Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5eSTz52GUaTD5NXX0FaVcNezeoA.roa
File: 5eSTz52GUaTD5NXX0FaVcNezeoA.roa (raw, json)
Hash identifier: BTgabhCoT9/CvBL3xFVxvOXcspncBh3Y6U0t46ACaIk=
Subject key identifier: E5:E4:93:CF:9D:86:51:A4:C3:E4:D5:D7:D0:56:95:70:D7:B3:7A:80
Certificate issuer: /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial: 018CC49338E40BE0D323346104CD0903F335
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5eSTz52GUaTD5NXX0FaVcNezeoA.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 194.145.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 13:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:38:e4:0b:e0:d3:23:34:61:04:cd:09:03:f3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e493cf9d8651a4c3e4d5d7d0569570d7b37a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:c6:4c:ae:02:27:96:1f:03:5d:3d:55:f1:
7a:39:72:8f:49:96:9a:25:3b:2b:f7:a4:04:df:80:
c1:5a:f8:0c:be:f3:18:81:fb:0b:69:64:bc:11:14:
08:d3:0a:57:70:79:33:5e:5a:cb:54:21:a6:48:7a:
59:33:73:7e:8d:cb:da:13:a2:33:96:d3:67:b0:46:
9b:45:ba:f0:0b:7e:02:26:52:a2:48:30:4e:61:0b:
6e:82:ad:31:41:6c:a0:c2:e0:02:1e:4f:5c:bf:54:
74:c8:ac:23:50:e4:28:2a:b8:7e:68:58:28:98:61:
d0:a0:5d:89:1f:d1:9b:67:20:ba:be:75:ec:e4:25:
b9:44:e8:23:6b:69:19:53:69:73:0c:42:20:47:78:
44:17:12:58:71:54:51:7b:09:bf:29:41:84:36:61:
3d:d0:ee:4f:32:45:7f:24:8d:d1:25:79:18:78:13:
84:0f:21:95:e3:eb:ad:9d:cb:89:ea:47:38:9a:4a:
24:c9:8c:ea:63:4c:82:a8:9f:dd:8d:b0:d8:dd:5a:
29:0d:50:f2:43:53:23:27:be:f7:32:08:65:d1:6b:
1e:2e:0a:74:67:9c:92:47:e7:9a:45:31:60:21:9a:
6f:2c:33:a9:70:6a:f4:12:55:5e:4a:69:34:15:c7:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:93:CF:9D:86:51:A4:C3:E4:D5:D7:D0:56:95:70:D7:B3:7A:80
X509v3 Authority Key Identifier:
keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5eSTz52GUaTD5NXX0FaVcNezeoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.157.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6f:7b:4a:1e:86:84:cc:b5:83:ee:1f:bc:a9:73:e5:1f:97:
22:47:75:b2:7b:53:62:e1:39:9f:59:1b:c7:68:3b:05:5e:c7:
a7:8d:c6:5f:37:3c:f5:e7:1d:1e:b3:ef:70:b5:a0:58:ab:08:
20:37:37:59:b1:50:a4:30:86:6f:9b:65:35:4a:5c:de:09:e9:
a9:5d:86:37:21:1c:3c:2f:c5:a8:b3:73:08:5a:5f:25:5d:f7:
c4:16:70:60:50:54:76:63:13:75:ea:20:fe:5b:e2:5c:76:3e:
75:78:b0:0a:57:44:99:17:b6:89:0a:7f:7d:9e:7c:47:f4:7f:
49:10:da:65:b1:2e:2f:92:c1:05:77:e9:45:0c:1b:8c:58:2b:
33:db:a0:8e:6d:3c:18:ac:d6:f9:27:8b:d3:06:e8:f6:87:37:
93:fc:ae:01:d2:bd:f3:34:06:aa:58:06:a4:5e:53:5e:bb:13:
55:f1:99:bd:c6:12:e5:6f:7f:7e:9b:d5:4c:07:f6:85:37:06:
8c:aa:ce:58:90:13:04:1f:d0:1d:d0:6b:98:97:d4:92:e3:df:
d1:ef:5f:e6:27:e5:1c:c7:2e:0f:eb:ad:60:7d:ed:73:c1:02:
ba:b8:7c:82:36:bc:2b:14:bb:cd:7e:14:63:8a:74:d4:9d:f1:
8b:05:7a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:44:35 2024 by rpki-client on console-fra.rpki-client.org