Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/4XjOMtN-l5Jx4ORfsKRwbXI_UR0.roa
File: 4XjOMtN-l5Jx4ORfsKRwbXI_UR0.roa (raw, json)
Hash identifier: LVBUKFu2iVAyDMfUU59cxlKIgs9E9DHkaGh7rSQu1UE=
Subject key identifier: E1:78:CE:32:D3:7E:97:92:71:E0:E4:5F:B0:A4:70:6D:72:3F:51:1D
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 018B4D64D694EA7F06188041314A96C37963
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/4XjOMtN-l5Jx4ORfsKRwbXI_UR0.roa
Signing time: Fri 20 Oct 2023 14:02:15 +0000
ROA not before: Fri 20 Oct 2023 14:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 5.182.85.0/24 maxlen: 24
5.182.84.0/24 maxlen: 24
77.232.141.0/24 maxlen: 24
77.232.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:64:d6:94:ea:7f:06:18:80:41:31:4a:96:c3:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Oct 20 14:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e178ce32d37e979271e0e45fb0a4706d723f511d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:e5:7e:cd:4d:88:78:1a:dd:35:03:69:99:
ab:a5:bf:12:30:27:0f:73:a0:35:3f:87:f7:51:1e:
d5:16:1a:b0:22:cf:5a:b7:b8:1b:53:bc:93:f3:a5:
aa:0f:22:0e:05:cd:8f:72:08:c3:0f:59:e7:43:ed:
ef:ab:da:7f:65:52:a1:7f:c7:08:20:34:26:36:ce:
4a:f8:6a:67:03:2a:a2:4e:01:2c:a4:1d:65:3a:6c:
bb:01:25:18:57:cc:fb:fe:e1:e9:2c:06:7d:10:5b:
4c:81:46:26:4c:c6:e5:94:a6:4d:3f:51:ed:b2:1c:
47:88:d9:68:c2:9e:ef:b7:fc:6e:86:0a:93:76:09:
b6:91:d7:12:85:e1:79:6b:ad:59:02:d3:f9:d7:36:
63:9b:3d:08:f8:f7:50:b3:ba:ca:93:c2:de:22:ee:
87:e2:34:37:29:18:4d:4d:f8:69:59:87:6a:7c:a1:
7c:f8:60:91:fc:ab:6f:dc:4d:69:87:33:a7:58:b3:
63:b8:b7:2c:be:7c:93:b5:f3:35:1c:a2:0d:ad:9d:
42:c5:a3:5c:16:4b:59:6d:12:77:6c:47:d9:c9:da:
71:90:08:a0:a8:ed:48:35:ca:32:88:79:00:0e:34:
60:40:4b:e5:93:b9:e5:3c:3c:1c:03:30:63:7b:c4:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:CE:32:D3:7E:97:92:71:E0:E4:5F:B0:A4:70:6D:72:3F:51:1D
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/4XjOMtN-l5Jx4ORfsKRwbXI_UR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.84.0/23
77.232.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:1f:57:bd:8d:f3:ba:82:02:b6:ea:f1:ab:94:29:fa:e6:4b:
a1:97:03:2c:63:96:2e:61:fc:63:d3:b8:51:a8:c5:af:59:50:
f0:fa:ef:e4:5f:1f:1c:e3:2b:ab:78:8a:78:97:44:9d:b0:42:
91:25:17:67:e0:68:6b:32:5c:e2:c5:bf:17:c1:d1:93:24:9b:
e7:8c:d4:5c:25:9b:e5:42:cf:b4:dd:25:14:5a:1f:42:9f:fa:
e8:f1:cc:3b:00:d3:4b:ba:59:f6:9a:94:65:23:e8:07:c6:d6:
fe:c8:c3:a7:be:5e:ca:c3:a7:e3:2d:e6:4a:fa:a7:17:8d:7c:
24:46:30:95:5e:b4:76:c6:b7:d7:b7:58:02:fc:4e:e0:80:93:
c9:d7:51:bc:a3:d4:a9:93:83:c2:7e:d1:c0:09:ae:3a:a1:11:
7c:2a:cd:26:f5:70:de:d5:70:e7:ff:3e:8d:29:3d:d2:53:a9:
39:c9:89:f9:ac:65:41:ee:fd:88:24:1e:5f:33:de:d9:cd:f2:
52:50:60:98:a5:f7:c3:cc:1d:9d:c7:3e:08:53:e6:90:f2:3f:
7c:22:e2:73:1b:b6:11:52:77:87:08:51:41:c3:4b:77:33:34:
44:72:16:8a:cc:54:8f:fc:6f:1d:85:d8:6e:20:93:d9:36:dd:
ff:e1:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 12:18:50 2023 by rpki-client on console-fra.rpki-client.org