Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/dAWpeh1vnJ5GYk46--RD8Tf6cuc.roa
File: dAWpeh1vnJ5GYk46--RD8Tf6cuc.roa (raw, json)
Hash identifier: 9bN5UagTKSYhMWGKg4JtgqPcshU5aYUZpJqyG36hx8Q=
Subject key identifier: 74:05:A9:7A:1D:6F:9C:9E:46:62:4E:3A:FB:E4:43:F1:37:FA:72:E7
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018D55BD0F61398365953415B71D2C83561B
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/dAWpeh1vnJ5GYk46--RD8Tf6cuc.roa
Signing time: Mon 29 Jan 2024 15:01:10 +0000
ROA not before: Mon 29 Jan 2024 15:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.178.98.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 18:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:bd:0f:61:39:83:65:95:34:15:b7:1d:2c:83:56:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 29 15:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7405a97a1d6f9c9e46624e3afbe443f137fa72e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:21:0d:eb:9b:3c:8c:de:56:79:36:80:21:
7c:a2:ee:35:6e:89:cf:2d:09:fd:c0:93:40:08:7e:
c0:ec:57:bb:93:48:7d:8d:97:c9:cf:05:fd:0b:e4:
e0:b3:24:d1:db:f2:76:ff:b1:e6:8e:48:dc:55:bc:
2d:bd:d2:3d:3a:81:73:5a:7c:2d:42:4c:2f:26:b5:
42:71:74:41:7a:6f:eb:a2:91:b6:cc:92:c3:39:fd:
29:3b:cb:5a:bc:2d:51:f3:da:e4:02:ce:f1:61:23:
ff:bd:87:07:28:e7:76:cb:70:07:6c:6e:29:00:39:
10:87:9d:93:c5:6f:07:e8:0a:bf:87:52:d0:4b:b5:
e8:ec:79:33:33:77:20:8a:8e:27:ac:d1:d7:cd:3b:
5c:45:41:eb:1b:7f:46:6d:25:26:b7:fb:28:60:0f:
dc:0d:a6:b0:69:34:38:a1:a8:9a:34:a8:83:72:67:
41:1c:af:a8:3f:3d:18:41:b2:53:6c:b0:dd:f7:f5:
40:0a:6b:22:c0:fe:ed:75:3f:9b:73:49:d5:2e:41:
7a:84:25:96:57:c0:3e:b9:4b:3e:70:69:27:0f:da:
9e:a9:7a:70:ec:c6:ad:6a:25:3d:f1:b0:7b:9f:94:
41:96:83:3c:47:f5:18:fa:ab:75:a3:65:bc:8c:9d:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:A9:7A:1D:6F:9C:9E:46:62:4E:3A:FB:E4:43:F1:37:FA:72:E7
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/dAWpeh1vnJ5GYk46--RD8Tf6cuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.98.0/24
5.178.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:28:c3:48:95:d5:d7:6e:56:2e:78:57:d9:2b:25:c6:e1:04:
b8:a8:db:2a:4d:8f:d4:bd:0c:98:74:28:2e:23:61:e5:77:30:
5b:31:06:7a:4c:7a:d8:32:da:21:a8:0b:22:7e:ce:46:18:d3:
20:20:e2:47:57:a3:57:83:42:58:cf:02:31:d7:d5:e5:43:b2:
ff:f7:73:f3:23:c2:b5:02:76:3d:c6:a7:16:5e:af:6f:4e:2a:
87:87:b5:05:f4:56:44:a9:cf:7f:e1:95:0d:fa:3b:b8:3c:bc:
74:88:e3:f7:ff:76:f6:f9:e3:dc:47:3f:c6:bb:8f:b0:b1:e2:
b7:9a:80:62:3d:92:0b:0d:9d:1b:70:63:f0:74:ff:2e:5d:1f:
a4:24:85:3c:0b:bf:a7:90:e3:8c:0e:34:9b:1c:e1:27:40:e2:
a8:25:3e:11:e5:21:57:6e:14:47:24:fd:50:d3:5c:2e:a8:f9:
5e:09:6a:cf:66:a0:f8:5c:ba:69:5e:ce:86:50:f2:7f:92:5b:
3d:83:40:fd:64:2a:97:f0:17:91:89:3c:5e:39:2a:7e:97:80:
df:3c:02:1a:dc:74:29:96:b1:90:f1:5c:80:a3:23:ce:b5:ad:
13:07:8a:6b:4d:c6:bf:0f:db:1d:bb:67:81:e0:d3:5f:13:1a:
40:2b:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 22:41:26 2024 by rpki-client on console-ams.rpki-client.org