Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Cd8ANLoGQ5JPOh1y2m_w_OUsLWE.roa
File: Cd8ANLoGQ5JPOh1y2m_w_OUsLWE.roa (raw, json)
Hash identifier: qxZ6PlrnQ4nOKMdrVEOWfzTYGmuvQHsatGt3FrhLjks=
Subject key identifier: 09:DF:00:34:BA:06:43:92:4F:3A:1D:72:DA:6F:F0:FC:E5:2C:2D:61
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018991C1D957553BBACC5211475BA62D83A7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Cd8ANLoGQ5JPOh1y2m_w_OUsLWE.roa
Signing time: Wed 26 Jul 2023 10:32:27 +0000
ROA not before: Wed 26 Jul 2023 10:32:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 5.189.248.0/22 maxlen: 22
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 07 Aug 2023 04:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:c1:d9:57:55:3b:ba:cc:52:11:47:5b:a6:2d:83:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jul 26 10:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09df0034ba0643924f3a1d72da6ff0fce52c2d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:fb:53:b2:0b:f0:68:9c:fc:6d:e7:f0:0d:
91:e2:20:33:d4:4f:0e:1e:15:24:96:b7:fc:ae:24:
ef:92:a8:f2:cb:ee:72:13:7b:47:4e:f0:5d:0f:bf:
39:77:d7:95:4e:c8:86:9c:42:16:7d:16:f9:b5:66:
09:49:b9:30:f2:db:7f:e7:47:c1:2d:1b:d2:7c:c0:
d1:a0:a7:9c:1d:52:ee:da:84:cd:7c:78:19:f3:45:
8a:c8:f7:d4:39:7d:a2:71:3a:01:33:90:2d:63:ae:
02:af:9c:40:87:eb:8f:b6:c0:35:88:74:11:10:9b:
ef:4f:38:2d:25:f3:55:99:b2:bf:d0:be:0a:75:62:
e7:41:a4:ff:0a:83:04:f8:b4:f9:27:d4:3a:f5:47:
29:c5:e1:93:55:2a:0f:84:07:ec:13:74:a0:04:a8:
66:d9:07:14:e6:1f:2e:c4:6b:fa:d7:14:2b:a8:9a:
f5:18:c2:39:42:34:c3:e8:73:e1:9f:24:18:88:00:
a5:96:04:ad:29:7e:2f:b6:2e:56:59:96:8a:c0:48:
3f:27:c7:24:9f:34:5d:05:a1:76:7a:e4:37:cb:f7:
8d:25:b3:ea:0b:79:7f:91:0b:cf:8f:89:0d:01:c0:
2d:13:a4:46:5c:ab:d3:1f:ab:03:06:24:85:d2:ef:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DF:00:34:BA:06:43:92:4F:3A:1D:72:DA:6F:F0:FC:E5:2C:2D:61
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Cd8ANLoGQ5JPOh1y2m_w_OUsLWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.194.0/23
5.188.204.0/23
5.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
44:1f:f1:2d:63:10:4c:12:b9:21:6d:af:dd:ca:00:f2:f9:08:
f9:4c:b3:3d:be:9c:19:eb:e9:b5:32:f5:7a:86:71:50:d7:a1:
f4:ab:4c:f2:11:17:8f:ef:10:57:d8:d7:af:fd:8f:2a:bb:05:
38:9c:92:06:4f:8d:d1:9f:92:80:8e:b4:aa:83:77:c8:c3:93:
cc:6a:81:bf:72:6b:ae:87:eb:fe:30:04:5a:06:d7:88:82:f8:
9e:04:76:c3:21:47:c7:1e:b9:81:62:38:8c:b4:56:4f:e8:2c:
4b:ba:d6:20:1a:b5:6a:f0:f9:74:fc:44:82:cc:50:4c:78:6b:
24:c4:f2:23:c0:6e:8f:90:04:d8:56:3b:9c:bc:06:b3:d8:7b:
6c:77:b7:a5:55:88:97:1e:0e:4e:3f:22:a0:3a:e0:ea:bb:00:
e4:01:e6:7f:9e:7c:30:7f:ae:76:e6:e4:48:c1:11:4d:5f:f3:
08:a9:8d:f0:24:fb:34:6a:b9:b8:0d:11:b5:3c:a9:37:7b:77:
fe:3c:d2:a3:1f:3a:36:02:ea:1e:12:de:a7:4a:05:88:c6:76:
37:4f:f6:a5:6a:53:a4:3c:96:cb:c1:cb:4e:68:50:c8:d3:6b:
5a:df:73:6b:70:13:cd:72:f6:25:4a:6a:16:a8:b2:91:6d:de:
c4:9d:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:28 2024 by rpki-client on console-fra.rpki-client.org