Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/5Q22LTA2kL14l-QsHLHCqB7mlDo.roa
File: 5Q22LTA2kL14l-QsHLHCqB7mlDo.roa (raw, json)
Hash identifier: YGHbZE4HM0b0IDkZMXVsHyQWXX3m7NKNF3eqa7VNXqU=
Subject key identifier: E5:0D:B6:2D:30:36:90:BD:78:97:E4:2C:1C:B1:C2:A8:1E:E6:94:3A
Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial: 01856AF7E6FEE7EBAFB229030BF095C2209A
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/5Q22LTA2kL14l-QsHLHCqB7mlDo.roa
Signing time: Sun 01 Jan 2023 01:35:09 +0000
ROA not before: Sun 01 Jan 2023 01:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29384
IP address blocks: 86.36.49.0/24 maxlen: 24
86.36.48.0/24 maxlen: 24
86.36.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f7:e6:fe:e7:eb:af:b2:29:03:0b:f0:95:c2:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Validity
Not Before: Jan 1 01:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e50db62d303690bd7897e42c1cb1c2a81ee6943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ba:db:d0:ce:df:bc:92:1f:7c:0b:33:5e:ea:
2d:bd:63:d2:cd:9b:67:69:e8:30:fd:54:86:35:eb:
c6:c3:62:8d:f4:2c:ed:01:5a:03:49:ba:d6:06:c0:
5b:e5:b0:6c:2f:51:14:28:8d:fa:c7:e3:e4:76:c8:
6a:69:b4:a7:be:76:b3:b0:a1:9e:27:70:b4:5f:f6:
4c:ff:7f:62:cb:1f:c6:e0:06:cb:81:ce:09:08:b5:
08:45:67:31:26:51:89:4a:67:9c:fc:56:47:6b:0f:
fc:5c:a5:84:38:e1:50:db:d0:1c:ac:ae:a4:c2:bc:
fd:42:da:05:b5:d9:d9:e6:93:29:7b:39:c5:52:d9:
40:85:b2:e1:38:d0:6a:7f:c3:3b:37:dc:03:82:73:
7a:16:40:62:fb:de:73:61:09:95:ee:d4:83:d4:c8:
dd:b4:9c:1d:3e:c6:f3:06:66:60:4d:29:5e:4c:58:
3d:15:6b:f4:fe:b7:3b:23:48:12:fc:cd:ee:ab:06:
08:23:c5:61:49:a7:26:f1:b7:dc:b4:3b:c6:31:a5:
f6:82:5b:cb:89:f8:5d:2f:e6:a9:7b:f5:6a:c8:a8:
9c:e4:29:4d:24:d8:5e:6f:40:cf:73:cc:4f:94:ac:
63:28:cc:3b:c8:f6:e6:ad:a4:8c:5b:1f:f2:31:1a:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0D:B6:2D:30:36:90:BD:78:97:E4:2C:1C:B1:C2:A8:1E:E6:94:3A
X509v3 Authority Key Identifier:
keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/5Q22LTA2kL14l-QsHLHCqB7mlDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.36.48.0/23
86.36.104.0/24
Signature Algorithm: sha256WithRSAEncryption
96:26:50:3a:61:fe:72:a0:b2:c0:c7:bd:51:36:c1:ef:cb:e3:
31:ca:e8:01:1f:91:05:15:ae:4c:dd:c8:14:48:4f:92:4e:9c:
6f:1b:ba:ee:75:d7:c4:88:c7:e5:a8:3a:7a:55:2c:cc:1c:cf:
b5:5d:f7:81:19:c4:6c:ad:83:6a:d2:9b:12:36:53:09:c8:e3:
b9:3d:13:f9:27:c8:e9:97:3c:c7:82:2a:11:88:96:ee:05:1d:
5f:db:ed:96:4d:7b:b2:29:66:82:c5:58:8f:cb:53:a0:30:12:
df:00:3d:a2:e4:8d:4d:5d:9d:a9:97:57:34:9e:29:c2:c6:2a:
30:e3:50:e8:e3:16:62:46:2c:41:19:40:f2:4f:47:ea:2d:af:
3b:48:1c:cf:95:3e:5f:ba:4d:57:a2:10:af:9a:f1:9d:8a:5c:
14:6f:6b:47:6b:10:3b:8f:6f:db:10:9b:fb:82:8c:40:42:2f:
7a:62:f0:da:48:99:75:9e:f7:08:3c:d0:17:62:84:85:50:b0:
3a:f2:e0:08:20:31:64:57:e3:17:0f:5f:7f:d8:01:55:ee:99:
07:08:df:65:16:82:e0:05:c5:47:45:d8:bd:39:0e:1c:96:1e:
c8:af:3e:37:05:7a:16:c5:00:fb:8c:a5:5c:0f:7e:8a:fc:10:
c4:de:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:42 2024 by rpki-client on console-fra.rpki-client.org