Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/5tptmTblV2yubkjs5gzTOdDVLw0.roa
File: 5tptmTblV2yubkjs5gzTOdDVLw0.roa (raw, json)
Hash identifier: Y70kMWiHTE+TaEn6hDqYFaWk++M03SME2xd6st6yO8k=
Subject key identifier: E6:DA:6D:99:36:E5:57:6C:AE:6E:48:EC:E6:0C:D3:39:D0:D5:2F:0D
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 0185703989568CC8CD251FFFA762F5CA44BF
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/5tptmTblV2yubkjs5gzTOdDVLw0.roa
Signing time: Mon 02 Jan 2023 02:04:56 +0000
ROA not before: Mon 02 Jan 2023 02:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48091
IP address blocks: 185.140.236.0/23 maxlen: 24
195.93.216.0/23 maxlen: 24
2001:67c:256c::/48 maxlen: 48
2a05:37c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:89:56:8c:c8:cd:25:1f:ff:a7:62:f5:ca:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Jan 2 02:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6da6d9936e5576cae6e48ece60cd339d0d52f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:96:c2:f1:37:fc:04:3f:df:31:ed:0d:c3:
7e:42:6e:db:8b:56:e3:28:b5:61:d0:e4:69:4a:6c:
60:8c:7e:6c:09:57:8a:44:a0:9e:91:a2:47:f7:e5:
cd:37:41:81:60:fb:5a:ed:a1:1e:e1:41:38:51:50:
85:bd:6f:c4:2d:6a:b2:32:f6:92:e7:e9:33:64:d6:
75:64:1e:ee:20:2c:b1:2b:04:69:dd:98:00:7b:b8:
54:38:b9:6c:7f:2e:f3:a0:99:54:05:22:dd:bf:4c:
e1:d8:2c:cf:aa:6c:d2:6e:05:83:14:47:55:96:ff:
05:ae:ea:6c:87:d6:46:64:04:20:88:c7:32:26:77:
5f:ab:1e:53:f9:3a:e4:b0:f9:5e:ca:86:a2:95:69:
73:0a:1c:92:ad:c4:f1:30:e9:ef:61:c9:e3:78:60:
82:e6:71:ac:87:ac:f4:69:bb:c5:5d:e6:0e:b3:46:
c6:22:1f:d0:37:c1:4f:f2:5b:fb:db:fb:6e:fd:b7:
3f:e1:cf:8a:48:eb:57:22:29:ba:e8:3a:d8:e6:9d:
62:29:c3:cb:67:f2:8e:68:98:46:78:e1:ac:55:13:
d0:36:32:30:eb:39:cc:fa:5f:17:77:4a:6c:a7:4a:
d0:d1:e1:e9:93:d8:64:35:45:19:80:ae:1e:60:67:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:6D:99:36:E5:57:6C:AE:6E:48:EC:E6:0C:D3:39:D0:D5:2F:0D
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/5tptmTblV2yubkjs5gzTOdDVLw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.236.0/23
195.93.216.0/23
IPv6:
2001:67c:256c::/48
2a05:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:5e:f9:d9:32:ac:fd:56:28:e6:62:36:c6:b5:31:32:bf:77:
c4:01:a9:cf:f7:7c:8d:03:47:05:05:ac:b8:bd:ef:da:a2:35:
4c:fb:60:9f:7d:00:6c:43:60:5c:a6:bc:e9:5a:2d:d5:10:cc:
99:e2:5b:8b:4f:88:d6:36:aa:76:ac:78:30:9a:a8:00:b6:37:
23:6c:f2:78:22:8e:27:79:e1:4f:60:94:65:84:eb:89:85:dc:
1e:e0:54:ee:88:20:dc:e3:4c:6e:4f:08:4e:ba:fb:40:24:d4:
43:9e:2f:df:39:85:13:01:ff:fe:dc:99:96:4a:82:44:67:f1:
18:b7:26:83:cd:d1:3f:57:a1:da:34:35:14:4a:1c:0e:17:32:
cf:21:3d:f5:91:19:54:8f:d5:24:cd:f0:10:ed:fb:2b:fc:c8:
b0:1b:4c:fa:23:38:42:ac:52:72:1c:75:45:e8:82:ae:ef:e8:
10:80:3e:63:6a:1d:c9:d0:70:a3:80:62:78:39:df:53:c8:62:
61:8e:f0:58:f0:72:75:b4:45:62:97:f8:a4:82:52:ba:e1:d7:
01:a7:74:95:99:a4:34:3d:91:30:7c:03:f6:85:83:d2:9e:4c:
e0:bb:13:c4:9b:ce:5d:96:cc:39:90:69:86:42:71:d0:31:16:
86:f4:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:07 2024 by rpki-client on console-ams.rpki-client.org