Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/N5YSx6Es8h7XZnlcDyoeflPHgf4.roa
File: N5YSx6Es8h7XZnlcDyoeflPHgf4.roa (raw, json)
Hash identifier: yMdgB1shPAGT7DCvEX8ZRIhitIiQAeKxQ80D/0xlL50=
Subject key identifier: 37:96:12:C7:A1:2C:F2:1E:D7:66:79:5C:0F:2A:1E:7E:53:C7:81:FE
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018FF708EAB01B0DE9ADDF26CEC269112A6D
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/N5YSx6Es8h7XZnlcDyoeflPHgf4.roa
Signing time: Sat 08 Jun 2024 08:48:27 +0000
ROA not before: Sat 08 Jun 2024 08:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.104.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 09:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f7:08:ea:b0:1b:0d:e9:ad:df:26:ce:c2:69:11:2a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jun 8 08:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=379612c7a12cf21ed766795c0f2a1e7e53c781fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:68:8c:a8:d2:a0:a8:4a:14:c6:80:23:c8:
9c:ca:6f:06:93:93:7f:c4:1c:e9:d2:4f:1a:f0:4c:
04:c7:9d:23:ad:18:20:c7:b0:d7:49:22:4c:54:42:
7b:28:bc:ed:87:7b:f5:03:4e:9f:fa:11:08:cd:b1:
75:5d:3b:65:e4:c0:31:85:86:d1:a8:28:77:c8:d3:
4a:63:b0:03:1d:70:b4:c9:9e:d6:af:be:29:d3:48:
6a:82:dc:0e:02:2e:1f:66:b3:4c:98:87:c4:f8:32:
67:36:3d:90:dd:15:33:61:ac:81:0e:ec:6c:06:f7:
d2:d9:ec:e5:28:3a:18:bb:88:50:6e:49:81:e7:e7:
68:02:6b:72:bc:ba:e3:3b:ea:4f:cb:dd:ff:b0:3c:
c3:67:0d:78:d8:7e:21:ff:57:fb:a3:cd:52:e5:ee:
91:7c:fe:48:8c:30:ed:1c:4e:04:73:d1:cb:42:8b:
b5:ca:2c:1f:20:48:b2:f0:a5:cd:4d:13:e2:9f:c4:
68:86:75:9a:b4:1d:1e:1e:b3:29:13:30:de:55:7b:
1c:74:f0:4f:98:99:ce:19:10:84:6a:fe:60:81:c7:
ea:d2:ab:65:e9:e0:15:f9:c1:1f:b1:eb:ea:78:d9:
19:fa:f2:fb:f9:24:2d:f6:90:be:3c:03:f1:a8:4c:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:12:C7:A1:2C:F2:1E:D7:66:79:5C:0F:2A:1E:7E:53:C7:81:FE
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/N5YSx6Es8h7XZnlcDyoeflPHgf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.14.0/23
Signature Algorithm: sha256WithRSAEncryption
27:9c:24:c9:f6:36:84:6c:9c:22:04:c6:d4:2f:c1:50:78:ee:
e1:95:2f:ff:f5:17:69:b4:9f:92:3e:8b:3c:ce:5b:31:42:99:
b1:c4:b3:ca:45:28:0c:59:6d:4b:58:58:07:09:07:dc:96:e0:
17:b5:83:bc:bb:3e:dc:93:2d:1c:d8:c2:db:c3:69:bd:0b:26:
1b:fe:cc:f5:4b:f4:b8:a3:4f:2e:79:56:51:1f:95:0a:17:eb:
d3:cb:51:c1:5e:b7:c0:61:d1:5a:5e:b9:a6:bd:3b:27:a4:ca:
ee:b3:88:8b:70:3d:72:85:1e:87:49:36:1a:40:9d:61:87:cd:
39:da:9d:af:95:98:81:ca:80:80:8a:5e:74:1b:c7:1c:3f:34:
d3:ed:cf:75:df:54:67:90:08:d0:65:81:35:13:7b:fa:0d:47:
ea:f8:a6:b6:e1:01:6f:06:81:1f:f1:54:95:a2:fb:36:9f:c3:
af:15:56:9b:df:6a:ef:c5:44:42:bd:14:df:6d:a3:8f:8b:72:
27:82:18:a7:3f:ba:23:19:63:be:a2:d7:19:4b:d6:2e:75:a1:
d9:d3:a1:5d:e9:4a:ab:46:67:db:57:bf:8d:94:7a:62:95:07:
b0:ef:d5:3a:31:5e:85:3c:57:a5:28:5f:11:35:e5:7e:45:3b:
7e:b3:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 11:35:03 2024 by rpki-client on console-fra.rpki-client.org