Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/jESQmyQwrysiSEOUFv6b0i274Gg.roa
File: jESQmyQwrysiSEOUFv6b0i274Gg.roa (raw, json)
Hash identifier: aK/NVCRKVFtKm2G/IBD3pu5lloD7TI+nxFYIQj2NO5Q=
Subject key identifier: 8C:44:90:9B:24:30:AF:2B:22:48:43:94:16:FE:9B:D2:2D:BB:E0:68
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0192B30E1320F14A7896C5E1D3E21F72AE30
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/jESQmyQwrysiSEOUFv6b0i274Gg.roa
Signing time: Tue 22 Oct 2024 07:08:16 +0000
ROA not before: Tue 22 Oct 2024 07:08:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 185.5.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 19:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:0e:13:20:f1:4a:78:96:c5:e1:d3:e2:1f:72:ae:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Oct 22 07:08:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c44909b2430af2b2248439416fe9bd22dbbe068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:a5:d1:0d:c8:fa:f4:aa:e9:3f:29:fd:2e:
32:89:86:70:e0:b8:0f:c0:43:5a:69:66:7f:ca:97:
41:e9:31:58:a4:89:0c:ff:30:eb:62:be:1e:5f:cf:
e8:5e:f2:88:34:45:32:59:d0:64:1f:86:ec:a6:b4:
87:47:3e:76:8d:f7:75:f4:c9:65:fc:1f:83:d5:c8:
99:b4:0f:e3:fe:89:70:6d:9f:5b:d1:28:31:76:55:
99:3f:82:05:8f:af:74:ac:25:42:8e:98:df:f7:f1:
67:2f:32:60:f7:dd:21:4b:4a:e2:ad:a8:14:11:08:
c7:b7:b8:4c:37:c4:6b:6c:e9:ca:46:23:74:4d:fb:
56:5d:59:96:b8:b4:c6:d0:4f:82:0c:b3:d4:17:8d:
17:e5:3c:88:20:e8:f5:24:9a:81:ad:1e:b5:7f:81:
2e:f2:80:0a:28:1e:68:92:47:a1:31:c5:10:3a:0e:
19:de:7a:bc:ce:87:5d:aa:9e:52:57:af:81:e5:24:
35:0e:62:4e:30:56:de:0d:34:8b:58:82:ae:2b:d2:
55:de:b9:20:fb:3e:2c:7b:d3:c4:a6:b5:87:24:7a:
82:8a:13:a6:04:71:e6:1f:a4:6c:88:ca:38:cb:48:
76:b6:21:09:fe:d3:a0:91:79:d4:e3:10:e9:33:50:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:90:9B:24:30:AF:2B:22:48:43:94:16:FE:9B:D2:2D:BB:E0:68
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/jESQmyQwrysiSEOUFv6b0i274Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.39.0/24
Signature Algorithm: sha256WithRSAEncryption
36:64:07:0f:4d:76:0d:82:33:36:11:5b:df:02:03:d5:1a:47:
8e:be:53:12:dc:b4:47:fd:64:f0:4e:23:57:60:51:ee:85:50:
71:b1:ce:19:f4:3f:eb:8f:5c:ed:a6:46:d5:eb:0a:5f:b0:56:
cf:4e:be:28:cc:f8:5d:c2:d4:88:76:8b:e7:f6:a2:a7:3e:41:
0a:e1:80:16:19:53:77:15:ec:79:a8:f6:db:0b:cb:9d:50:53:
b8:e8:c6:e0:ec:50:5c:e5:f1:19:a4:cf:e1:b7:13:10:9d:5d:
a5:26:83:19:b3:69:bf:77:ac:72:a8:32:ef:ce:c6:e1:a5:72:
78:bc:c3:bb:3a:8a:d3:8f:dd:a9:6e:25:e8:ce:59:88:19:df:
9d:7b:a5:01:fd:3f:e5:9c:84:f9:26:46:b5:8f:ee:cf:74:58:
c4:dd:ce:64:aa:62:e3:5f:60:8a:c6:56:85:72:c1:e2:9c:04:
69:6c:81:6c:00:ea:6f:aa:51:d6:25:11:cd:05:66:9f:4f:f7:
14:ab:1f:da:c5:ec:fe:ff:d5:08:61:8e:69:2d:61:32:b2:ea:
1f:87:9a:45:06:21:ba:e8:be:ec:43:a4:28:f1:d1:6c:20:de:
35:67:f1:c7:8b:ee:16:75:20:9a:94:ae:bb:2f:2e:94:6e:1c:
cf:86:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 22:05:19 2024 by rpki-client on console-fra.rpki-client.org