Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7svF0mpAPSL-jT6xgyVJP2VeCYc.roa
File: 7svF0mpAPSL-jT6xgyVJP2VeCYc.roa (raw, json)
Hash identifier: ZeNRl7m1LdnK9kiRw2DQkjwn6kiIj/u8YDBazijnJrE=
Subject key identifier: EE:CB:C5:D2:6A:40:3D:22:FE:8D:3E:B1:83:25:49:3F:65:5E:09:87
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01899C51659D4589F04791B8187208D47A79
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7svF0mpAPSL-jT6xgyVJP2VeCYc.roa
Signing time: Fri 28 Jul 2023 11:45:27 +0000
ROA not before: Fri 28 Jul 2023 11:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.178.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:51:65:9d:45:89:f0:47:91:b8:18:72:08:d4:7a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jul 28 11:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eecbc5d26a403d22fe8d3eb18325493f655e0987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:60:e0:02:c7:f0:92:64:e3:7f:b2:d3:77:
b1:5e:62:ac:db:4c:9b:66:3b:76:44:6c:4f:c2:7c:
1a:3e:9b:31:58:9d:d7:c5:38:bc:bd:7e:92:90:c4:
d2:69:d1:02:94:5d:fd:ac:81:ec:ef:48:e8:93:87:
c3:43:20:79:d6:fd:22:be:29:dd:fa:16:6f:bf:ae:
63:2d:49:03:62:93:d7:fc:21:06:1b:79:99:4a:d9:
c0:94:d3:8f:94:41:c4:89:34:10:7e:0a:b3:29:dc:
a4:dd:aa:3c:3a:4f:8f:9c:ce:d7:23:36:23:a7:d8:
e7:3b:f7:ce:6b:10:26:cb:4a:e6:37:a3:5e:b6:18:
4f:58:f6:38:03:fe:c6:54:e2:5f:51:e4:c8:21:62:
ed:bc:3e:39:50:f2:48:4f:3d:04:02:b7:6b:3d:5a:
f7:c8:72:cb:67:15:0b:59:0b:dd:e6:34:42:e0:75:
60:74:24:64:13:e1:24:8d:bf:bf:74:d2:63:00:35:
b2:12:01:08:15:2c:35:d6:5f:d1:b2:9d:97:21:2b:
e0:80:60:b9:41:4a:c4:34:68:b0:82:d8:d2:3d:7d:
df:63:a1:18:f6:90:a3:ed:81:eb:93:25:ec:42:a8:
e0:62:20:8e:3c:83:a4:5b:d0:65:89:7f:9f:85:37:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CB:C5:D2:6A:40:3D:22:FE:8D:3E:B1:83:25:49:3F:65:5E:09:87
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/7svF0mpAPSL-jT6xgyVJP2VeCYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.109.0/24
Signature Algorithm: sha256WithRSAEncryption
db:87:61:4c:11:8f:18:e5:4e:62:cd:84:62:bb:e3:a5:fb:a0:
61:e0:55:51:90:cf:c2:05:c4:a1:88:7b:cf:67:e1:0c:38:35:
45:4c:37:a3:ca:4b:3c:33:ac:86:6c:dc:3b:42:37:8c:96:1a:
da:28:87:4c:0f:41:56:cd:80:7e:70:03:85:f6:2a:9f:60:0c:
02:b2:f5:39:3f:6e:36:21:e2:c7:d2:d3:61:4d:01:76:d7:1f:
44:d1:01:b7:ff:bf:e2:a1:7f:3f:2b:6c:e3:dc:5c:6c:d3:78:
a8:74:03:34:36:40:fb:ee:8f:62:f6:3c:98:4d:0e:72:79:74:
cc:de:7b:d1:93:f9:1c:75:87:fc:48:e1:5b:01:cf:ec:95:f5:
71:4d:5a:e1:2d:44:eb:1e:60:ec:24:f5:b5:98:1b:f8:49:c6:
88:73:8b:44:ae:6a:da:bf:c4:c5:57:60:75:7b:c3:30:5d:bd:
67:d9:97:33:02:b3:1e:41:96:12:e1:80:f4:0b:85:38:43:75:
a9:a8:3e:ee:a6:1c:56:d3:bf:c9:da:81:3d:36:f2:07:27:30:
0e:94:5f:64:52:fa:9a:bf:5f:72:7d:a4:ee:d5:92:54:43:e8:
7b:48:15:f1:0f:3d:6d:5e:8f:8c:82:0a:71:f2:9b:41:c5:3e:
11:da:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org