Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/KdXqPmrFIO42qinj9h6J1NPWp44.roa
File: KdXqPmrFIO42qinj9h6J1NPWp44.roa (raw, json)
Hash identifier: eHalMKlAn8GN41mX0h2Qa0fsCo6vjno/QkaeFqTY3rg=
Subject key identifier: 29:D5:EA:3E:6A:C5:20:EE:36:AA:29:E3:F6:1E:89:D4:D3:D6:A7:8E
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01885791FCEE9D69AFEE628AE11DE1B2450D
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/KdXqPmrFIO42qinj9h6J1NPWp44.roa
Signing time: Fri 26 May 2023 10:19:25 +0000
ROA not before: Fri 26 May 2023 10:19:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 5.178.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:91:fc:ee:9d:69:af:ee:62:8a:e1:1d:e1:b2:45:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 26 10:19:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29d5ea3e6ac520ee36aa29e3f61e89d4d3d6a78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:9f:f1:38:6b:01:f4:5c:60:6c:cf:82:71:
d7:70:36:f1:f8:92:7c:83:f6:b5:09:76:d5:b0:a7:
24:e3:f5:20:4f:cd:b9:d7:f6:ba:b2:69:7f:ca:0c:
0a:1d:98:13:34:24:82:ad:c1:ec:81:9a:ae:9e:a0:
2f:3d:ce:18:e6:d6:62:37:8a:62:37:a5:cb:7c:37:
b7:1e:59:c8:0c:a5:3f:cf:75:4e:a5:1c:9b:17:9f:
74:de:0a:38:ac:5e:75:3f:2c:8e:9a:50:d8:50:a3:
7d:55:39:f8:81:56:70:b8:5d:d5:a7:e2:a9:27:95:
63:e4:e5:78:f2:32:71:5a:d7:28:e7:32:38:c2:83:
18:4e:52:93:1e:d0:0e:c1:73:50:f6:df:c0:c7:50:
ba:14:26:d4:02:fe:e3:fc:e1:a2:52:0d:da:3a:4b:
f5:de:5f:04:89:7b:4c:38:d0:c5:35:80:c2:12:58:
25:58:5a:8d:51:21:82:b7:1c:0f:2e:98:25:65:78:
e2:d8:2e:9c:7f:52:04:03:e4:36:4e:f6:34:fa:ef:
fa:15:1a:5b:63:2b:fa:5e:1a:01:1d:d5:08:60:9d:
52:c6:5f:c0:55:17:7e:2e:73:ad:8a:70:8b:c4:a9:
b9:78:b3:af:d8:be:fb:c1:39:52:04:65:3b:e7:2a:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D5:EA:3E:6A:C5:20:EE:36:AA:29:E3:F6:1E:89:D4:D3:D6:A7:8E
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/KdXqPmrFIO42qinj9h6J1NPWp44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.109.0/24
Signature Algorithm: sha256WithRSAEncryption
22:76:59:99:2f:3a:a9:ca:fc:1e:b9:1a:69:6e:b3:67:43:25:
9f:16:16:97:de:b5:ba:7d:ed:dd:ca:45:7f:b2:f8:48:a2:69:
36:2c:12:f6:23:94:b7:2d:3f:0f:56:43:73:1a:8a:c5:1c:e8:
79:15:81:97:d2:3b:ad:0c:35:0c:e1:36:b3:82:bb:11:f1:de:
de:66:03:96:50:5c:3e:14:c2:9e:78:b0:0e:3f:e9:17:35:4f:
53:e8:3c:9b:35:96:66:5e:63:8c:4f:89:70:92:d6:34:26:e5:
db:e2:a1:8f:73:2d:f2:a0:94:ac:1e:e5:0b:ff:5c:35:62:ae:
a1:03:96:37:a8:22:80:87:a2:2e:53:74:e1:2b:7a:ff:c0:6f:
a7:87:b8:56:ad:e2:14:c3:a0:07:e4:14:a4:95:5a:da:91:17:
78:be:8b:d8:9a:83:34:38:04:4d:77:31:b9:f1:d0:27:59:58:
33:a3:dd:30:a8:53:cb:1d:ba:53:bd:34:ed:e3:15:ec:9f:77:
ee:51:e8:62:81:51:be:3a:78:16:27:f0:03:b6:a9:e7:3a:2a:
5c:41:54:9a:a1:25:54:21:c8:8d:8f:1b:c0:96:2c:79:84:0c:
de:84:e0:c7:ea:b8:0c:5c:c1:57:63:6f:dd:b0:01:a5:70:ae:
12:c6:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:44 2023 by rpki-client on console-fra.rpki-client.org