
28:a7:b5:e0:a0:3a:ea:61:97:bc:17:32:63:bb:1c:
d7:08:ac:b2:19:05:3b:f3:de:be:9f:d0:bd:6a:d5:
05:8f:9f:3e:8a:ca:2b:f8:f9:f2:20:47:23:93:2c:
7a:6c:a5:63:b3:6f:4f:0a:a1:f1:bc:78:6e:72:be:
71:54:f3:e4:df:59:95:89:8c:39:fe:3d:f9:78:e6:
08:0c:91:73:07:19:de:db:68:7b:ce:77:40:f6:b6:
39:01:f9:39:13:da:39:48:92:55:3c:92:a6:5d:61:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:CB:80:9E:A9:F3:7E:DE:20:DB:EC:47:96:7C:97:93:3C:B3:F4
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/VwrLgJ6p837eINvsR5Z8l5M8s_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.88.0/21
193.203.5.0/24
IPv6:
2001:7f8:17::/48
2a00:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
6c:21:f2:06:78:6b:76:63:a4:fa:42:d7:1d:73:0e:0b:f2:a1:
f9:25:97:f4:5f:24:aa:93:f1:2b:4b:09:d5:9a:a6:ae:fa:5d:
ae:85:6c:89:b4:53:aa:28:b7:5c:49:dc:bf:69:e9:88:b6:5b:
ea:31:6b:67:1f:68:53:a4:09:c8:fe:a7:54:3b:c3:f8:cf:ec:
8f:3c:c6:e9:af:b6:47:e1:e0:e5:58:1c:8e:b7:8e:3b:ae:70:
60:ee:5e:d1:c6:c2:d4:ca:fc:33:0c:f1:1e:6b:79:0c:9c:42:
3d:c5:d0:7e:12:b9:a9:69:d5:d5:21:7a:ff:a2:56:df:a7:23:
d8:33:2b:d4:8f:a8:34:92:3b:65:a0:2a:53:91:34:44:1f:8c:
d0:af:e8:b1:5b:f8:56:fb:c8:b2:4b:d3:91:76:f2:6b:00:a2:
1e:a4:d3:83:0b:f7:2f:20:58:5b:b9:c5:8e:7c:93:ae:1f:5e:
ac:d4:b2:aa:3c:1e:02:5e:01:a4:16:4e:a2:88:3b:99:bb:16:
93:59:07:48:0d:43:be:50:36:64:69:f1:af:7e:2d:fd:f4:95:
c2:d1:90:20:ae:b4:f4:30:57:37:5e:5e:91:f8:40:e7:49:d6:
12:c9:28:58:e6:7a:fe:11:fb:0d:81:2f:eb:00:7c:24:91:7c:
0a:52:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:52 2024 by rpki-client on console-fra.rpki-client.org