Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_1YvIlineNTV-lMdveQdG_K2P_w.roa
File: _1YvIlineNTV-lMdveQdG_K2P_w.roa (raw, json)
Hash identifier: zE10zHPKXncPh6uVEw5wgMLKHdU5bzLaJ4AfhNet1ko=
Subject key identifier: FF:56:2F:22:58:A7:78:D4:D5:FA:53:1D:BD:E4:1D:1B:F2:B6:3F:FC
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CD301A0B18BD3AD89D8BF6B5A95C931A6
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_1YvIlineNTV-lMdveQdG_K2P_w.roa
Signing time: Thu 04 Jan 2024 05:45:48 +0000
ROA not before: Thu 04 Jan 2024 05:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 5.189.248.0/22 maxlen: 24
5.188.192.0/23 maxlen: 24
5.188.194.0/23 maxlen: 23
5.188.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jan 2024 04:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:01:a0:b1:8b:d3:ad:89:d8:bf:6b:5a:95:c9:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 4 05:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff562f2258a778d4d5fa531dbde41d1bf2b63ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:68:da:9d:64:0a:c9:a4:58:66:33:3e:3b:
6e:cd:ee:4c:95:59:b4:19:de:04:81:bd:55:8d:b5:
a7:09:a3:3a:6a:f8:f2:6a:9c:9b:25:38:82:be:66:
a4:c6:b1:ff:ce:b1:8d:28:95:6a:16:df:88:89:4b:
74:9f:aa:7b:8e:b5:78:8a:63:8b:55:82:89:0b:63:
74:e2:57:5f:09:e1:72:8b:7b:23:16:a1:92:15:f3:
c5:4e:f1:12:c6:06:a6:97:16:05:32:85:51:c7:5c:
22:da:93:41:a2:32:13:93:23:64:b1:fe:b7:a6:15:
93:32:9e:b1:47:a6:d1:37:47:b6:57:22:12:e7:76:
48:4c:cd:76:e1:1e:0f:34:75:23:9b:69:5e:3e:a6:
39:26:94:5e:a7:79:b1:cc:8b:5e:26:88:3e:12:5e:
55:4d:35:9c:16:85:3c:2d:4c:bd:a6:d6:bf:fd:1e:
17:3f:2c:8f:34:e3:90:f9:f5:c6:11:d9:82:d3:94:
8d:db:8f:76:6a:17:8a:d8:c4:cc:ba:40:c8:6b:cb:
97:80:76:77:58:5a:90:37:ed:8a:1e:a1:04:a2:01:
4a:62:b4:05:09:f1:17:f6:6b:4f:2a:dc:35:e8:7b:
ae:ae:45:2b:28:96:4d:28:4a:ee:53:e4:b3:9e:c6:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:2F:22:58:A7:78:D4:D5:FA:53:1D:BD:E4:1D:1B:F2:B6:3F:FC
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_1YvIlineNTV-lMdveQdG_K2P_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.192.0/22
5.188.204.0/23
5.189.248.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:21:6f:01:68:02:a8:9a:d4:ce:c5:15:02:d2:7c:25:cd:87:
97:7a:5c:a5:df:18:cc:57:ca:3f:c8:cb:0d:c6:ad:a2:55:68:
06:38:00:36:67:60:6c:e4:5e:08:ee:e1:19:65:61:6f:b9:8b:
fe:6a:65:70:23:05:ec:81:a9:c7:df:c2:14:ff:96:7e:4f:9a:
b2:66:ef:55:4b:ec:34:d4:72:5a:71:88:3f:02:d2:d3:18:b3:
1c:48:79:db:55:cb:fe:5c:6c:55:3e:9f:77:0a:4c:53:22:81:
65:86:84:52:4a:47:72:49:20:9a:ea:74:76:e7:dc:55:14:fb:
8e:4e:1c:2d:2f:78:d7:3b:ae:c6:4e:4e:2a:e0:94:28:54:1f:
de:e7:63:fa:35:20:52:4b:59:70:91:25:c0:8d:b2:55:a8:a5:
b8:2f:9f:cb:a8:2a:0e:46:45:97:fe:34:e3:8a:95:37:0e:19:
56:a3:20:4c:8e:88:1a:5b:2a:be:bf:3b:7d:24:c7:c8:b3:f2:
98:22:ab:f6:37:c8:64:90:ae:27:23:3d:5b:89:74:46:5b:75:
11:aa:01:d0:34:1f:1a:40:b1:2b:df:c4:43:3f:9b:bb:70:37:
dc:82:36:ed:9d:6f:47:ca:61:5e:7f:fc:f4:26:b8:e5:b5:8a:
a1:81:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 06:12:15 2024 by rpki-client on console-ams.rpki-client.org