Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/HsShdy9iNZTe7QIvCwLukcVdsIA.roa
File: HsShdy9iNZTe7QIvCwLukcVdsIA.roa (raw, json)
Hash identifier: w3qnFrZSOJIWNwv2AtFzDIwRLuH0+SuEOXZGu/CN4b4=
Subject key identifier: 1E:C4:A1:77:2F:62:35:94:DE:ED:02:2F:0B:02:EE:91:C5:5D:B0:80
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0188E9C279F1A83463AD2581A24E0399DBD8
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/HsShdy9iNZTe7QIvCwLukcVdsIA.roa
Signing time: Fri 23 Jun 2023 19:36:56 +0000
ROA not before: Fri 23 Jun 2023 19:36:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.178.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e9:c2:79:f1:a8:34:63:ad:25:81:a2:4e:03:99:db:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jun 23 19:36:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ec4a1772f623594deed022f0b02ee91c55db080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:98:24:d2:09:50:cd:39:12:d6:32:5a:b2:
52:69:c0:87:6f:04:c9:da:85:25:99:93:44:5f:01:
8c:ee:93:99:50:2d:55:0a:ea:9c:52:dc:8a:13:2f:
1a:17:c0:47:5b:06:dd:b1:d5:e0:35:77:f9:a9:73:
35:ce:58:07:04:12:41:e0:f1:3e:91:25:42:79:e4:
88:74:a5:16:36:07:ca:67:45:e5:ce:ca:6f:c3:41:
20:14:2d:25:52:fc:23:4d:f7:a0:b3:0e:6b:5b:f1:
be:39:07:ec:ba:ef:a0:5a:1a:36:20:d7:2c:6c:8a:
84:dc:20:4b:5e:7d:7c:77:3b:2e:82:9d:bc:f2:b3:
a3:df:a3:ac:d5:9c:2c:2a:3e:e4:c1:60:8e:04:c0:
41:ad:c6:d8:94:82:00:13:dd:8e:ab:ad:17:aa:e5:
56:3e:fd:9d:83:fb:e2:aa:85:a7:ce:e0:dd:32:ff:
8a:4b:10:c3:51:58:0f:8c:bb:91:b1:65:43:d9:7a:
d5:fc:37:ea:00:87:e8:cd:4e:ec:bf:5b:00:13:7b:
63:9d:e8:30:cd:3b:98:a2:08:28:ed:f0:c7:b3:67:
3d:81:61:50:bc:e6:4f:39:c0:dd:32:02:b5:59:c9:
5c:ff:01:10:66:c7:f1:34:c0:35:9a:d0:e8:9e:54:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:A1:77:2F:62:35:94:DE:ED:02:2F:0B:02:EE:91:C5:5D:B0:80
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/HsShdy9iNZTe7QIvCwLukcVdsIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.107.0/24
Signature Algorithm: sha256WithRSAEncryption
da:5e:ee:1a:02:25:c3:1b:ef:c4:b0:77:1e:e2:cf:b6:82:f1:
b5:65:81:d6:9a:51:28:08:75:d2:7c:91:07:1b:37:25:6a:20:
24:9a:ad:2c:8c:8a:9b:76:5c:ad:c3:42:a7:54:b4:19:42:b5:
ad:58:3a:1e:c6:5c:d5:ae:06:dc:fa:aa:75:42:14:58:eb:ff:
85:89:36:1d:2f:84:bd:e6:81:3e:60:10:8b:be:d9:1c:63:56:
60:93:31:0d:ec:7e:ad:3f:18:eb:f3:10:97:1f:b4:fe:2e:3d:
0f:c4:1e:b3:fd:21:8c:73:e6:a2:0e:ed:43:a7:27:99:5d:93:
dd:a3:7d:5e:3b:4c:c8:f8:24:e2:a3:07:5e:d7:b6:47:04:78:
ad:5a:76:fb:18:eb:7b:23:f5:54:63:b9:4a:df:bd:e7:7c:5a:
04:af:0f:fd:66:f4:a0:54:b9:c8:c1:ed:92:20:52:2b:c3:8e:
52:01:cb:9a:e6:68:d3:de:c0:b5:ac:ab:8b:fb:bc:73:ed:8e:
c0:46:f9:b7:13:d5:15:4a:4a:5d:6e:f9:45:cb:21:41:d4:7a:
4c:d2:34:23:86:9d:1f:b9:b5:9b:ba:10:86:92:29:60:0d:5f:
23:72:29:ba:9a:b8:43:db:91:a5:8b:c3:e2:bf:7b:7f:d9:5b:
dc:55:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:33 2023 by rpki-client on console-ams.rpki-client.org