Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/VQVlYer5i18Rg5uKoCjG4tyMXcM.roa
File: VQVlYer5i18Rg5uKoCjG4tyMXcM.roa (raw, json)
Hash identifier: 5JmBXNJAPfFvSc2168ZGcZxGyWB/g7v9hsoDO0pgKoU=
Subject key identifier: 55:05:65:61:EA:F9:8B:5F:11:83:9B:8A:A0:28:C6:E2:DC:8C:5D:C3
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019209D68D9CE58DE2D5468E6FB9A30C7B2C
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/VQVlYer5i18Rg5uKoCjG4tyMXcM.roa
Signing time: Thu 19 Sep 2024 10:31:48 +0000
ROA not before: Thu 19 Sep 2024 10:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 185.5.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 21:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:d6:8d:9c:e5:8d:e2:d5:46:8e:6f:b9:a3:0c:7b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Sep 19 10:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55056561eaf98b5f11839b8aa028c6e2dc8c5dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:58:c3:e7:f2:1a:8c:e6:c7:1e:3a:58:0e:
9c:d3:00:d9:a5:5f:5d:2e:ee:67:44:0d:19:48:52:
17:b9:b6:2c:44:3f:81:14:93:51:07:71:10:66:f3:
d0:58:54:6a:2b:2b:30:2b:29:d5:26:da:dc:33:47:
2e:02:06:82:27:1e:f7:7f:e4:a2:4d:a0:db:9b:34:
62:d2:3f:93:4b:e1:9a:31:f8:6e:90:15:db:38:af:
27:7f:ed:a7:ba:a5:e0:70:bb:73:45:38:75:4f:17:
e0:99:10:e3:40:bb:97:0e:81:79:e3:6e:74:f2:0b:
df:a8:a3:38:fe:59:d6:15:85:3d:22:5c:f1:62:d5:
c4:36:d8:00:b2:e2:a7:d9:9d:32:d5:e1:ae:2c:9e:
5b:52:8b:05:b9:d6:a2:a8:60:11:30:82:f2:5a:6c:
ac:ae:c4:43:94:c6:b7:91:2a:65:47:37:15:af:41:
2c:d2:97:66:55:d3:d7:81:a1:3e:65:43:48:44:04:
95:6b:22:9b:86:92:33:a5:c8:3f:d9:6b:a4:ca:d3:
61:9d:8a:3a:79:05:e7:fc:1e:ca:1d:5a:3f:6b:55:
f2:43:83:49:55:84:e1:d7:ff:82:30:ec:94:ea:4e:
61:42:56:38:21:89:ca:b6:ae:56:e2:6c:3b:48:c6:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:65:61:EA:F9:8B:5F:11:83:9B:8A:A0:28:C6:E2:DC:8C:5D:C3
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/VQVlYer5i18Rg5uKoCjG4tyMXcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b5:18:f3:5a:98:e1:33:20:cd:c3:9e:ce:72:e8:ef:09:89:
6d:fe:d1:9e:a1:c8:d4:26:98:d2:5c:bf:59:c5:e8:e2:83:5c:
fa:bc:a6:f5:5a:b6:0d:ec:26:11:86:a5:b1:2b:c2:ae:b7:a6:
32:d2:f7:5d:8c:b6:d3:d4:f8:fe:e5:c1:fd:d8:19:4b:c8:b5:
6a:29:7b:f0:b6:62:29:92:13:f5:e7:01:14:0a:d1:c0:f4:48:
c3:60:bf:92:d6:58:e1:df:cd:aa:4c:1a:77:05:85:e2:8a:e0:
7c:e9:4b:fc:3a:ad:e9:63:9a:9e:b4:c9:8f:15:c0:6d:6c:61:
26:84:d8:08:7f:b2:d4:27:cd:66:a0:e2:dc:5b:e5:81:64:7b:
39:b8:f5:8e:ca:5b:71:4a:0f:65:4d:c6:ac:7c:a4:df:0d:ed:
fb:8e:f2:62:03:f8:dc:42:60:6d:d0:71:fa:10:64:c1:f6:0a:
09:7a:e6:8c:80:90:cd:42:3d:81:03:fd:02:ac:a8:5f:b0:4f:
16:7f:98:fd:66:7c:bf:7f:c7:47:12:18:78:85:71:1d:0a:36:
dd:79:5d:2e:a8:01:7f:9b:1e:37:5e:f2:e5:b5:0c:f1:3f:a4:
ce:d0:f9:1b:b0:11:1f:df:e9:a9:61:c2:29:0d:18:a8:f1:02:
51:6e:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 23:01:46 2024 by rpki-client on console-fra.rpki-client.org