Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/5jfkxVaK97uWYP34gP2M_WEyHuY.roa
File: 5jfkxVaK97uWYP34gP2M_WEyHuY.roa (raw, json)
Hash identifier: NZCKY7Bt10x8HB5RwKyxMXK3QWqKC1LEasfdxWa4iB4=
Subject key identifier: E6:37:E4:C5:56:8A:F7:BB:96:60:FD:F8:80:FD:8C:FD:61:32:1E:E6
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 01856D53F9BE7A6DADF87AD9639429E42F35
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/5jfkxVaK97uWYP34gP2M_WEyHuY.roa
Signing time: Sun 01 Jan 2023 12:34:58 +0000
ROA not before: Sun 01 Jan 2023 12:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13101
IP address blocks: 194.180.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:f9:be:7a:6d:ad:f8:7a:d9:63:94:29:e4:2f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Jan 1 12:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e637e4c5568af7bb9660fdf880fd8cfd61321ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:a8:e4:8a:cb:05:1b:30:e7:fe:53:bf:73:
52:fb:6c:bb:4d:57:6c:39:4e:57:d1:ca:53:ea:40:
12:29:f1:5f:8a:10:19:7d:e5:3f:29:a9:a5:e4:ad:
9e:d0:cc:1f:46:cc:8c:f9:af:d6:39:b5:18:80:64:
85:25:8d:fc:b0:7d:9b:9c:9c:a5:70:13:71:9c:3f:
4e:11:a4:08:46:33:b7:01:f8:b8:28:d4:7b:7e:86:
41:78:ad:d3:7a:98:7f:3b:76:17:bc:ae:50:83:cf:
01:b7:1e:57:35:dd:22:a7:75:b5:f7:70:a2:0b:27:
5b:a1:a1:d1:5e:46:2a:8b:43:e3:f7:a0:4e:aa:2c:
57:dd:53:88:8f:df:ba:4f:54:05:0d:31:cf:c1:2d:
1e:76:dc:ae:fe:f7:a8:d0:a8:26:a0:a9:43:e6:17:
bc:33:92:ea:8b:55:1d:31:19:ff:7c:bd:e0:bb:ab:
a2:6a:c6:b7:69:d7:bd:b4:04:c1:b2:da:d6:f1:0f:
1d:5f:0e:04:11:a2:f1:67:52:1c:13:2e:52:08:c0:
2c:71:78:7d:64:43:53:8f:65:22:e3:09:7d:27:b6:
25:08:b5:b1:19:02:4b:83:0b:dc:99:cc:1d:93:91:
4d:d2:05:08:09:c5:ab:7e:00:ee:d8:4f:a5:ff:37:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:37:E4:C5:56:8A:F7:BB:96:60:FD:F8:80:FD:8C:FD:61:32:1E:E6
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/5jfkxVaK97uWYP34gP2M_WEyHuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.18.0/24
Signature Algorithm: sha256WithRSAEncryption
06:02:2f:fa:dd:16:e1:e1:fe:db:09:1e:44:d5:51:c2:83:b1:
1f:2d:1f:30:62:2f:d9:f7:ec:90:ce:b3:ff:3a:40:c5:93:42:
85:7f:54:55:30:42:54:28:23:08:72:9f:80:9c:7e:08:c5:d9:
de:d3:e1:ab:09:55:de:8a:a3:d3:31:8a:06:da:46:9b:53:e1:
e1:28:de:83:d6:67:28:e5:93:a4:c4:aa:89:b6:dd:b2:38:ae:
04:eb:a4:7f:b4:4d:f6:85:5d:50:d3:21:e4:b6:7f:c5:9a:4b:
d3:1a:4a:c6:4f:80:25:aa:f3:5c:c2:98:b4:18:3a:9e:42:51:
62:40:e3:ba:46:7a:c6:7b:13:39:30:74:e8:d4:d5:b5:38:bb:
b0:14:14:ac:9f:a2:b0:d7:66:cc:4b:96:8e:10:df:c9:bf:d7:
a5:46:f2:86:de:b8:b5:ed:71:25:ef:1c:4d:7a:af:ee:ce:cf:
c3:32:5b:e6:d5:a5:bd:a4:7b:bf:b5:fb:46:28:f8:86:81:ca:
e8:a9:6d:d7:bb:7f:cf:1f:16:bc:d1:fc:55:51:5f:d9:3d:d9:
87:ff:21:af:c4:a1:ab:8d:e1:10:0f:7e:a3:50:21:9f:55:7a:
ac:1a:b5:53:c7:63:da:e1:75:81:fb:46:34:4d:af:d7:b0:ef:
11:ec:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:30 2024 by rpki-client on console-ams.rpki-client.org