Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/4FC7etuSSCvIOB80beccVRv2w8o.roa
File: 4FC7etuSSCvIOB80beccVRv2w8o.roa (raw, json)
Hash identifier: D6kxjuAaU753Y96Nyoz6znFqTRXOIia8F8brLk/qdr8=
Subject key identifier: E0:50:BB:7A:DB:92:48:2B:C8:38:1F:34:6D:E7:1C:55:1B:F6:C3:CA
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 018CC870A9C3862FD12DE4B298559FA7372A
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/4FC7etuSSCvIOB80beccVRv2w8o.roa
Signing time: Tue 02 Jan 2024 04:31:15 +0000
ROA not before: Tue 02 Jan 2024 04:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50902
IP address blocks: 185.253.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 12:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:a9:c3:86:2f:d1:2d:e4:b2:98:55:9f:a7:37:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jan 2 04:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e050bb7adb92482bc8381f346de71c551bf6c3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:5a:b5:1c:a0:a2:b1:b4:0e:08:e4:20:8a:
94:b7:5f:2d:c6:50:c2:af:84:29:a3:4a:b3:dc:53:
ce:bc:19:13:29:a8:6a:8c:fd:a9:30:57:ac:92:f9:
60:35:91:7e:6d:1f:32:75:bc:85:2e:0c:ea:76:d9:
44:b2:23:2b:23:4e:30:b8:c9:36:f8:83:4f:a3:7d:
09:43:30:c0:46:8f:29:11:c8:8b:83:75:0f:40:f8:
8e:a3:37:b1:18:b0:ef:da:04:fb:d8:7a:d5:9a:ef:
4f:ec:bf:c9:06:1a:c7:9a:eb:fb:b4:97:78:4f:04:
cd:2c:19:a7:d6:f8:e7:c1:fb:99:9e:b4:1d:41:e7:
0b:7f:8d:2a:6b:a1:f4:39:32:18:e2:5c:a8:63:66:
a6:82:81:fd:89:4c:50:90:17:5c:50:c2:84:42:cf:
62:80:12:f1:01:0e:e7:69:64:34:3d:9b:a7:bd:09:
97:fb:fb:22:00:ae:ad:c7:7f:82:c3:0c:f0:b1:10:
1b:23:35:a3:fa:b6:15:fd:32:33:c4:31:2f:05:db:
3c:7d:97:2a:46:c0:fb:1c:87:54:e2:b3:e5:f8:a0:
ae:66:fe:91:c7:90:cc:65:ca:db:c7:9b:16:f7:56:
2e:aa:f9:1d:70:b0:d6:c7:4a:1a:c2:28:be:e1:86:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:BB:7A:DB:92:48:2B:C8:38:1F:34:6D:E7:1C:55:1B:F6:C3:CA
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/4FC7etuSSCvIOB80beccVRv2w8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cc:c7:97:a2:d1:21:90:36:2d:b7:a1:91:a1:01:41:3b:10:
b9:f3:6e:f3:24:6d:99:b3:6c:23:a1:25:cb:2b:0f:e0:41:63:
0b:18:c2:52:34:84:57:3e:98:ed:2c:a0:39:43:f0:ee:d4:46:
35:bb:98:d2:08:fa:0b:12:13:c1:88:e0:79:69:a4:2c:f2:23:
51:e5:49:5a:92:7e:2e:0c:a1:c5:51:0f:66:e3:4b:08:1f:d8:
2e:2c:aa:b9:62:4d:0e:f4:60:dd:c5:1c:77:8f:8e:f2:0a:c5:
31:1e:ef:2a:8f:69:de:b9:92:a0:85:12:10:31:0b:ed:cd:32:
1f:c4:81:3b:f3:b2:81:97:c1:f9:43:62:2e:62:8d:3d:13:0b:
78:03:c3:24:12:ed:f4:e4:1c:5e:a4:5a:3b:43:64:64:3c:a3:
58:c8:a0:42:fb:de:20:88:81:a8:8e:74:7b:f1:d8:28:55:2a:
bc:77:c0:d6:f1:1d:50:c3:0c:52:d3:8f:29:bc:11:89:55:42:
60:4a:78:10:2c:81:ea:8d:ae:6a:93:83:33:04:e7:a7:f0:b4:
f0:86:bd:3d:0b:64:6b:ad:d4:a3:c9:f8:de:7e:b4:2f:44:f2:
89:21:5d:a9:9f:14:15:57:cb:ab:f9:99:8d:a8:60:5d:87:a9:
e6:cc:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:51 2024 by rpki-client on console-fra.rpki-client.org