Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/36y2x01fcAwYSDZWDyZVMIsqpvU.roa
File: 36y2x01fcAwYSDZWDyZVMIsqpvU.roa (raw, json)
Hash identifier: oFO52Wo5RMe/l+8MsvKjwkWVgf/70JISDYsWhDj/LR4=
Subject key identifier: DF:AC:B6:C7:4D:5F:70:0C:18:48:36:56:0F:26:55:30:8B:2A:A6:F5
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0191942D4D6E48A236FFBC5A465616E9D486
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/36y2x01fcAwYSDZWDyZVMIsqpvU.roa
Signing time: Tue 27 Aug 2024 14:11:22 +0000
ROA not before: Tue 27 Aug 2024 14:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214408
IP address blocks: 5.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 14:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:2d:4d:6e:48:a2:36:ff:bc:5a:46:56:16:e9:d4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 27 14:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfacb6c74d5f700c184836560f2655308b2aa6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:58:bf:ca:47:c5:3a:a8:eb:c3:9b:c0:ad:
a4:68:e2:e6:84:ad:b5:b1:da:4d:71:ca:ce:bd:48:
82:99:39:a6:f9:6c:57:80:e7:58:90:7e:b5:a4:95:
89:63:32:e9:61:52:b2:65:8c:85:c6:8d:ab:26:0a:
a7:51:cf:10:47:ca:5c:1a:91:27:7d:12:bd:d8:8c:
b4:16:c1:65:d0:d4:c3:8e:25:27:cd:e2:52:a5:ca:
3c:72:c0:59:63:d3:99:d2:e1:12:52:6b:64:4c:ab:
42:05:e6:e2:cf:8d:ab:3b:e3:33:ea:8c:a3:7c:b1:
e7:97:a2:91:f6:d7:c6:74:1f:35:4b:4c:5a:0c:c6:
69:32:30:5b:8d:9f:35:75:13:e5:2a:4b:92:08:07:
b2:fb:99:a5:99:eb:dc:a0:dd:69:ee:cf:c4:a3:e0:
d9:05:b4:fa:e3:d6:9c:28:cb:06:75:78:14:0f:d8:
3c:01:76:7e:ff:0e:f3:5d:57:12:ff:39:89:91:26:
ab:b7:6f:8e:06:2a:f9:ff:93:1b:44:86:68:4b:96:
4c:4d:f9:85:c1:2c:6f:af:8b:78:4b:27:50:19:cf:
7a:39:ab:e2:01:eb:f6:8a:ee:23:5c:8a:9e:20:17:
fe:92:46:1c:2f:79:64:3b:0d:44:9c:d3:1c:04:1b:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:B6:C7:4D:5F:70:0C:18:48:36:56:0F:26:55:30:8B:2A:A6:F5
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/36y2x01fcAwYSDZWDyZVMIsqpvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:34:77:16:bd:b5:d6:bd:2c:b6:41:bf:e8:f3:9a:b5:ed:24:
b8:f6:bb:82:eb:20:ba:62:50:9a:a4:5a:61:18:c4:77:5f:56:
b6:3f:f1:4e:63:8b:45:b0:ce:c4:b4:fd:fe:11:6e:b6:4f:f2:
4a:09:d5:c5:b1:e9:39:68:ff:a0:6b:b1:0f:56:38:0c:0b:ea:
c3:66:15:52:bd:69:f8:8d:31:c3:00:aa:5d:19:86:d8:1c:e3:
1e:bd:8f:b4:d2:8d:4c:77:75:cd:b9:4a:e0:cc:0b:c1:37:97:
32:aa:6d:08:fb:ea:8f:06:15:79:df:42:c2:ea:f1:b4:4b:53:
22:50:d0:7b:0f:18:09:1a:d8:51:97:97:5c:35:27:56:9a:08:
c9:60:d8:75:3c:32:ec:ed:66:9f:dc:67:77:0b:e3:82:ac:14:
a6:38:fc:68:5e:73:ac:e9:70:b0:9d:6e:35:88:27:6f:57:5b:
21:45:2f:1f:ac:aa:d2:69:f5:40:ce:89:79:be:89:58:06:bc:
2d:95:6a:30:35:0d:0f:0d:e5:6c:31:7c:b5:ff:c8:11:8f:63:
7e:30:0c:27:53:7f:72:ed:f9:8a:9f:7c:54:2d:09:3c:01:76:
6c:7a:ca:f0:d3:cf:ee:a5:e0:03:ec:3f:01:55:9d:51:d2:12:
59:7b:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 19:03:24 2024 by rpki-client on console-ams.rpki-client.org