Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/seQIdkbyy0nTvtyyTCYi6NdOcDY.roa
File: seQIdkbyy0nTvtyyTCYi6NdOcDY.roa (raw, json)
Hash identifier: FIj0Y1/vF7a/d988SavpDZOqE4L3HFvYWBNA7vmjJBo=
Subject key identifier: B1:E4:08:76:46:F2:CB:49:D3:BE:DC:B2:4C:26:22:E8:D7:4E:70:36
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0193302A3155143AC9FE4E41267F07519AE0
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/seQIdkbyy0nTvtyyTCYi6NdOcDY.roa
Signing time: Fri 15 Nov 2024 14:11:31 +0000
ROA not before: Fri 15 Nov 2024 14:11:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 5.144.181.0/24 maxlen: 24
5.144.182.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 14:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:2a:31:55:14:3a:c9:fe:4e:41:26:7f:07:51:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 15 14:11:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1e4087646f2cb49d3bedcb24c2622e8d74e7036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:e3:48:9e:bb:2d:08:58:18:2c:f5:3f:b6:
cf:8f:20:f2:4f:40:d3:77:b9:bc:ba:4f:87:9d:b7:
e8:6a:81:ad:b8:5b:bb:ad:a8:6c:c1:cf:00:db:e4:
71:a0:14:5c:fe:4c:9d:ec:68:69:f1:88:d7:b5:b1:
2c:7c:86:d1:6c:72:b6:b8:54:be:bd:cb:8b:fb:46:
ff:99:82:0c:74:c2:48:c4:05:67:41:8e:ed:07:e1:
da:65:59:13:24:dd:9d:22:6c:7d:bd:6c:d6:7d:c7:
8e:43:ab:13:57:b4:e9:a7:ab:cb:82:1c:58:68:8a:
4c:9e:fd:fa:2e:c3:45:10:b6:a0:42:68:d7:b7:2c:
de:8d:55:38:5b:38:b7:f5:ae:6b:4f:ea:7b:35:93:
5e:e2:7f:dc:39:50:a9:4d:dc:45:3d:48:72:f1:40:
f6:e2:51:ee:39:e7:00:7a:1b:90:77:96:e1:de:54:
c0:89:8f:3a:38:60:89:00:d0:6d:95:7c:8a:c3:c3:
cf:ef:4e:02:2d:fb:cb:ca:78:c6:4a:50:fd:da:4c:
47:88:85:b4:92:b7:50:7d:db:dc:95:f1:9c:62:66:
cc:b5:66:c7:fd:df:fc:e5:8c:3a:72:71:86:20:f0:
8a:c5:b6:3a:29:98:21:c3:b9:c9:e9:e7:e8:b5:67:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:08:76:46:F2:CB:49:D3:BE:DC:B2:4C:26:22:E8:D7:4E:70:36
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/seQIdkbyy0nTvtyyTCYi6NdOcDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.181.0-5.144.182.255
5.178.106.0/24
Signature Algorithm: sha256WithRSAEncryption
15:40:1a:a7:50:06:be:cf:d3:32:53:e2:12:76:87:10:0c:ce:
62:ec:f4:b1:fd:8f:5c:91:e1:b6:9e:40:99:2e:49:69:87:a4:
45:c3:82:d7:d5:99:63:c2:28:b1:98:e1:46:e7:fa:29:1b:c1:
fa:8d:41:58:04:64:09:23:48:27:f7:50:a8:db:b6:87:41:7e:
54:d1:3b:d1:69:3e:f8:33:a3:b3:95:29:99:31:3c:20:e4:b9:
2e:b9:9a:a9:e3:b7:89:a7:b1:f6:a1:1b:51:b6:9d:ab:4b:57:
59:c6:59:02:53:a0:78:40:56:90:87:54:fc:90:2b:4e:01:34:
f8:2a:09:0e:a1:fc:29:4c:8a:fa:a2:ba:37:57:78:e5:60:9c:
03:94:ce:e5:bf:2a:c0:25:6e:1a:c1:8c:ed:d0:10:62:25:da:
ef:d6:a1:9b:a6:d9:c6:e5:2e:0e:20:66:54:40:23:4c:dc:f3:
65:10:62:0f:ef:e9:9c:ac:e5:bf:19:cb:3f:16:72:17:f2:df:
eb:98:1c:e7:12:14:39:4f:5c:6c:cf:f8:2e:ed:28:ec:31:e5:
07:f0:69:3f:6e:a7:09:a5:3f:72:9e:84:5d:e7:b9:3d:93:5e:
53:d5:27:ef:c8:f6:fd:58:01:5a:70:b0:c6:b8:6d:dd:db:f3:
c3:51:d1:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org