Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7FUJ3VfoSuBJXhIMGz4dAWj4OWc.roa
File: 7FUJ3VfoSuBJXhIMGz4dAWj4OWc.roa (raw, json)
Hash identifier: EaHIbO39TID9NL0fOhqvU8af/0Tp0VVsWWktIP0rnDg=
Subject key identifier: EC:55:09:DD:57:E8:4A:E0:49:5E:12:0C:1B:3E:1D:01:68:F8:39:67
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018B072FA126B0CDBAB7AE99A1D4CC28803E
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7FUJ3VfoSuBJXhIMGz4dAWj4OWc.roa
Signing time: Fri 06 Oct 2023 22:50:43 +0000
ROA not before: Fri 06 Oct 2023 22:50:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 5.144.177.0/24 maxlen: 24
5.144.181.0/24 maxlen: 24
5.144.180.0/24 maxlen: 24
5.144.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 09:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:07:2f:a1:26:b0:cd:ba:b7:ae:99:a1:d4:cc:28:80:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Oct 6 22:50:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5509dd57e84ae0495e120c1b3e1d0168f83967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:2f:c2:3c:34:2e:37:2d:ed:18:a3:2d:78:
98:4c:cc:2f:12:fd:3d:4e:8b:1b:b3:db:70:bd:65:
0c:89:c2:1d:e4:ea:61:e0:bd:bb:08:61:4b:38:fd:
8c:bb:dd:1a:e5:6a:89:24:91:26:c2:77:7a:55:f6:
cd:40:78:ec:69:de:d0:61:49:d1:33:af:1c:42:ea:
9f:48:8f:80:6e:92:3c:9c:b6:1e:3e:47:f3:09:40:
71:eb:b6:be:a1:7e:ba:8c:c4:dd:dc:a1:0c:4e:c6:
12:f4:bc:84:f8:eb:11:3f:15:cf:58:4b:78:f1:a2:
bc:2d:b2:f1:86:fc:6d:58:b0:44:87:85:68:a8:5b:
d4:f3:0c:bc:a5:d7:05:ac:c6:5b:b5:b0:bf:0e:34:
72:92:8a:c1:17:fb:0c:75:d6:03:50:25:cc:a8:2e:
bb:39:6f:9f:c1:f3:61:7d:b2:9a:c1:57:1e:9d:a5:
2d:53:73:f8:05:d1:48:fa:9b:04:5d:04:ed:15:35:
d0:d6:5e:c8:23:1e:36:68:02:cb:2d:78:27:a3:f0:
75:a3:f1:28:c4:ae:d5:cf:11:3c:35:af:bb:38:87:
27:76:28:f0:64:6f:0a:26:5a:c3:a7:67:72:89:eb:
29:0a:df:38:dc:f6:cd:18:95:d1:46:9b:0e:95:5c:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:09:DD:57:E8:4A:E0:49:5E:12:0C:1B:3E:1D:01:68:F8:39:67
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7FUJ3VfoSuBJXhIMGz4dAWj4OWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.177.0/24
5.144.180.0-5.144.182.255
Signature Algorithm: sha256WithRSAEncryption
d0:f3:8f:00:dd:e1:66:82:a9:d6:bb:91:d8:a2:12:d1:2e:ae:
d0:61:82:9a:09:bf:0a:d2:07:86:88:ca:a1:04:90:18:71:94:
07:83:d2:c7:93:f8:94:19:33:76:bd:0a:28:a6:e1:52:cc:56:
aa:13:fe:11:bb:ad:97:b4:ab:e9:a6:51:e3:69:01:fc:ea:f6:
43:32:e2:db:31:36:3e:bd:f5:57:5c:e6:f9:c6:3b:6e:bb:73:
4b:23:8e:ee:2a:e1:a9:01:f5:b6:63:a2:4f:6e:f3:7a:b6:39:
ed:6f:fd:6e:f5:a8:0c:61:ea:08:cb:db:86:0c:6f:75:27:ca:
b5:f9:6f:56:b3:30:24:5f:69:9d:18:56:e1:92:b0:df:3b:3a:
13:88:23:98:b3:54:84:62:78:b6:fe:ef:63:5e:eb:98:b1:09:
41:4b:3c:b8:3e:75:a8:6b:2c:00:89:18:db:4a:b7:67:d2:b0:
52:f4:95:5a:fd:6d:74:fc:46:78:44:77:30:d9:5e:45:0f:4e:
29:57:ca:4f:51:67:4c:1e:d6:bd:c5:67:a5:70:87:4c:aa:3d:
e0:a0:ea:90:95:21:84:b7:c3:f7:c2:e0:51:14:80:f3:b6:5d:
22:37:99:e5:31:9e:0d:e6:b1:4a:64:e4:ea:53:7f:93:0d:a5:
a6:c6:ba:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:14 2024 by rpki-client on console-ams.rpki-client.org