Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/5yqCmV172uM7q2PyqVKSS2nuylc.roa
File: 5yqCmV172uM7q2PyqVKSS2nuylc.roa (raw, json)
Hash identifier: 1furgDSw7OnRg5d6Y/HcIkRZxOB+gWTF3W7663LwoD4=
Subject key identifier: E7:2A:82:99:5D:7B:DA:E3:3B:AB:63:F2:A9:52:92:4B:69:EE:CA:57
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7B32332647DD89A2E04CA03A2314
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/5yqCmV172uM7q2PyqVKSS2nuylc.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200964
IP address blocks: 193.226.197.0/24 maxlen: 24
193.226.235.0/24 maxlen: 24
195.184.5.0/24 maxlen: 24
195.184.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7b:32:33:26:47:dd:89:a2:e0:4c:a0:3a:23:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e72a82995d7bdae33bab63f2a952924b69eeca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:97:86:c1:80:79:c7:d5:d2:4e:3e:0f:28:
36:88:54:84:84:ed:39:83:5d:88:51:3f:95:31:4a:
dd:e0:15:9d:f7:20:87:a4:6f:71:fb:e6:4f:6a:09:
db:99:e3:0c:5d:05:04:d9:cf:aa:c6:7b:b3:d7:29:
f7:3b:a8:b5:4f:be:bc:95:e1:96:4a:b4:88:90:6b:
1d:f1:5f:ae:26:c4:cf:8e:d8:17:3e:d1:7e:fd:04:
80:af:3e:8d:ab:8f:ad:90:cb:76:43:c6:66:57:ee:
d3:dd:ec:b8:62:c0:b2:6e:9c:50:ef:b4:d4:e2:e8:
c0:1b:08:b9:8c:bb:73:5f:ec:dd:79:21:1f:04:28:
1d:98:51:8d:9f:2c:66:e2:ce:2e:87:11:40:9b:e4:
35:a1:9d:61:26:5e:dc:4b:46:f8:eb:b9:ca:67:ec:
20:77:d8:67:9f:93:e7:d0:56:77:32:fc:4f:1f:82:
ed:82:be:11:85:79:5a:4d:66:f8:0a:29:f5:47:64:
ea:31:b5:a1:81:75:85:b8:ca:15:4a:39:49:ea:c7:
57:95:2a:1d:80:82:31:0a:19:5e:db:53:27:a8:f2:
fd:fb:5b:ca:a6:7a:90:25:33:e9:2f:40:6d:17:e8:
6b:d8:bf:d6:df:42:cf:71:2b:0d:50:69:4f:ec:33:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2A:82:99:5D:7B:DA:E3:3B:AB:63:F2:A9:52:92:4B:69:EE:CA:57
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/5yqCmV172uM7q2PyqVKSS2nuylc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.197.0/24
193.226.235.0/24
195.184.5.0/24
195.184.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ab:65:43:ed:c5:c1:09:ad:cb:2b:93:9b:1f:80:c1:71:4a:
71:1f:35:17:3e:75:ab:ba:77:91:55:48:28:52:ed:9d:00:52:
fa:bb:07:e7:d7:66:12:b6:b3:02:6c:7a:35:2d:af:20:3e:49:
01:c7:4d:43:4b:c9:d3:a7:85:08:90:12:9b:b9:98:c6:83:ff:
9b:80:ce:d0:15:8c:52:13:46:65:8b:af:78:f2:58:45:25:be:
d3:e0:97:f2:4e:8c:19:5d:e7:c0:1e:a5:ff:01:3d:f6:7d:77:
a2:fd:68:62:fb:57:db:11:25:b3:83:e2:90:22:6e:db:37:05:
c8:61:e8:cd:60:b5:81:03:ef:30:6a:51:a1:53:29:38:a8:75:
49:8b:c2:94:32:8e:26:fe:2b:f4:0d:cc:51:e7:38:8d:92:6b:
16:b8:2a:d3:66:93:f3:7b:53:ed:6f:50:ee:2b:a3:e4:69:81:
10:4d:7b:25:d1:4d:eb:6d:f8:8d:96:71:25:46:56:bb:a2:d9:
9f:d5:c3:16:55:74:0d:3b:62:c3:81:27:96:85:c3:91:bd:0b:
39:93:18:a5:d7:a9:6b:84:0a:69:d1:60:1d:c2:d5:d0:71:a1:
17:11:e3:f7:cd:b5:94:54:6f:1f:8d:26:c7:23:55:72:67:7e:
7a:e5:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org