Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-114dd5lTabQ1sbyHwf56-xDwhE.roa
File: 1-114dd5lTabQ1sbyHwf56-xDwhE.roa (raw, json)
Hash identifier: gE3strJ1wD4JXyCOKszfQWEMi1yqTzogYlv+BArrWGE=
Subject key identifier: FB:5D:78:75:DE:65:4D:A6:D0:D6:C6:F2:1F:07:F9:EB:EC:43:C2:11
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018FDC53C1EED72FA4F851C27A3D8C456118
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-114dd5lTabQ1sbyHwf56-xDwhE.roa
Signing time: Mon 03 Jun 2024 04:20:27 +0000
ROA not before: Mon 03 Jun 2024 04:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205378
IP address blocks: 5.188.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 13:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dc:53:c1:ee:d7:2f:a4:f8:51:c2:7a:3d:8c:45:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 3 04:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5d7875de654da6d0d6c6f21f07f9ebec43c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:67:cb:63:ec:f4:17:c3:e0:de:b4:27:cf:
b5:0f:9d:09:58:aa:63:89:61:15:00:86:e9:05:25:
52:3c:27:19:82:1f:c5:85:a8:aa:7a:ce:4c:b8:90:
16:9f:3f:54:74:ee:64:1a:78:55:20:3c:a2:e5:e9:
52:18:e8:3f:e7:b3:80:33:25:a0:f9:fd:85:68:28:
47:21:87:c1:a5:b6:18:ea:c0:4a:26:4c:5a:dc:76:
bd:b7:ce:df:03:1c:28:34:3d:1d:77:3f:bb:3b:1c:
33:7d:79:a7:37:22:44:79:d3:a0:94:c5:bf:02:76:
87:85:ee:bc:a4:88:ff:9a:6b:7d:19:44:5c:84:bd:
66:16:b1:7f:ac:fd:64:15:c1:f9:d8:6d:e3:07:76:
a4:d9:d5:76:6d:19:7d:34:da:01:51:0a:b3:9a:b7:
30:ac:a9:72:bb:d5:56:5d:fc:d7:bb:aa:38:dc:ce:
9a:68:21:f0:64:24:a6:4d:3d:d7:c6:cf:a2:de:ab:
e7:da:17:5c:e4:d0:56:6c:c7:54:5a:09:cd:69:51:
73:f6:a2:25:83:d2:d6:b0:f1:39:7d:d7:39:65:18:
9e:47:88:f8:af:24:d9:42:89:2e:5f:24:83:13:4f:
21:48:78:bb:08:fb:35:08:db:8b:10:19:aa:9e:7c:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:78:75:DE:65:4D:A6:D0:D6:C6:F2:1F:07:F9:EB:EC:43:C2:11
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-114dd5lTabQ1sbyHwf56-xDwhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:55:e9:90:e3:12:e3:1a:81:f1:55:5b:a4:2a:0f:7f:04:9e:
45:e3:15:eb:32:6e:a7:bb:82:95:58:2e:3d:8b:d6:9c:8f:d7:
72:83:50:6f:69:c8:55:64:26:3a:e8:ea:c3:0e:cd:0c:45:54:
ed:48:83:98:13:54:8c:93:61:5b:56:d0:53:f6:f3:23:70:f2:
2b:3d:21:e0:b6:79:80:9d:0c:12:97:8e:bf:7a:bb:28:4f:ce:
bc:7a:bf:75:62:bc:af:2a:79:32:3f:63:3f:64:72:ba:b8:48:
95:bc:95:ce:a7:de:5c:9a:fb:fe:ca:36:ee:1a:4b:af:d9:ff:
6c:c6:19:62:dd:51:d8:de:18:55:79:85:4e:55:45:47:08:45:
5c:f1:db:c1:fe:76:a4:b9:b1:f1:99:ca:9a:91:6b:53:65:b1:
b6:15:14:8c:6d:a4:9d:e2:a8:f5:86:f6:5d:9c:ae:07:b3:72:
4e:f2:d8:66:94:94:83:7e:c7:50:d9:b5:cf:60:b3:96:fd:ba:
87:cb:48:83:57:72:85:ce:11:aa:9b:98:e7:d3:c2:68:af:35:
cd:f9:b0:57:6f:21:d7:df:75:e5:69:24:5a:23:b6:df:8b:24:
da:57:2a:a1:75:79:ac:5a:d4:8e:90:a0:59:62:dd:f2:73:10:
7e:c1:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:28 2024 by rpki-client on console-fra.rpki-client.org