Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/i8AiuqguL8jfE1wWHtx-nGeP2JU.roa
File: i8AiuqguL8jfE1wWHtx-nGeP2JU.roa (raw, json)
Hash identifier: DS4oQgVPle6VPziqIGlCM5uPVMZONVpVH+to9AT80OI=
Subject key identifier: 8B:C0:22:BA:A8:2E:2F:C8:DF:13:5C:16:1E:DC:7E:9C:67:8F:D8:95
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018BB505C95BC424D463EF270B894F6D4F91
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/i8AiuqguL8jfE1wWHtx-nGeP2JU.roa
Signing time: Thu 09 Nov 2023 16:58:57 +0000
ROA not before: Thu 09 Nov 2023 16:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 5.144.176.0/24 maxlen: 24
5.144.178.0/24 maxlen: 24
5.144.177.0/24 maxlen: 24
5.144.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 17:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:05:c9:5b:c4:24:d4:63:ef:27:0b:89:4f:6d:4f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 9 16:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bc022baa82e2fc8df135c161edc7e9c678fd895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:12:64:d7:40:e7:e3:6f:0e:16:59:d0:82:
d1:5b:ca:16:75:37:ed:8d:a5:f1:8f:38:bc:b8:ee:
4a:06:3c:8e:8a:2c:93:b3:8b:a0:bf:d2:b1:ac:55:
07:0b:d2:8a:01:46:d0:6d:32:6a:e8:07:74:56:f4:
54:ac:05:89:a5:48:cd:db:c8:93:04:10:7f:e0:f4:
dc:ca:8c:2b:52:75:ca:4f:22:ae:ee:b7:8a:4c:bb:
a5:c7:20:fa:1a:be:c2:89:00:48:c3:f2:b6:fb:69:
f9:ba:39:44:8e:f3:54:7b:a7:d6:f5:b9:9a:fa:45:
d6:2a:be:ee:6d:9d:96:96:15:16:e3:bc:aa:99:b9:
8c:d7:0e:07:8d:6a:cd:cf:ca:4d:bf:6c:5b:85:6b:
be:59:5e:bb:9a:e9:5c:29:2e:d2:34:29:7e:89:49:
72:ba:12:a9:3f:1b:fb:0d:f3:e8:1c:91:1c:a8:b4:
38:88:dc:3a:92:ac:c0:b4:67:a6:0a:c0:5f:7a:c3:
f9:ad:d1:5b:84:57:0e:c8:c4:b2:56:af:e5:47:97:
e1:89:37:d2:cb:af:fb:e8:c1:c0:ac:b4:1b:98:1f:
e3:3a:9d:a8:33:7c:df:d6:9a:d9:7c:a8:02:02:95:
c2:49:f1:95:e4:45:28:33:8e:bf:94:b8:1a:54:f4:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:22:BA:A8:2E:2F:C8:DF:13:5C:16:1E:DC:7E:9C:67:8F:D8:95
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/i8AiuqguL8jfE1wWHtx-nGeP2JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.176.0-5.144.178.255
5.144.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b8:67:52:1f:84:85:ee:7e:f7:c0:1e:28:14:40:c7:b5:39:
cb:9c:af:f3:55:7e:85:64:7a:cc:a0:43:36:4a:e0:b3:c5:18:
8d:5f:b0:0b:91:e2:6a:2f:82:cf:2d:38:5a:9d:82:b2:2b:08:
e5:c9:0a:57:14:10:f9:03:94:98:22:ac:81:64:02:90:e9:92:
b8:eb:e5:84:fe:00:61:e3:93:5c:82:07:a9:25:14:6a:b1:46:
d3:18:94:49:56:69:66:b4:23:2f:11:63:d2:ca:eb:e9:ae:e2:
a6:2e:62:15:6a:bf:00:ec:ab:3b:51:d6:3f:98:50:79:15:84:
12:0a:ae:b8:b8:53:b0:c6:85:c5:5c:54:e9:c7:92:e0:7e:2e:
fc:0b:7e:27:a6:84:e9:11:b5:20:4c:2c:d2:4e:24:27:6e:55:
8d:97:07:48:f7:d9:ce:27:96:59:ae:37:00:53:db:ee:b2:e5:
43:46:99:90:fe:11:02:27:b5:d9:d8:9f:ea:cb:44:29:72:45:
ff:ec:5e:66:34:a4:54:19:8b:82:0b:17:3a:57:2f:52:f5:50:
26:3a:ee:17:d6:01:b8:1a:f0:1e:32:c9:47:9c:e8:ac:f4:da:
ba:e5:f4:e3:31:fd:2b:9f:e7:5e:9d:53:ca:c4:ab:59:ac:20:
02:40:89:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:15 2024 by rpki-client on console-ams.rpki-client.org