Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8cXzZqnX8Lc7xhEUcVQkCOLacEY.roa
File: 8cXzZqnX8Lc7xhEUcVQkCOLacEY.roa (raw, json)
Hash identifier: Uomuip57s6tBtDL3hMRCyaAxq5X0wk2QgsbZLpjWdLg=
Subject key identifier: F1:C5:F3:66:A9:D7:F0:B7:3B:C6:11:14:71:54:24:08:E2:DA:70:46
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0187B325491C61B32447F0EFD3FE9B85AB76
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8cXzZqnX8Lc7xhEUcVQkCOLacEY.roa
Signing time: Mon 24 Apr 2023 12:02:57 +0000
ROA not before: Mon 24 Apr 2023 12:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205553
IP address blocks: 146.185.234.0/24 maxlen: 24
5.188.9.0/24 maxlen: 24
5.188.63.0/24 maxlen: 24
5.188.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:25:49:1c:61:b3:24:47:f0:ef:d3:fe:9b:85:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 24 12:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1c5f366a9d7f0b73bc6111471542408e2da7046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:be:63:eb:b3:01:79:bc:38:64:78:52:dc:
8a:94:c2:3d:60:ef:38:9d:26:0e:a6:e9:62:8f:77:
1e:73:4f:ca:26:8e:42:e5:b7:42:58:e9:0c:92:46:
7e:d4:3e:40:da:1e:ad:a2:1e:74:fb:68:34:42:e3:
10:fb:5c:80:9f:aa:17:e7:d6:37:90:e9:70:e3:73:
82:d0:35:e7:1d:60:fd:ab:91:fe:a7:4a:f0:03:2e:
96:3d:fc:e0:e5:80:6d:c7:8e:41:47:34:23:7e:eb:
88:0b:f0:10:09:0a:35:a5:70:8c:66:05:85:b8:90:
2b:62:2a:aa:a9:1f:06:12:84:ef:d4:70:b7:e1:82:
7a:08:90:80:d5:8b:62:8d:18:ba:17:bd:a2:c2:16:
b1:92:9f:04:43:1f:b0:4d:45:c8:db:4f:c5:11:de:
ca:2d:dd:3b:a5:5b:0b:be:6f:44:33:9e:41:7c:2a:
85:86:38:89:6a:c6:d0:6e:3e:cd:ac:24:d5:5f:e1:
95:31:bc:87:16:fb:c4:4a:a9:80:98:66:96:45:10:
b9:49:57:f8:0f:88:f8:e5:1e:d3:1d:94:6e:c7:49:
57:3e:8d:56:17:26:1f:23:3f:e2:c2:f1:21:d6:60:
d7:88:1a:db:42:b5:96:12:50:5f:36:df:00:52:d1:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:F3:66:A9:D7:F0:B7:3B:C6:11:14:71:54:24:08:E2:DA:70:46
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/8cXzZqnX8Lc7xhEUcVQkCOLacEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.9.0/24
5.188.63.0/24
5.188.167.0/24
146.185.234.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6a:f2:c1:15:77:75:4b:35:24:b1:a8:f3:2c:ac:3f:cc:2e:
33:8e:68:a4:2b:ae:bb:31:f9:a3:70:ed:eb:ce:1e:fe:f3:83:
fd:ad:5a:95:20:5c:10:90:b9:15:7d:e0:17:94:8d:cc:55:b3:
e4:38:5f:c2:0d:d7:7d:3b:cc:75:25:2b:03:95:4f:d7:93:c2:
eb:e4:ec:3b:97:5f:23:bb:bc:9f:73:5c:c9:57:a4:aa:db:e5:
ed:53:1c:70:52:41:d4:5a:a2:4a:d9:ef:eb:16:6c:33:84:6d:
ce:f1:20:70:6c:4a:dc:14:4c:7e:55:1b:db:f6:58:59:1f:b3:
01:90:af:dc:4a:8a:e7:07:f0:f3:13:f1:1c:8f:26:ad:65:ba:
fe:46:2b:3c:f9:bf:ba:d0:7a:10:f8:5d:5b:08:15:8c:24:4f:
05:cc:23:97:8c:a7:f5:21:86:b0:5d:a7:47:0f:d0:6b:09:f1:
04:4f:4d:93:9f:75:bc:66:1f:d4:5b:52:ce:16:af:c6:43:2d:
43:e2:3b:85:8a:8a:46:77:59:57:fa:f4:ef:c8:da:77:62:3d:
c8:4b:91:84:a6:a8:47:69:1f:a8:31:cd:76:6f:a2:88:89:d0:
b6:1b:46:3e:30:81:ec:d6:ff:a2:fe:2f:9d:05:9f:07:3a:4a:
05:7f:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org