Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T5FnEdQwjxmtE41buZlUDvf1pho.roa
File: T5FnEdQwjxmtE41buZlUDvf1pho.roa (raw, json)
Hash identifier: K6aznej1L6SeyaxZYbNQ5RSY9cvX43IQlXimo9udrRg=
Subject key identifier: 4F:91:67:11:D4:30:8F:19:AD:13:8D:5B:B9:99:54:0E:F7:F5:A6:1A
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01875639C3631DD43B8D9C2BF3C517470B3C
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T5FnEdQwjxmtE41buZlUDvf1pho.roa
Signing time: Thu 06 Apr 2023 11:00:38 +0000
ROA not before: Thu 06 Apr 2023 11:00:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200918
IP address blocks: 185.32.182.0/23 maxlen: 23
185.30.160.0/23 maxlen: 23
185.91.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:39:c3:63:1d:d4:3b:8d:9c:2b:f3:c5:17:47:0b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Apr 6 11:00:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f916711d4308f19ad138d5bb999540ef7f5a61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:bd:df:04:56:78:78:68:a1:6f:bb:21:95:
94:f9:69:cf:9e:cb:03:bb:ab:0b:f2:0c:e0:36:b2:
21:01:bb:cb:4f:3f:ac:3f:c0:8c:f5:28:a9:a9:27:
4f:ff:58:0b:87:66:9e:b4:35:55:c7:22:4d:9f:50:
51:d5:ad:09:4a:e0:e2:50:58:ac:74:1e:dc:dd:50:
5a:e0:56:68:93:56:9a:19:a6:19:84:44:e6:db:6d:
06:64:c4:29:cc:ae:1b:bd:ea:1f:e5:77:66:57:7d:
90:5b:99:44:a4:35:8e:e8:0d:1b:be:bc:5a:54:8c:
9f:31:6c:76:6d:c9:02:c5:7c:fa:9c:39:15:d0:81:
5c:d6:48:5e:58:99:e3:03:26:ec:d0:4c:1b:15:94:
0a:26:af:9a:4c:8a:34:7b:d7:25:de:3c:8c:f3:96:
fb:5f:31:47:76:19:b8:d8:12:25:81:50:21:f9:2d:
47:99:c9:dd:98:c0:55:ff:ee:da:76:49:25:45:e6:
25:8f:65:80:7c:85:fe:00:f7:fe:e1:d4:11:30:5c:
e2:d2:ee:50:58:d5:62:28:38:af:9e:8b:ce:9a:f5:
1e:13:27:74:82:34:fd:04:32:6b:9f:8f:b7:ff:ed:
32:8a:3b:69:11:60:51:c9:a0:de:1f:fa:73:64:db:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:67:11:D4:30:8F:19:AD:13:8D:5B:B9:99:54:0E:F7:F5:A6:1A
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T5FnEdQwjxmtE41buZlUDvf1pho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.160.0/23
185.32.182.0/23
185.91.116.0/22
Signature Algorithm: sha256WithRSAEncryption
65:fb:0d:16:10:2b:fb:d3:b4:70:c1:d8:db:d1:f4:1a:68:e2:
97:cf:c5:08:8d:c3:9a:2e:17:b8:81:ae:92:f3:db:b1:b4:c7:
06:f3:cc:25:5b:bf:22:f0:e1:bd:0a:e7:27:fd:02:08:30:af:
41:75:58:81:ca:99:33:0e:a8:b1:71:72:88:03:1d:c5:35:b7:
8e:90:9b:c1:32:1b:b1:d5:b0:f6:cf:29:9a:26:23:3c:c7:96:
e7:9a:39:00:8b:33:8a:22:3c:ad:47:da:b7:6e:8b:55:e6:78:
29:e1:ce:20:e5:99:00:96:52:4f:bc:52:d4:e5:fc:50:ad:b7:
64:a4:75:ea:a1:46:5a:10:f3:b9:cb:24:f7:30:08:82:ae:75:
65:2d:38:55:7f:cb:66:4e:84:1f:93:e5:9f:18:a7:4b:41:92:
48:55:84:94:e2:5e:95:ce:8f:2d:85:1f:b7:c8:78:36:25:d3:
9f:cb:75:b3:32:5f:b4:73:d6:54:b7:3b:cc:77:73:b0:3b:37:
25:9e:22:ec:14:a8:83:8c:5d:68:99:0f:d5:c8:63:8a:4a:b8:
f7:8e:8d:e4:f5:df:0f:69:60:5d:bd:9b:f3:78:a9:a2:27:98:
9f:39:cc:d6:fc:ad:ef:ce:03:a3:af:72:3f:74:72:6e:8a:cf:
6e:1d:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org