Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/E5kYFQyKc-ap7Zza2Od9xTJFrXQ.roa
File: E5kYFQyKc-ap7Zza2Od9xTJFrXQ.roa (raw, json)
Hash identifier: XlphtpcQUxdvCy4sYAGJEwGap34x94Rz9nt2Hj5u4Yg=
Subject key identifier: 13:99:18:15:0C:8A:73:E6:A9:ED:9C:DA:D8:E7:7D:C5:32:45:AD:74
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 018B2EEFE6D899BB3E025804BAF6712AEAFD
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/E5kYFQyKc-ap7Zza2Od9xTJFrXQ.roa
Signing time: Sat 14 Oct 2023 16:05:55 +0000
ROA not before: Sat 14 Oct 2023 16:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 185.180.147.0/24 maxlen: 24
45.133.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:ef:e6:d8:99:bb:3e:02:58:04:ba:f6:71:2a:ea:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: Oct 14 16:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=139918150c8a73e6a9ed9cdad8e77dc53245ad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:ed:b4:31:10:b2:b8:74:fa:be:c8:67:92:
96:32:98:6a:e6:59:ba:02:98:53:d8:c2:22:1a:30:
da:51:96:68:10:db:d1:4c:cd:6b:ae:04:27:d8:e0:
d2:b0:4d:9f:29:aa:d1:04:89:f9:1b:7a:04:32:7a:
de:30:93:f6:88:69:53:7e:22:4b:1a:85:68:48:ac:
8a:d1:57:6e:35:8c:3a:c3:91:de:16:c9:67:7a:75:
e6:e8:66:05:52:27:30:81:ad:83:d7:f2:93:10:14:
bf:5c:4b:7f:47:5a:d8:5d:a3:e8:e6:cb:3b:d5:0e:
a6:37:ab:1d:6b:c4:91:42:e2:91:3b:d6:af:57:48:
a0:a9:fb:36:00:37:ae:0e:4a:90:de:f5:35:3c:6c:
bd:37:ab:11:d6:2f:0d:dd:31:89:92:87:be:10:85:
6d:36:51:6e:8e:59:a5:0b:81:57:05:d5:68:ad:6e:
19:44:24:6a:d3:b5:8f:fe:3a:ae:d7:ff:7d:ef:33:
b8:fb:db:dc:e4:45:cd:cf:52:e9:65:6c:61:37:2b:
ed:00:0e:88:67:25:41:3b:cf:dd:b7:b1:66:f3:a4:
90:d9:40:7e:ca:4a:42:06:3a:ee:e7:16:3a:91:5c:
d9:4d:ff:27:76:6d:f7:49:13:2a:7b:a9:46:ad:08:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:18:15:0C:8A:73:E6:A9:ED:9C:DA:D8:E7:7D:C5:32:45:AD:74
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/E5kYFQyKc-ap7Zza2Od9xTJFrXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.56.0/22
185.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f2:08:a8:3e:74:13:35:fb:b2:32:fb:c4:aa:27:67:35:fc:
3f:8f:9d:77:1f:e2:e4:f2:0e:fa:a9:5f:c1:59:5f:10:82:9e:
78:80:6c:8d:4c:f0:2f:3f:a3:9e:65:f7:a4:b8:81:8e:ef:f0:
66:e5:e7:85:1a:7c:22:7d:77:1c:2d:a9:9f:e9:c3:92:bd:2e:
ac:89:d7:99:21:63:ec:64:d6:6e:72:f8:5e:88:2a:b8:a6:d3:
7b:37:9a:7f:b0:ed:ae:99:6a:b6:60:ab:c6:6a:71:79:82:89:
13:a8:50:0f:a6:ae:f1:17:4e:15:62:f9:5c:89:57:79:07:27:
52:e9:ed:d0:6f:99:e3:3a:6e:35:d4:35:98:1e:ec:fe:78:dc:
c4:fc:ff:27:2e:c4:79:04:90:48:16:52:67:ff:5a:af:f0:0f:
57:5d:b9:ed:8f:01:63:a8:d2:b9:75:e6:f4:1d:c7:05:4f:69:
ce:30:ec:ed:d7:44:d4:e4:32:5f:d4:33:9b:ec:5d:9b:0e:9d:
ae:1e:62:c2:6c:61:fa:c6:b8:56:c6:6b:c8:7d:db:1f:83:67:
45:5c:20:bc:49:d6:1a:cf:bb:a2:67:1e:cf:bd:fb:5b:9f:7d:
a1:a1:35:55:03:12:f8:85:68:4d:9d:f6:95:82:89:4e:eb:ab:
71:37:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:14 2024 by rpki-client on console-fra.rpki-client.org