Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x8aDVQY_SXqyXXkIcU3gw_tTXo0.roa
File: x8aDVQY_SXqyXXkIcU3gw_tTXo0.roa (raw, json)
Hash identifier: gxizibh+P7p5WT/Yow0+qvA6pN+fMJEIlAJciD8lLg0=
Subject key identifier: C7:C6:83:55:06:3F:49:7A:B2:5D:79:08:71:4D:E0:C3:FB:53:5E:8D
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018CF05E82974236B2E6DCE6F16E46D23057
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x8aDVQY_SXqyXXkIcU3gw_tTXo0.roa
Signing time: Tue 09 Jan 2024 22:36:14 +0000
ROA not before: Tue 09 Jan 2024 22:36:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211138
IP address blocks: 5.144.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 16:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f0:5e:82:97:42:36:b2:e6:dc:e6:f1:6e:46:d2:30:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 9 22:36:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7c68355063f497ab25d7908714de0c3fb535e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:2b:b0:7e:1d:e8:32:73:2b:3d:3d:05:af:
33:5f:43:ae:89:22:2f:d6:97:90:c5:b6:0d:04:a2:
d4:3f:e5:51:56:e7:f5:ae:f0:4f:e7:de:7d:40:d8:
db:85:cf:be:e9:2d:87:45:41:01:b7:80:7b:ed:32:
ac:f1:61:e8:88:5a:07:c2:0f:31:56:b4:a8:df:b7:
0a:6f:61:78:34:ce:e4:98:fa:75:2a:71:5e:4c:8f:
d7:42:4e:59:73:74:1a:33:7a:c7:5a:33:20:1e:aa:
40:1b:60:4d:d5:2d:0f:10:87:d9:0f:30:c7:87:29:
22:46:7d:cc:d6:d1:9b:87:35:c6:94:b9:d4:c6:8e:
f2:e1:71:b4:f7:8b:e3:1a:2e:7b:c9:e2:f2:d6:61:
f3:1e:85:44:1c:fa:cb:3c:d7:3b:40:05:15:60:65:
f1:1b:c9:5f:68:56:b1:07:4c:f8:c9:63:5a:42:2c:
78:65:40:42:91:44:6a:aa:e0:6f:30:b9:e6:cb:32:
a2:10:d3:fd:da:a4:e8:b8:82:53:0e:38:9f:ba:26:
cc:fa:46:82:17:3f:fb:8d:68:62:9c:1f:ea:68:7a:
c6:af:c4:b1:17:72:1f:9c:bc:a7:bb:aa:13:2d:8b:
04:2e:cd:51:0c:b0:39:2e:ce:26:b7:79:fd:80:2e:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C6:83:55:06:3F:49:7A:B2:5D:79:08:71:4D:E0:C3:FB:53:5E:8D
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/x8aDVQY_SXqyXXkIcU3gw_tTXo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.181.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dd:46:90:49:a6:60:97:b8:3a:c3:f9:15:cf:7a:2f:85:60:
95:78:7d:a5:6d:25:66:c5:a8:b4:00:11:31:10:f6:b5:7c:73:
e8:83:03:c1:bf:21:0a:1e:71:29:1c:bb:ee:f3:ba:7e:91:bd:
15:2e:83:1e:ea:8f:e7:54:2a:7a:10:a9:9b:8b:6a:ef:dc:6b:
79:87:f0:2e:fb:f8:39:19:04:8c:f3:92:96:fc:8f:ce:77:69:
29:06:94:74:d6:df:c2:69:ed:64:5f:b2:c7:d9:aa:cd:d8:80:
0b:3a:00:b4:f3:3e:3b:f5:f7:86:60:7c:3e:15:80:a7:a0:06:
08:16:bf:8d:22:ea:57:9f:cc:e4:d2:e7:c3:f1:cf:43:bd:fb:
16:9c:5a:80:43:a7:cd:26:f5:29:a4:6b:ab:67:6a:78:b3:9c:
40:a5:8b:56:87:5a:38:13:4f:07:86:f3:ba:14:4b:4c:0f:b4:
6f:6e:56:69:90:c1:c8:31:81:3b:7e:43:bb:2f:5b:b2:e7:95:
18:7e:ff:41:50:28:33:a3:5d:67:f9:ad:24:93:ab:12:7a:ec:
b4:21:c8:39:1b:54:9a:31:53:79:08:72:77:8a:ed:79:b5:30:
60:37:1a:85:a8:fc:cf:3a:e4:e7:af:e7:93:23:4d:fb:32:c0:
4c:1f:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 19:47:41 2024 by rpki-client on console-fra.rpki-client.org