Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3qWOGwg8fbvqLlbu104ccONKwh0.roa
File: 3qWOGwg8fbvqLlbu104ccONKwh0.roa (raw, json)
Hash identifier: FEvgUZf8lJZTeCx9zLIM9eD3sEO/XzU7fYW5S1r/bTc=
Subject key identifier: DE:A5:8E:1B:08:3C:7D:BB:EA:2E:56:EE:D7:4E:1C:70:E3:4A:C2:1D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E05128D84602DF5D3EC8F2BF11D43
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3qWOGwg8fbvqLlbu104ccONKwh0.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.189.248.0/22 maxlen: 24
5.188.192.0/23 maxlen: 23
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Jan 2024 05:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:05:12:8d:84:60:2d:f5:d3:ec:8f:2b:f1:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dea58e1b083c7dbbea2e56eed74e1c70e34ac21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:69:d2:ad:8c:59:be:32:94:76:70:12:85:a2:
3b:a7:bc:27:54:df:07:d3:b9:f6:85:e5:88:bb:3d:
ed:2e:82:7f:e2:9a:8d:0b:48:de:f0:f1:e8:af:8b:
13:90:2d:64:ac:c9:bf:5d:e6:53:e7:1f:2c:17:87:
c1:2b:d0:55:d8:9e:f9:71:65:9f:8e:e1:d3:a6:b3:
cf:de:21:3f:04:09:8e:90:c6:47:32:9b:1d:86:52:
49:25:9f:f8:ae:96:52:99:bd:6e:e4:39:a1:1b:c8:
de:87:99:f5:a5:2e:f7:ad:a3:cf:e1:90:39:04:19:
8c:98:27:09:f4:72:68:cf:23:e2:8d:78:e1:f1:4c:
e4:1a:f2:16:1a:8e:b8:b2:7d:ef:f9:b5:40:81:2a:
23:b6:0d:7c:5e:a7:87:1b:4b:96:a2:81:5d:1b:2e:
6e:df:ee:d5:b2:6d:9e:9f:52:31:02:da:58:18:f2:
2b:2b:26:ca:5d:d8:af:30:2f:48:d4:ec:e7:6a:3b:
b2:f0:b3:91:30:ef:97:5f:53:54:0d:a5:cf:bf:dc:
06:ee:2a:e5:a8:ea:7a:9d:3b:a7:dc:42:f3:6b:ce:
0b:5b:de:c7:2b:f5:b5:12:e1:b1:b4:a9:98:85:76:
62:74:57:60:a7:ff:e5:cb:dc:64:7a:08:dd:a2:36:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A5:8E:1B:08:3C:7D:BB:EA:2E:56:EE:D7:4E:1C:70:E3:4A:C2:1D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3qWOGwg8fbvqLlbu104ccONKwh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.192.0/22
5.188.204.0/23
5.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d5:a8:19:1f:af:91:69:22:54:06:42:4a:cb:18:bd:b7:0d:
88:31:c7:10:13:9d:eb:11:0d:83:15:d7:bb:0b:39:cf:4f:76:
6c:38:b2:47:3e:34:c2:65:e2:73:bf:63:14:bd:fa:42:b4:22:
9f:7c:85:60:6c:d7:60:52:97:ca:25:56:af:95:43:72:f8:13:
b7:c6:70:70:6e:72:23:48:d1:d4:2b:e4:46:6b:0a:e0:28:63:
94:6c:af:dc:84:38:bc:df:e8:ab:73:27:73:77:2e:27:65:6b:
f4:e5:56:d9:0a:ec:a7:99:4a:ad:ac:15:54:3f:e4:63:30:b8:
04:b7:83:81:81:ed:cb:ce:39:39:25:59:9d:d5:a0:23:fc:10:
cf:89:ec:6e:b2:bf:2d:cc:6b:fa:3b:73:59:a4:3e:4f:1b:00:
ce:af:3d:02:32:ab:61:75:6e:39:7e:a7:1b:1a:0a:db:2d:5a:
14:ee:bc:08:88:65:02:66:1f:f7:e6:21:62:4d:22:89:c1:36:
1a:ee:cb:6e:13:67:d2:8b:e8:a0:0e:c2:96:2f:f4:6b:27:15:
b9:8e:84:c6:06:a9:a0:7e:6f:27:d2:a0:4d:b0:b2:9c:4c:df:
1e:2f:87:14:45:29:06:8b:8c:5d:75:88:3d:c4:12:40:1a:0d:
26:58:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org