Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/5uDfC8p8o_oUF4WOKEL5OTNYHXI.roa
File: 5uDfC8p8o_oUF4WOKEL5OTNYHXI.roa (raw, json)
Hash identifier: GdNFwF0Sp6mjwKnlx2Hilvt6sBBZouWSHUlN5Q9R1uc=
Subject key identifier: E6:E0:DF:0B:CA:7C:A3:FA:14:17:85:8E:28:42:F9:39:33:58:1D:72
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0187FF4E87FF48A7A0EDDEB02FEDD73F6849
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/5uDfC8p8o_oUF4WOKEL5OTNYHXI.roa
Signing time: Tue 09 May 2023 06:59:09 +0000
ROA not before: Tue 09 May 2023 06:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 217.117.65.0/24 maxlen: 24
217.117.71.0/24 maxlen: 24
217.117.76.0/24 maxlen: 24
87.238.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:4e:87:ff:48:a7:a0:ed:de:b0:2f:ed:d7:3f:68:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: May 9 06:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6e0df0bca7ca3fa1417858e2842f93933581d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:de:ce:5d:a1:87:64:bd:6d:f2:9a:45:92:
2c:07:00:11:86:5c:40:59:71:2e:7c:3d:a4:45:f5:
17:23:57:16:15:2c:3a:1c:de:14:af:08:b8:99:c3:
2f:e5:41:cb:2d:4c:e1:ac:fe:36:32:79:37:05:13:
e8:95:d6:54:40:2d:73:eb:5e:cf:a8:7f:f2:93:f0:
08:44:52:ad:67:e3:1b:f1:af:f7:96:7c:c1:3b:8a:
b2:ec:77:b8:e0:de:f9:69:4f:54:42:73:d9:c4:c2:
ab:e3:f3:51:f1:87:a1:8c:4c:ec:7c:b1:26:d1:a4:
7b:27:25:3f:d6:e7:e5:e4:63:16:2d:a7:a0:88:70:
30:12:35:4b:d8:f9:3e:ab:e4:19:60:50:7c:03:7a:
eb:78:a3:54:bf:cd:cb:3c:64:8d:fb:a2:ef:47:2e:
8a:e6:a2:4a:f9:dd:bc:76:e4:7f:88:db:ed:04:58:
74:d5:38:eb:2e:db:7f:23:66:34:67:2d:3b:7d:97:
c2:68:fa:ac:8f:92:8a:01:eb:5b:f2:4e:d0:65:73:
cb:35:a8:d0:74:30:3a:1d:18:44:a8:33:c3:46:61:
d5:9a:47:62:b6:6f:4c:dd:0f:10:10:3e:5d:de:a5:
ac:a5:3c:9a:5b:1f:4c:6f:de:5c:ae:fb:a2:0a:99:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:DF:0B:CA:7C:A3:FA:14:17:85:8E:28:42:F9:39:33:58:1D:72
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/5uDfC8p8o_oUF4WOKEL5OTNYHXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.154.0/24
217.117.65.0/24
217.117.71.0/24
217.117.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:53:82:22:39:3f:25:7d:92:80:77:64:90:26:0a:c5:91:c7:
cc:5e:b0:bb:02:cf:52:21:47:27:bd:38:2e:5c:16:11:d0:f1:
13:51:d6:b2:72:d2:2b:19:55:1e:41:a2:53:7b:79:cc:28:df:
08:bf:e2:1f:ff:09:cf:bf:56:a1:76:76:35:67:88:eb:68:60:
66:ff:87:32:c8:eb:21:40:f7:44:5f:9f:60:07:f4:94:fc:ce:
6f:7f:1c:1b:9e:b1:be:5b:3d:66:db:41:cf:12:ea:c1:98:a2:
1f:16:9e:86:b7:8d:5a:5c:f8:e4:38:dd:22:08:ae:53:83:12:
05:f5:c2:57:ae:10:ea:ef:4b:cd:70:0e:3f:d7:21:b6:69:01:
16:6d:60:41:23:9f:1a:5a:5e:bf:27:e4:42:0b:0a:0c:35:e8:
3d:5b:47:9e:46:d5:1a:39:06:8a:3f:04:24:1b:83:cc:32:26:
46:a4:35:ea:5d:93:1a:64:6a:f1:de:cf:63:2d:20:c0:a2:1a:
a7:18:ef:0e:f8:91:37:bf:ea:e8:ed:b1:81:cb:2b:5d:09:28:
53:f1:a0:2e:3c:b6:cc:34:a5:53:31:a3:70:43:3f:ab:b6:dd:
68:20:e9:10:13:2b:bd:f3:6e:51:9b:67:88:46:30:f0:d9:97:
2d:3b:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org