Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5sbkMJPysRPFzCffdXKcjR1A9k8.roa
File: 5sbkMJPysRPFzCffdXKcjR1A9k8.roa (raw, json)
Hash identifier: TmAkw2VnfGv+cVCEE32+qAXANb/OHqtPnBtoW+SrvLM=
Subject key identifier: E6:C6:E4:30:93:F2:B1:13:C5:CC:27:DF:75:72:9C:8D:1D:40:F6:4F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018EF0439AA7FEBCE1DCE4A53FCDF6D7CF7C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5sbkMJPysRPFzCffdXKcjR1A9k8.roa
Signing time: Thu 18 Apr 2024 08:12:26 +0000
ROA not before: Thu 18 Apr 2024 08:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 194.180.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 05:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:43:9a:a7:fe:bc:e1:dc:e4:a5:3f:cd:f6:d7:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 18 08:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6c6e43093f2b113c5cc27df75729c8d1d40f64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:23:1a:f9:86:50:82:e2:c4:9b:2c:26:06:5b:
12:c8:a4:67:aa:6b:aa:a0:63:53:ba:c5:19:c7:de:
5e:b6:ec:70:d0:9e:00:29:42:19:93:6f:16:29:01:
36:ed:0e:f8:fe:8c:1a:62:d8:51:2f:c9:a9:2a:25:
8c:90:f0:f1:84:3b:59:c2:b1:f9:3c:b4:3b:b0:2c:
9c:2b:34:dc:69:16:d7:cd:ba:cc:d7:f7:01:0f:c3:
d7:d7:86:4c:5c:f0:08:8d:eb:f2:9f:cc:67:de:da:
68:52:b5:6a:4a:bf:45:fe:2f:1c:00:18:4f:e9:af:
92:b6:eb:4a:d0:68:cf:98:d3:f0:13:14:76:c0:d5:
3a:01:b5:67:da:ba:e8:d7:7c:bd:8f:b5:66:05:3e:
5f:25:85:9d:4b:ef:2f:3a:f3:47:75:94:6c:c7:eb:
0d:03:0d:e2:20:b3:f7:12:52:22:ff:66:0d:cb:6e:
fa:2b:3b:af:24:a2:e9:7f:e0:23:bf:58:93:03:eb:
bc:e5:bc:4d:01:77:60:a1:02:25:2f:11:4e:23:99:
9a:d6:10:5d:3f:8b:24:a1:b3:af:04:73:60:91:43:
e1:9e:49:07:7a:57:1e:98:09:85:b7:06:e4:72:b1:
78:47:82:1a:97:7e:cd:a2:58:5e:35:c4:77:97:b7:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C6:E4:30:93:F2:B1:13:C5:CC:27:DF:75:72:9C:8D:1D:40:F6:4F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5sbkMJPysRPFzCffdXKcjR1A9k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.238.0/24
Signature Algorithm: sha256WithRSAEncryption
74:11:d4:66:bd:ea:20:80:f7:f8:c2:6a:db:8b:1c:d2:3a:5e:
5b:73:49:a9:ab:81:13:db:47:81:8e:1a:65:b9:e9:1d:5e:b0:
e4:41:6f:db:69:0d:69:72:37:9b:1f:5c:85:d0:17:de:92:1b:
76:c8:17:84:a3:61:9f:ed:a8:63:75:f4:e2:20:6c:bc:70:b4:
b1:56:87:db:4a:27:1d:8e:d2:5f:ac:d5:e6:c5:a3:69:9b:ad:
5e:d1:15:50:c8:6a:09:58:80:04:6f:48:bb:1e:2d:72:a6:16:
37:3f:c8:9e:39:54:db:52:0a:a2:8f:8e:a5:62:3e:08:3a:36:
3f:f5:f8:0d:68:ea:d0:c6:2d:44:7f:e5:24:7b:a6:f7:b0:8f:
60:69:e7:33:e0:9f:2f:1b:ae:46:b8:a1:94:6c:40:d2:34:91:
c6:7d:a1:a8:c9:86:38:07:d2:68:a9:36:93:f0:38:89:64:c2:
0f:70:4a:2f:14:f5:a8:b7:bc:45:8b:cf:c6:ed:6e:2c:a7:b0:
e6:29:d6:32:f2:63:0f:eb:6a:93:24:78:5e:0d:43:b5:b2:53:
e6:af:25:e5:92:9d:38:31:32:ba:3f:9f:9f:f7:37:ec:6a:94:
87:18:00:bb:cd:d3:9d:2d:92:40:63:e3:af:99:2b:ea:bd:d5:
65:db:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:35:25 2024 by rpki-client on console-fra.rpki-client.org