Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_lEz4uFcheIxev7a2yxYd1imGWo.roa
File: _lEz4uFcheIxev7a2yxYd1imGWo.roa (raw, json)
Hash identifier: 6XXusiudEaqWmrDqSZz1tjesAF3lCBdLYjq5Z5HZhYI=
Subject key identifier: FE:51:33:E2:E1:5C:85:E2:31:7A:FE:DA:DB:2C:58:77:58:A6:19:6A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01912669AB16311E7827287189B15022E8A8
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_lEz4uFcheIxev7a2yxYd1imGWo.roa
Signing time: Tue 06 Aug 2024 06:39:04 +0000
ROA not before: Tue 06 Aug 2024 06:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214965
IP address blocks: 5.178.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 16:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:69:ab:16:31:1e:78:27:28:71:89:b1:50:22:e8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 6 06:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe5133e2e15c85e2317afedadb2c587758a6196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:18:5a:dd:e2:c0:d6:3d:08:fc:e8:70:01:
9c:e2:b2:24:61:67:03:cb:d2:e2:b9:9a:78:06:0d:
3e:83:1e:0e:cc:34:53:5a:1a:e2:d5:76:97:dc:13:
61:87:1d:8f:71:05:08:7f:0a:13:92:b2:8f:e3:e7:
ae:7d:ad:d0:e4:53:bf:c9:fd:69:65:1f:cf:f0:ae:
b6:06:15:79:1b:bf:5a:ef:a7:dd:d9:61:93:af:06:
e2:89:86:28:d7:8b:f0:0e:33:5b:a6:8b:81:ee:cc:
7a:70:4c:9c:fa:1d:dd:55:cb:10:aa:cc:6f:f3:c3:
8d:27:e4:64:25:c4:a1:07:4f:2a:52:9b:d0:24:88:
e4:13:f3:22:c8:80:68:36:e0:01:36:1f:b1:c4:69:
2b:16:63:ec:d2:d2:32:c9:6e:72:7e:d9:82:70:75:
e5:24:99:e0:8e:c0:ee:33:3e:44:e0:ed:0b:4c:b1:
1c:67:9c:05:33:52:60:df:33:1e:f9:40:8f:1e:b1:
3e:ce:49:01:5a:c7:a0:25:ae:ae:d2:f4:44:a2:44:
f4:73:d6:85:72:c6:f2:05:e6:55:d4:66:b0:22:bd:
1c:14:96:e4:ca:8d:4b:3f:7b:81:1c:20:8d:ed:40:
a1:f2:83:01:bb:8e:bd:2a:bc:97:3f:ff:21:b3:ef:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:33:E2:E1:5C:85:E2:31:7A:FE:DA:DB:2C:58:77:58:A6:19:6A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_lEz4uFcheIxev7a2yxYd1imGWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.98.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ae:5a:32:c0:fd:67:d5:27:69:ca:e2:08:0c:eb:56:26:58:
8b:98:91:4a:b2:a6:7c:4b:ba:77:74:91:55:38:15:36:17:e7:
2b:d9:ac:18:7b:d6:a4:45:9b:21:60:9b:49:11:8d:4c:92:aa:
b1:6a:dc:96:c9:41:61:ae:09:89:79:6e:ab:ca:07:a6:73:b1:
12:b0:cf:b8:a8:9b:c5:6a:32:2c:c3:2e:a3:c3:87:db:d2:16:
bf:4f:bd:44:b2:13:a9:3c:3d:eb:f9:ef:2d:75:aa:18:d0:61:
31:a3:19:7c:15:15:ee:03:ae:87:4a:10:6c:01:17:0e:e8:fb:
a5:81:d9:82:01:3a:8d:87:9f:58:db:55:ea:db:42:d2:28:90:
02:a0:fa:48:1e:7b:2a:d8:8c:1b:20:6f:cc:6c:b0:10:49:56:
eb:ef:c6:2c:2c:e0:d0:56:15:fe:9a:a2:61:9a:a3:be:75:24:
64:4f:88:ae:01:f7:9a:22:3c:37:f6:9a:85:78:d4:d4:49:f9:
e4:db:14:1b:26:71:12:07:ed:48:17:f6:ff:c8:97:75:29:69:
7b:bb:ea:99:8e:3b:04:04:b8:6c:b2:ce:94:b8:b3:3b:ee:f0:
49:7f:66:15:b7:fe:13:40:e5:66:e0:94:ec:48:55:7b:d9:8e:
b1:ec:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 18:15:44 2024 by rpki-client on console-fra.rpki-client.org