Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/5FVTc4atg0dv7XrtIR86xDnR9Lo.roa
File: 5FVTc4atg0dv7XrtIR86xDnR9Lo.roa (raw, json)
Hash identifier: ty+vLbWhi6nupMBrUzrP8OunMG+0JEmeXpdFB7oZGy4=
Subject key identifier: E4:55:53:73:86:AD:83:47:6F:ED:7A:ED:21:1F:3A:C4:39:D1:F4:BA
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 018570F0A7E2FEFB1E5357B9886E8EEB27A7
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/5FVTc4atg0dv7XrtIR86xDnR9Lo.roa
Signing time: Mon 02 Jan 2023 05:24:57 +0000
ROA not before: Mon 02 Jan 2023 05:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211501
IP address blocks: 194.26.238.0/24 maxlen: 24
2a11:75c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a7:e2:fe:fb:1e:53:57:b9:88:6e:8e:eb:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Jan 2 05:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e455537386ad83476fed7aed211f3ac439d1f4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:a3:64:e9:25:0c:44:14:37:7f:ca:d6:4c:
ba:a2:d0:bb:65:39:14:45:1f:6c:88:b4:32:a9:37:
50:25:42:0d:d5:4f:38:9a:10:4d:57:4f:7c:b2:85:
d5:41:e3:d0:43:3e:74:5b:a8:70:46:26:2a:0c:df:
6d:54:07:09:b7:37:58:4d:e3:69:bb:91:fa:6c:f2:
ac:ca:ac:ef:77:28:2c:2e:4d:ca:9e:fc:85:ac:e1:
5f:0b:79:b3:af:05:91:d0:4a:f1:9f:ad:b2:e1:43:
76:7e:22:09:3d:96:1d:7b:17:ce:c2:ff:5e:2a:0b:
d2:fe:0d:66:b2:8a:04:54:ca:f8:c9:7b:55:a5:c4:
c6:fa:7e:2f:d6:6d:4a:2d:a3:76:61:d5:5c:5f:17:
f1:2b:88:fb:63:58:17:ea:58:71:40:ae:57:40:77:
61:f9:0c:0d:03:58:31:42:b1:e5:5a:60:de:cf:d4:
46:37:f6:4a:17:d2:c5:6f:bd:39:81:0a:a0:9d:be:
11:8c:c9:7d:e9:84:af:69:b4:a8:d9:be:af:ca:0c:
ae:80:da:4e:24:b1:45:46:f5:2e:bf:95:72:0f:1c:
f1:82:8d:41:8a:18:57:1c:c0:6c:a2:1a:f8:4e:68:
d4:2c:69:e8:e7:03:d1:2e:6e:86:c0:44:34:c8:94:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:55:53:73:86:AD:83:47:6F:ED:7A:ED:21:1F:3A:C4:39:D1:F4:BA
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/5FVTc4atg0dv7XrtIR86xDnR9Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.238.0/24
IPv6:
2a11:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:4b:45:ef:93:52:38:a4:93:ea:71:91:78:30:08:90:02:f4:
6d:fb:a0:c6:98:d2:e0:af:1c:07:60:f8:c9:50:05:dd:cc:87:
61:ed:6a:73:04:18:78:df:ae:5b:f4:ae:5d:29:d7:b6:1a:8c:
0e:06:fb:68:3f:12:72:c5:3b:d4:96:ca:7e:c9:b4:56:40:99:
5b:fb:cd:e9:64:ee:21:c8:2b:2b:56:5f:b8:3b:e2:60:b9:82:
ca:b3:f8:bb:56:36:d4:cb:39:be:bc:a3:4e:51:98:4c:78:b2:
61:e3:4b:d3:bb:e1:e3:a1:6a:12:82:ab:12:79:f7:34:8e:58:
f6:fc:e8:bd:5a:bc:f6:a1:f2:4d:aa:28:34:72:8d:ca:53:a9:
ec:bd:eb:5c:33:20:81:da:7e:69:2f:08:f8:1b:98:f9:e2:ee:
bc:8b:f7:9d:de:15:36:62:35:b3:58:46:cc:04:92:8b:a1:7e:
03:46:db:40:d3:9b:60:5a:7c:8a:05:93:bc:72:a2:cd:eb:c3:
56:7e:74:c0:65:66:30:89:4c:40:49:a8:2e:82:31:7c:cc:7f:
2b:95:03:45:4e:74:d8:8e:3c:4d:57:10:7b:ef:56:83:26:ef:
1e:93:6b:43:73:bb:59:44:8b:2e:db:82:f6:1d:92:f9:94:44:
33:5d:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:47 2024 by rpki-client on console-ams.rpki-client.org