Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/5A1vTGQ_zTp1OMoSql-0DufuIw8.roa
File: 5A1vTGQ_zTp1OMoSql-0DufuIw8.roa (raw, json)
Hash identifier: nnxMhPazR2npXtZ+7c9rqdr9M6mw2ddLHQO3If7Yoi0=
Subject key identifier: E4:0D:6F:4C:64:3F:CD:3A:75:38:CA:12:AA:5F:B4:0E:E7:EE:23:0F
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 0185704BE1E9A5C211DC3EE2C3ED46010B5C
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/5A1vTGQ_zTp1OMoSql-0DufuIw8.roa
Signing time: Mon 02 Jan 2023 02:24:59 +0000
ROA not before: Mon 02 Jan 2023 02:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199753
IP address blocks: 185.89.56.0/22 maxlen: 22
91.223.151.0/24 maxlen: 24
194.117.254.0/23 maxlen: 23
2a05:d580::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:e1:e9:a5:c2:11:dc:3e:e2:c3:ed:46:01:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Jan 2 02:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e40d6f4c643fcd3a7538ca12aa5fb40ee7ee230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:83:d7:b8:db:36:92:15:f7:bc:a8:17:61:
e5:7b:d5:36:70:fb:95:50:d9:50:c8:40:45:d6:92:
28:d6:ea:2f:3f:c0:6e:5f:ac:9d:ad:e1:fa:99:12:
64:12:20:7c:7c:1f:c2:52:65:79:23:25:ee:96:39:
1c:90:3d:c7:12:2b:0a:f2:f7:76:00:9c:78:ee:1e:
3f:15:75:46:93:8f:29:3f:09:ef:f6:94:57:52:48:
45:1d:bd:81:c3:c3:17:84:1f:bc:2c:6c:53:ac:df:
3a:a8:c9:85:26:9e:d2:88:85:18:1d:92:e7:6b:00:
fb:7d:13:41:87:0c:b4:bb:c9:7f:fd:e8:ff:d3:cd:
db:ac:9b:95:6e:18:d1:a1:d7:50:92:ac:fd:7d:50:
83:dc:43:c3:cc:fc:88:80:58:da:f2:f3:08:ce:dd:
e5:d4:16:e5:ab:f5:6b:f2:7a:14:85:60:cb:cb:54:
50:c2:ff:d9:58:7f:2c:cc:f1:a7:dd:fb:cb:9a:ff:
02:e4:82:7d:b7:9d:02:98:e3:4a:2e:54:01:06:ad:
a5:4e:c9:09:10:32:5f:f3:7f:cf:0e:15:e2:ed:40:
ed:43:aa:7c:42:6d:07:3a:45:0c:29:30:7b:20:70:
2b:9a:26:10:0e:c6:d2:7f:97:1a:72:88:99:5a:07:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:6F:4C:64:3F:CD:3A:75:38:CA:12:AA:5F:B4:0E:E7:EE:23:0F
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/5A1vTGQ_zTp1OMoSql-0DufuIw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.151.0/24
185.89.56.0/22
194.117.254.0/23
IPv6:
2a05:d580::/32
Signature Algorithm: sha256WithRSAEncryption
1d:98:c9:54:8d:30:5f:97:16:1e:1c:ab:23:31:39:c4:8d:11:
66:2b:ec:8a:f8:56:00:6f:0c:34:c1:d2:cd:ac:be:e1:86:ab:
b0:7e:2d:3b:01:f6:cf:5d:ed:0d:bc:79:77:91:e8:20:94:8e:
b5:1d:6f:bd:a4:51:52:aa:2b:c6:e5:82:fb:1e:68:5d:0e:68:
72:ae:8a:74:6d:8f:f8:4f:47:a9:fe:57:58:d2:5a:a5:8c:5b:
ca:9c:b5:b7:37:45:be:87:93:43:d0:7e:8d:3c:4a:f8:b3:94:
57:0f:2b:b4:0a:0a:28:8f:a0:a0:26:86:60:5a:94:30:3b:f1:
4a:e4:a0:7b:18:0c:36:25:fd:f2:dd:4b:fc:1d:15:b4:4c:18:
02:8e:bf:26:e0:ed:18:1d:e1:bc:16:16:a2:f5:ca:d4:2c:91:
da:97:1b:fa:4a:5d:02:3c:ea:7a:a2:d6:ab:1b:69:52:65:80:
04:43:aa:48:25:49:0c:08:f0:e0:56:27:19:38:17:60:d2:a0:
f9:83:81:6e:89:6f:1e:1f:33:f4:ed:ce:0a:84:36:ce:90:b8:
4a:4a:38:05:4a:90:d8:b1:7d:f7:01:f2:05:a3:2f:94:c1:a6:
a1:ab:cd:99:20:b3:ac:a8:20:08:fa:40:04:ed:eb:6f:a1:4f:
52:17:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:58 2024 by rpki-client on console-fra.rpki-client.org