Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/5J9FWQwF72IrAXCAEWXfZWpzisE.roa
File: 5J9FWQwF72IrAXCAEWXfZWpzisE.roa (raw, json)
Hash identifier: 9+SfkECx4nuWjCsqdHxFjxHOl4NXCemRh+pEvk2NZWI=
Subject key identifier: E4:9F:45:59:0C:05:EF:62:2B:01:70:80:11:65:DF:65:6A:73:8A:C1
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01870D242B18CD9E3908C4D51280EE732BF1
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/5J9FWQwF72IrAXCAEWXfZWpzisE.roa
Signing time: Thu 23 Mar 2023 06:24:46 +0000
ROA not before: Thu 23 Mar 2023 06:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.150.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Mar 2023 08:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:24:2b:18:cd:9e:39:08:c4:d5:12:80:ee:73:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Mar 23 06:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e49f45590c05ef622b0170801165df656a738ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:88:6e:81:9f:ae:77:09:e3:4d:2b:38:78:
2a:d7:bb:cc:90:33:21:52:e3:e1:e8:6f:e1:47:fd:
54:14:2e:0b:ee:d8:19:b7:cf:c0:d3:75:24:0b:c1:
34:90:52:89:ad:b0:d2:c7:35:42:7b:4f:ba:92:8d:
cd:b6:a9:3b:5d:91:00:5d:f4:15:25:c2:2a:b4:07:
0d:77:e3:8c:ff:bd:83:1a:09:4d:06:63:0c:d0:59:
05:35:56:9d:6a:8e:b6:01:bc:12:a0:87:07:85:42:
39:bb:fb:af:f6:e0:3b:10:ef:d5:fb:15:8e:95:50:
78:53:3f:7c:b5:4d:c6:32:2e:25:97:6c:a0:74:35:
f6:55:b2:ee:f1:5c:12:70:7e:5a:02:97:5a:07:e1:
65:63:3b:a2:59:de:06:b2:64:71:49:7b:a9:f4:24:
1c:72:3d:07:2b:22:0a:28:67:5e:a5:7d:a4:d8:58:
47:c1:8a:5d:54:d5:fc:60:86:db:52:ec:f7:0e:54:
c9:37:7d:95:a9:17:8b:12:99:aa:98:9d:0d:1e:9a:
55:da:52:c2:2e:c4:39:08:f7:51:6c:49:1a:9b:fe:
80:82:7e:a4:47:4d:d7:a7:f8:46:59:8d:a0:2e:f9:
c5:15:d4:17:5f:04:d6:0b:8b:a8:9c:d1:9a:a3:19:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9F:45:59:0C:05:EF:62:2B:01:70:80:11:65:DF:65:6A:73:8A:C1
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/5J9FWQwF72IrAXCAEWXfZWpzisE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.188.0/22
Signature Algorithm: sha256WithRSAEncryption
14:52:88:dc:dc:14:0c:74:f8:7f:db:30:a9:c3:84:d8:60:dc:
1f:1b:4c:17:a0:9a:22:a0:da:09:33:d0:3d:34:18:e6:6a:26:
84:74:49:62:eb:91:1e:95:b5:ba:d7:00:7a:20:9a:9b:4e:aa:
e1:2f:ce:9d:c9:92:57:b6:87:dd:f9:9d:87:6e:01:87:34:13:
ce:1d:d3:a2:06:db:78:96:11:36:15:4c:d6:54:1a:f6:48:b2:
64:71:24:b8:53:88:ed:1f:83:f6:03:f8:be:34:f1:67:09:f6:
50:63:3c:96:8d:d5:7e:b4:2f:cf:c6:d9:d8:cf:cf:f9:38:7d:
85:7b:b0:9d:77:19:57:1d:f5:56:e2:77:ff:54:cb:34:aa:4a:
bb:e3:e3:64:30:d3:cf:cf:51:4d:99:ad:af:47:17:1a:fb:37:
c0:41:34:2f:c4:97:a5:28:82:07:0e:80:9d:2b:b0:55:1b:c2:
41:05:b1:29:26:6c:e8:ad:4d:55:b9:77:91:e4:cb:29:e1:50:
48:f0:34:2e:81:8a:0c:aa:dd:fb:74:e1:af:b7:d3:7b:cd:6e:
77:70:d7:e6:5a:be:70:3e:99:97:b0:54:5f:e2:86:dc:28:ff:
d0:81:ab:99:58:91:5b:e9:f0:53:e6:d4:15:6b:d2:d4:45:58:
78:20:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org