Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2J8uxY2Lf3dfBlaGXIx2U37CPnU.roa
File: 2J8uxY2Lf3dfBlaGXIx2U37CPnU.roa (raw, json)
Hash identifier: kAJ2HKcG2C0V2r9IFrwB3M+D+ETnss3UxOWvWiv8vg4=
Subject key identifier: D8:9F:2E:C5:8D:8B:7F:77:5F:06:56:86:5C:8C:76:53:7E:C2:3E:75
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018D0DD41B16441E0786C00F6EDD51071E3E
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2J8uxY2Lf3dfBlaGXIx2U37CPnU.roa
Signing time: Mon 15 Jan 2024 15:53:40 +0000
ROA not before: Mon 15 Jan 2024 15:53:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 5.178.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 11:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:d4:1b:16:44:1e:07:86:c0:0f:6e:dd:51:07:1e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 15 15:53:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d89f2ec58d8b7f775f0656865c8c76537ec23e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:43:be:de:72:04:e9:1a:48:94:43:79:35:
fc:f6:ce:6e:46:9d:53:b8:e8:de:42:20:48:60:30:
9f:15:5c:0a:52:f4:3a:1e:ac:db:bb:35:87:7f:20:
32:4a:00:7b:8a:3e:ab:17:10:99:f6:2c:af:a2:93:
eb:f4:93:d3:60:a9:18:78:d8:48:35:25:4d:21:6f:
0d:3d:56:e8:91:aa:12:7f:70:fe:a0:fd:cc:a2:5f:
64:a6:2c:19:4a:7b:c6:59:84:73:f3:d5:10:21:2a:
fa:e7:8a:23:66:21:a7:70:82:bc:f1:db:72:9a:96:
f6:f3:7d:c8:89:6e:b2:c4:62:30:11:1e:89:e9:79:
46:bb:75:de:5d:07:4a:94:e0:20:67:3c:f2:c1:08:
ca:04:2f:85:a3:a3:e0:ce:af:92:a8:2d:3f:2a:b2:
6d:81:e5:16:ea:84:64:e0:6d:6e:58:d8:3e:36:81:
3d:e6:05:80:c6:0b:78:82:c0:85:10:ee:83:a1:1b:
dd:32:1f:1f:12:bb:9c:e7:66:f0:56:fc:21:36:7d:
fb:0f:4c:12:00:b2:6b:c8:b4:14:70:46:43:8a:6a:
58:8c:0d:48:16:e4:86:6d:06:ab:d0:73:9f:13:01:
b1:20:a3:81:9a:91:b7:81:55:6e:57:c4:1c:5c:8c:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:2E:C5:8D:8B:7F:77:5F:06:56:86:5C:8C:76:53:7E:C2:3E:75
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/2J8uxY2Lf3dfBlaGXIx2U37CPnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.105.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0d:86:61:88:2b:35:b2:c3:79:93:7f:26:5b:c8:61:96:da:
c9:82:49:bd:31:c5:d2:38:38:82:f7:25:9f:2d:23:44:24:e4:
b4:c9:b1:81:ff:de:47:ff:3a:8a:ce:a8:35:43:f5:50:93:16:
44:b2:39:1f:51:95:94:43:c5:fc:58:80:1d:49:96:30:c3:8a:
dd:8f:9a:99:be:53:17:c4:a8:f9:c8:3b:bf:e3:e9:2a:ff:df:
44:33:f5:d5:f4:5e:e8:36:5a:23:7b:9f:33:93:02:44:34:a5:
2e:dd:70:9b:8f:09:10:d7:d6:2f:0e:e7:c6:a6:b1:7e:b2:4e:
e0:37:b0:02:fe:96:8a:2e:e1:92:ae:b9:3d:16:bd:fd:c9:cb:
fa:25:c1:69:95:6f:58:34:d6:a6:ff:da:87:07:fa:86:f7:6d:
d0:3c:4e:e6:e8:ca:46:80:7f:1c:6c:10:40:69:58:68:ee:14:
9d:a9:32:57:b1:04:bc:9a:d7:42:a6:30:4d:c8:b3:98:3f:24:
76:b5:cf:9f:ff:02:2a:58:c6:a2:9c:f5:0e:b4:53:03:9e:0b:
55:b2:2c:5f:5f:db:81:d6:41:cc:3a:9b:8d:e3:7f:4a:4c:cc:
b5:0b:cf:05:86:eb:55:5b:90:c9:63:81:97:67:8a:5c:2f:1e:
cc:30:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 15:50:51 2024 by rpki-client on console-ams.rpki-client.org