Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5YsaQBiI8eLPdcJRSSnRhI6ouyU.roa
File: 5YsaQBiI8eLPdcJRSSnRhI6ouyU.roa (raw, json)
Hash identifier: o52jnWMUFWoGzrTgv58RRp4L3GdLiUFS3ZwcHx0rIi0=
Subject key identifier: E5:8B:1A:40:18:88:F1:E2:CF:75:C2:51:49:29:D1:84:8E:A8:BB:25
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0188B363D19C39D8C7D5754A520C1326D64B
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5YsaQBiI8eLPdcJRSSnRhI6ouyU.roa
Signing time: Tue 13 Jun 2023 06:14:03 +0000
ROA not before: Tue 13 Jun 2023 06:14:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.209.140.0/22 maxlen: 24
45.65.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:63:d1:9c:39:d8:c7:d5:75:4a:52:0c:13:26:d6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 13 06:14:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e58b1a401888f1e2cf75c2514929d1848ea8bb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:f7:a1:1b:86:6a:2e:bd:42:dc:8e:b0:65:
41:6f:78:9e:42:01:87:2f:bb:f1:a4:cf:e9:63:95:
29:15:f3:fd:d2:75:e4:bd:46:ae:35:48:e7:f4:b0:
4a:55:1d:69:ba:86:b5:4c:ee:3c:3c:05:fe:1a:17:
f9:56:fe:bb:25:6b:05:3c:55:9d:5b:fa:0d:0e:dc:
6a:58:60:79:0d:a8:00:6c:0c:7d:b9:e2:22:4e:a3:
0a:74:f7:c9:4c:7b:c4:96:85:4d:5b:3a:58:e9:14:
52:c8:d2:14:48:6f:f8:30:ef:49:6d:45:f5:18:c4:
87:f2:0a:ba:a0:46:49:1e:99:c7:54:10:6a:42:9f:
9e:90:8c:26:a7:1c:0c:de:52:cc:b6:e4:19:be:b5:
5b:42:5b:f3:a6:2c:b5:72:80:69:00:31:00:24:f9:
74:3f:42:75:70:33:8d:dc:5a:ee:4e:2d:57:7b:14:
70:97:2d:f9:7e:1d:66:72:97:63:9b:bc:d1:8c:a7:
50:36:6a:c2:4f:c3:68:51:e5:e6:33:ec:87:d1:3b:
34:39:ce:a2:fb:6f:48:42:ff:63:2f:10:12:b8:f8:
1c:41:2b:50:ba:7f:a7:20:8d:3a:fd:05:73:9a:c4:
0a:f9:50:ff:77:dd:a1:be:57:42:72:b4:c5:1d:0d:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:1A:40:18:88:F1:E2:CF:75:C2:51:49:29:D1:84:8E:A8:BB:25
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5YsaQBiI8eLPdcJRSSnRhI6ouyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
08:e5:b6:9a:0a:6c:26:f1:e6:a5:33:21:90:3e:3a:ae:4f:40:
ee:5d:0b:9d:79:bc:8a:f8:c8:4f:32:25:12:1f:a3:d4:3e:ee:
82:6d:85:18:88:ce:2f:f7:2e:08:72:b1:29:52:a6:dd:7a:cb:
79:1b:41:2b:f7:d5:6e:ae:fa:b6:07:2e:11:be:2f:db:92:61:
20:6d:98:1a:7f:d7:b5:e8:79:c8:04:97:b6:e6:cd:b0:76:ab:
c7:42:46:82:9f:9f:b6:a2:f9:ae:cd:ad:5f:b6:c3:76:0c:2c:
6c:18:d8:80:f0:3e:9e:34:10:41:ab:2d:4c:b8:8b:29:ce:0d:
ac:ef:8e:b7:ab:7b:da:ec:3b:d1:af:da:46:ac:80:b8:81:f7:
c4:80:51:95:1f:79:6d:e7:ab:65:f6:e7:4e:24:a5:ca:fc:2a:
12:7d:e8:32:7d:3c:28:fe:87:30:be:b4:ae:9e:de:ce:0e:9d:
5a:33:66:a4:b0:88:f0:cd:b6:2d:63:b2:ea:1c:e9:67:07:88:
3c:f5:d6:0b:10:36:f6:d3:b5:87:54:9d:2c:83:2b:dd:7c:d2:
19:e9:9b:ca:67:c2:36:c4:68:ae:ac:a0:4c:ed:ba:52:0c:a0:
5c:10:c9:d5:b2:a6:06:df:76:4e:d9:05:30:9e:82:4e:7f:92:
c2:e0:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org