Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/5S1AA9U9FhP3T09aepkMHH66b2U.roa
File: 5S1AA9U9FhP3T09aepkMHH66b2U.roa (raw, json)
Hash identifier: nlpjNHwCJng3741n4ViMZGXtxENE61y/LR04NANtbmI=
Subject key identifier: E5:2D:40:03:D5:3D:16:13:F7:4F:4F:5A:7A:99:0C:1C:7E:BA:6F:65
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0187C2F83FC6E9C6B0366964384A7B38056C
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/5S1AA9U9FhP3T09aepkMHH66b2U.roa
Signing time: Thu 27 Apr 2023 13:47:41 +0000
ROA not before: Thu 27 Apr 2023 13:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 85.208.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:f8:3f:c6:e9:c6:b0:36:69:64:38:4a:7b:38:05:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Apr 27 13:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e52d4003d53d1613f74f4f5a7a990c1c7eba6f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:cb:ff:60:f0:ca:2d:d0:bc:4f:25:2c:4e:
d4:b1:23:22:96:50:3c:ba:40:2b:01:61:c6:17:c8:
e5:a2:d0:87:b6:20:13:06:ec:99:b1:a5:92:94:31:
69:d3:3f:ff:b3:84:11:e1:3d:07:f1:1a:10:e5:c4:
dd:a6:4f:fe:8c:09:f6:c5:cf:94:93:26:ea:88:aa:
65:1d:c0:ba:f4:3e:5a:4f:c9:d8:72:0f:1f:71:22:
0f:d4:58:0a:50:df:72:3a:c8:1a:fe:55:9a:a9:6f:
2f:b7:a0:83:39:1b:45:b1:1d:a9:1f:ef:d3:96:63:
b0:6c:77:d3:94:e0:6d:b3:6e:92:6d:1d:64:c8:e6:
6c:07:f6:a5:3a:2e:8b:f9:f3:2b:ed:b0:17:ae:b3:
38:11:96:a9:9f:6e:d8:dc:ff:4d:9b:0a:f1:23:7a:
7a:4f:5b:60:d6:d8:d5:3a:52:11:e3:81:3d:ee:30:
1c:c1:57:16:3d:f7:53:aa:68:f3:c9:d7:87:ce:ae:
40:f6:53:51:41:2e:71:5d:a6:36:08:bc:e8:67:70:
b8:c7:33:b5:51:f2:cc:e3:35:94:54:e5:1c:95:f1:
b0:f7:e1:ef:30:b0:94:be:ea:ee:eb:62:5a:87:83:
61:3c:6b:a4:4b:1f:df:0e:60:e2:e7:c9:0b:60:3b:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:40:03:D5:3D:16:13:F7:4F:4F:5A:7A:99:0C:1C:7E:BA:6F:65
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/5S1AA9U9FhP3T09aepkMHH66b2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
35:98:2a:47:8a:70:13:5f:da:61:fc:11:81:3e:83:c9:25:20:
2e:99:ca:a1:07:34:be:31:d6:13:a3:45:2a:62:b0:fc:86:82:
c2:cd:75:50:10:96:78:cb:67:8f:00:8a:29:b4:6a:3f:7d:f8:
22:44:06:87:dc:2f:d3:c2:89:36:60:74:bc:8f:19:f3:62:38:
04:25:84:e2:2c:6f:20:8d:a6:25:b7:95:20:87:28:9b:bc:e0:
19:48:c7:0b:bd:7c:54:e7:51:4f:0b:cd:1b:dd:37:83:2d:b6:
e2:5e:24:86:15:49:ed:a0:9d:c9:3e:8b:4c:6f:f6:c8:41:0e:
9b:6b:e1:6e:90:62:b8:68:37:6d:53:5f:b8:43:60:da:3b:91:
3a:f6:0b:29:44:76:d2:fb:2f:3d:95:7a:77:bf:fa:b7:24:6b:
8d:7d:21:34:81:77:10:6a:56:04:c0:61:cd:97:60:fa:5c:50:
e5:f4:ba:ad:cb:0f:b3:4a:80:4a:0e:5a:bf:b4:0a:a5:99:6e:
31:6a:15:8f:15:52:a0:5e:ed:38:21:6e:ce:40:37:b1:c3:d6:
c2:67:97:75:4a:6b:be:59:b8:7d:00:fa:7b:6b:26:93:d5:05:
65:f7:83:c9:89:fa:3a:0a:8b:5a:1f:9c:ab:20:77:43:45:f2:
fc:86:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:36 2024 by rpki-client on console-ams.rpki-client.org