Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/d_gxGa62RJSIDfxJO0H3FHI90Zg.roa
File: d_gxGa62RJSIDfxJO0H3FHI90Zg.roa (raw, json)
Hash identifier: 46qfmzzTByCvSc3edNJQIDgCfn0hosPS+J6f4GwAW8s=
Subject key identifier: 77:F8:31:19:AE:B6:44:94:88:0D:FC:49:3B:41:F7:14:72:3D:D1:98
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572470CE9B8AF164C8DD0E50F486A712D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/d_gxGa62RJSIDfxJO0H3FHI90Zg.roa
Signing time: Mon 02 Jan 2023 11:38:57 +0000
ROA not before: Mon 02 Jan 2023 11:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50896
IP address blocks: 5.188.219.0/24 maxlen: 24
37.9.41.0/24 maxlen: 24
37.9.40.0/24 maxlen: 24
146.185.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 11:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:0c:e9:b8:af:16:4c:8d:d0:e5:0f:48:6a:71:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f83119aeb64494880dfc493b41f714723dd198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:5b:d6:61:8c:a2:d3:ac:d0:91:e1:59:52:
90:84:7a:b2:05:4d:58:83:a3:df:a1:1a:1a:b8:89:
85:e0:0d:44:4c:75:3f:4b:0a:ae:0f:6e:89:84:2e:
70:00:8a:79:df:70:11:22:88:58:9d:e0:9a:16:a0:
7f:fd:a0:61:45:23:35:05:e7:69:f1:b4:e0:ef:fd:
2c:59:ee:d3:33:ff:b3:9e:15:19:e2:09:ea:02:0f:
d1:62:51:f0:65:db:2a:d4:8a:8a:5f:17:fd:1b:11:
db:51:d5:42:36:78:cb:26:91:27:3b:83:44:e2:1d:
93:c8:1b:72:4a:f0:08:09:c2:c5:bb:1d:4b:f5:36:
61:20:2c:bc:33:92:ca:33:2d:6d:9d:84:4d:7b:45:
55:2e:05:0b:6a:2e:8e:0a:d7:47:96:df:4d:b9:dc:
1b:85:01:03:4f:ae:6e:e2:2f:c1:0b:6f:05:3f:61:
84:b3:7e:36:29:cd:63:5e:b8:48:60:ac:26:72:e6:
22:19:52:25:b6:65:37:3a:4e:88:15:79:75:6f:23:
5a:1e:84:ce:06:1c:26:c0:83:cb:47:34:7f:e5:79:
1a:0a:fa:25:65:f1:ab:37:a8:f1:1c:49:f3:7d:05:
af:25:81:0e:d3:93:23:59:c3:8f:62:5b:91:f0:d6:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:31:19:AE:B6:44:94:88:0D:FC:49:3B:41:F7:14:72:3D:D1:98
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/d_gxGa62RJSIDfxJO0H3FHI90Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.219.0/24
37.9.40.0/23
146.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
91:df:27:a6:c5:cf:b8:d2:f4:82:13:a9:ab:ce:99:d1:08:90:
db:5b:a9:a6:a1:c0:4b:4f:2e:18:b3:17:8a:34:3d:05:aa:89:
68:42:10:b1:ca:82:38:9e:9b:00:89:46:22:1d:92:54:45:18:
4a:ba:15:d9:39:38:14:25:8e:95:1d:25:1f:2d:cf:ea:05:90:
17:0c:d9:f7:5a:e6:a5:af:e0:0c:38:00:b0:cf:c4:87:49:4c:
a0:5d:31:c1:86:34:94:c8:3e:cb:0f:80:c9:55:50:7b:b2:c5:
c5:40:aa:b5:5c:13:96:99:c5:4e:99:7e:55:1d:67:c0:37:c4:
d1:15:d8:57:dd:1b:4e:b3:2d:9d:c4:16:a8:a7:ec:1c:6e:22:
c1:1c:ca:9c:b6:70:4e:b9:89:af:10:6b:f4:ef:c8:23:af:0f:
0b:a4:be:42:e6:f9:c7:a7:8b:89:23:7a:1b:7b:d3:ef:f9:8d:
e3:0b:5b:b2:7d:d7:c3:8d:98:67:a7:99:74:f5:34:a8:f3:c6:
df:53:01:58:26:53:a3:93:16:c2:f0:de:34:b2:13:a8:7f:77:
db:fc:9a:94:cd:4c:f3:32:40:5e:87:3f:d3:a4:87:c8:56:b1:
37:3d:68:97:b0:7f:f1:ff:3c:17:3a:3f:a4:b0:4f:88:68:47:
7b:7f:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:55 2024 by rpki-client on console-ams.rpki-client.org