Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/0eWxBB7mtt9RuafBzm9dMmYwvKo.roa
File: 0eWxBB7mtt9RuafBzm9dMmYwvKo.roa (raw, json)
Hash identifier: EdC4+BOJ2RkWilu9uYdV6e7cr36Z2eW6MyyR0B77dpk=
Subject key identifier: D1:E5:B1:04:1E:E6:B6:DF:51:B9:A7:C1:CE:6F:5D:32:66:30:BC:AA
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018BC0B03DA6551CDEDBF8DF2C849D02DE86
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/0eWxBB7mtt9RuafBzm9dMmYwvKo.roa
Signing time: Sat 11 Nov 2023 23:20:57 +0000
ROA not before: Sat 11 Nov 2023 23:20:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 5.144.183.0/24 maxlen: 24
5.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:b0:3d:a6:55:1c:de:db:f8:df:2c:84:9d:02:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 11 23:20:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e5b1041ee6b6df51b9a7c1ce6f5d326630bcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:61:f2:9e:96:a7:5f:3d:21:69:b2:6b:bc:
49:51:b7:dc:e9:be:a1:2e:b6:ba:a5:06:46:0e:fa:
59:4d:16:ac:8e:27:d7:3c:32:e6:4d:6f:56:1d:94:
c2:11:2d:35:c2:84:63:59:18:5d:f9:43:d6:3a:d7:
d5:3d:b5:38:3c:9e:a3:ab:a7:4a:7f:2b:7d:1c:3a:
98:d3:6d:fe:37:f8:fc:3c:07:a5:d5:28:fd:02:75:
a7:fe:4a:29:c2:a1:24:9e:72:39:b2:3e:20:c8:2d:
09:0a:51:3b:8f:c1:c9:53:b8:25:d9:48:49:73:44:
c8:af:90:90:ec:df:71:2a:81:6d:de:d2:27:51:19:
05:bf:3c:99:c9:7e:0e:c1:bb:d5:d9:53:e8:a0:a1:
16:20:1a:55:35:30:49:e2:7c:9f:44:c3:54:94:d2:
38:cd:7a:16:ff:f5:ba:3a:3a:21:73:da:8f:7b:b2:
8d:96:74:11:a4:a1:4d:45:ad:82:62:7a:3c:c1:5a:
24:c7:45:b1:5c:85:11:27:68:c4:ea:ed:a7:a4:0b:
26:4f:65:9d:fe:ea:da:38:98:86:5f:6a:b8:2f:c2:
b6:dd:fa:a3:b0:92:d5:b4:5f:1d:64:c7:d1:fd:9a:
13:da:8c:39:97:c6:ab:13:0f:b4:0f:c6:95:c2:ea:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:B1:04:1E:E6:B6:DF:51:B9:A7:C1:CE:6F:5D:32:66:30:BC:AA
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/0eWxBB7mtt9RuafBzm9dMmYwvKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.183.0/24
5.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:1d:1e:fe:60:5f:ba:71:25:4c:a3:ec:87:de:b7:bc:7c:49:
44:f8:78:c7:d8:43:97:71:3e:06:49:44:e4:bb:55:e9:24:3b:
28:a3:aa:7a:46:48:ee:41:82:17:f1:8f:32:98:28:b5:4f:49:
ae:ea:32:f4:b6:56:fb:54:36:f0:7a:ea:41:a9:b8:54:30:19:
4e:ed:49:1e:7b:6b:6c:ad:50:2c:ce:47:ce:42:b5:00:7d:52:
4b:02:97:53:6d:a6:80:30:20:d0:8f:26:61:0e:23:d7:74:5c:
dc:6f:d2:fa:65:38:c4:65:ce:a5:9f:01:e9:bf:02:bc:8e:a9:
82:37:67:46:41:1c:19:09:70:5b:ee:19:14:d6:2a:08:59:12:
02:9b:a6:d8:e9:a1:3b:a3:ef:d4:e7:32:20:96:21:8d:62:0f:
cf:70:a1:f4:bb:fc:41:ae:64:e8:79:52:17:d5:10:63:dd:a6:
75:1e:b7:ee:7e:db:82:2d:a8:71:91:2c:9c:b2:de:da:be:9f:
e5:f3:81:a6:64:8b:24:be:b5:2b:c3:1a:a0:8e:82:6d:a5:75:
d9:48:91:3c:ac:35:da:61:59:e1:76:e6:ff:9c:2b:a8:67:65:
ed:4a:3f:f3:36:03:8e:21:2a:6e:18:53:91:77:8f:d3:88:2d:
41:91:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 15:09:48 2023 by rpki-client on console-ams.rpki-client.org