Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/L5O1yxoD9gbMdHZyHFsz_Jf4Zwo.roa
File: L5O1yxoD9gbMdHZyHFsz_Jf4Zwo.roa (raw, json)
Hash identifier: BOkQC97xdZiBNl9TSmdLgdtuTcxHAtsMF+2MrOBRT6E=
Subject key identifier: 2F:93:B5:CB:1A:03:F6:06:CC:74:76:72:1C:5B:33:FC:97:F8:67:0A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018859B83601BAD46DDFDBB9D4B162B74ADA
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/L5O1yxoD9gbMdHZyHFsz_Jf4Zwo.roa
Signing time: Fri 26 May 2023 20:20:24 +0000
ROA not before: Fri 26 May 2023 20:20:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 185.5.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:b8:36:01:ba:d4:6d:df:db:b9:d4:b1:62:b7:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 26 20:20:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f93b5cb1a03f606cc7476721c5b33fc97f8670a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ba:a8:d6:83:d4:ee:7a:f4:0d:4d:30:17:72:
5c:c0:3d:9c:a2:20:fb:4a:b4:22:a9:25:ac:d0:17:
1f:1e:db:51:d2:7b:27:45:4c:b2:de:37:9c:7d:4e:
9f:44:db:84:b4:b5:28:d1:a6:9b:66:8d:cc:3e:5a:
5f:de:0d:36:d1:82:ae:bf:86:d7:41:3e:6b:de:af:
bb:02:42:cf:2c:2f:6f:36:a3:2d:89:ef:47:b9:df:
c8:ea:3c:7d:55:97:21:09:e4:da:04:50:d1:1e:af:
1d:dc:4f:a7:63:f1:71:5a:47:e9:45:9f:47:b3:3e:
6e:e3:3c:2a:0d:0c:63:6b:c2:3b:f2:99:82:53:d3:
03:43:1e:dc:87:f3:5e:88:f0:a3:2b:19:a3:2b:15:
25:fe:f4:94:ea:ad:1f:57:58:b9:75:2b:02:24:10:
d5:a9:5b:58:96:08:c3:8e:97:87:f9:75:c9:7f:fc:
4d:d2:c2:13:b1:07:d8:73:bd:d7:a1:8f:ec:d5:d0:
44:ed:2e:af:db:a2:88:f9:0e:cd:4c:b6:f4:07:a0:
aa:d6:27:3e:82:9e:44:a5:06:71:af:91:6a:53:16:
7f:ed:67:98:c6:54:d4:dd:48:03:11:c5:5a:50:6d:
cf:00:99:69:44:4b:ab:a5:f2:71:4f:c7:c6:ba:6a:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:B5:CB:1A:03:F6:06:CC:74:76:72:1C:5B:33:FC:97:F8:67:0A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/L5O1yxoD9gbMdHZyHFsz_Jf4Zwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.39.0/24
Signature Algorithm: sha256WithRSAEncryption
99:11:67:0d:6a:09:3e:58:42:fc:1d:65:37:57:7a:bf:c0:a8:
ae:25:0a:2d:81:08:4f:81:32:86:df:36:8e:1c:95:4b:8c:81:
85:71:8e:e6:2f:5a:58:03:dd:72:76:86:fd:64:f4:c7:5a:cb:
b2:7e:43:c3:fb:1b:36:b7:7a:e3:27:77:d4:b4:ed:0f:55:e2:
eb:05:fd:e1:99:52:48:d6:12:6f:61:8c:e1:78:48:b9:70:e4:
dc:1b:fc:d8:93:48:d8:5f:97:a8:75:f6:05:c7:6c:48:37:71:
e7:35:de:e2:4a:aa:90:e9:73:68:cb:90:63:33:72:f0:00:2e:
1e:44:d2:bb:8e:2a:e9:7a:7c:eb:b5:60:11:c4:4d:81:f4:e2:
3d:fe:78:30:c5:70:e6:7d:fd:d7:24:f5:50:2f:22:50:40:42:
b3:1d:47:d5:b3:d1:4d:70:06:90:9d:10:f8:70:01:f9:3d:d6:
0c:69:02:1a:9f:5a:96:cf:b4:81:24:2d:83:7f:f4:56:85:d9:
3d:31:4a:c4:5c:85:11:f3:35:dc:7d:14:57:54:e3:f8:3a:09:
dd:00:32:9e:b6:62:23:a9:4c:91:86:06:26:8e:3e:35:b1:85:
4f:88:dc:3a:a6:b7:70:d4:78:1c:ff:b4:67:e0:bf:5c:45:4f:
b3:40:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org