Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/5TH_LdA7FvYzl63oXw5WOwleCSw.roa
File: 5TH_LdA7FvYzl63oXw5WOwleCSw.roa (raw, json)
Hash identifier: gdXDSJQCpyXsLTH9aWYfM4XoYR9l8Nv0VTtCNceB57k=
Subject key identifier: E5:31:FF:2D:D0:3B:16:F6:33:97:AD:E8:5F:0E:56:3B:09:5E:09:2C
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 018572D5AA5344C7D8A8B0022A45B647040D
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/5TH_LdA7FvYzl63oXw5WOwleCSw.roa
Signing time: Mon 02 Jan 2023 14:14:43 +0000
ROA not before: Mon 02 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208043
IP address blocks: 46.236.110.0/24 maxlen: 24
83.209.153.0/24 maxlen: 24
80.244.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:aa:53:44:c7:d8:a8:b0:02:2a:45:b6:47:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jan 2 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e531ff2dd03b16f63397ade85f0e563b095e092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:ed:67:c5:04:f3:b3:8a:c1:2e:b8:ff:3f:
fb:35:19:98:f0:95:58:f1:88:a6:56:1e:2e:c0:18:
55:dd:66:de:c3:ae:03:e7:c8:0b:23:f4:b0:d0:9b:
80:27:62:76:b0:6f:19:35:ea:04:be:ef:34:22:f4:
e6:82:31:6b:ed:40:4a:e3:ff:2e:c7:a8:71:cd:70:
c4:08:f1:85:90:9a:02:de:56:de:7e:cf:27:c7:ef:
92:22:bb:40:16:5e:01:16:9a:b4:e9:09:49:6f:4e:
64:6e:a1:15:d7:fe:40:f0:49:d5:31:6d:1c:c8:65:
58:a2:ab:e6:69:bd:70:b2:3a:3f:a3:5e:6c:77:75:
ce:e9:32:a5:92:f7:b3:54:22:5f:0a:69:af:3e:98:
9a:9b:77:e5:67:6a:d4:4b:bb:4b:7f:8a:67:a6:2e:
08:96:5d:c2:5d:72:bb:0b:10:2f:4d:b5:51:38:f8:
e1:c7:cb:3f:b2:d0:f9:64:68:7c:28:5d:c5:2c:87:
43:45:be:2f:a8:2a:fc:c0:88:6e:d7:0d:53:fa:8b:
83:c3:00:46:53:82:90:cf:45:b1:a7:6d:4b:e1:40:
f0:8a:1a:15:fb:19:4a:a2:11:c7:77:08:cb:48:9e:
dc:fa:43:79:01:d3:f0:99:e9:08:02:52:d5:72:c2:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:FF:2D:D0:3B:16:F6:33:97:AD:E8:5F:0E:56:3B:09:5E:09:2C
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/5TH_LdA7FvYzl63oXw5WOwleCSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.110.0/24
80.244.64.0/24
83.209.153.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9b:c0:d0:b9:f5:65:4a:22:4b:8a:9e:65:24:dd:5b:76:56:
b5:c7:b8:68:3f:9a:fa:62:f0:59:6b:24:e3:1c:87:f3:49:cf:
43:6e:0c:90:8c:83:3d:ef:43:3c:6a:a6:30:1e:71:07:13:9c:
cd:2c:ef:83:1c:41:1f:55:8a:f7:13:f2:93:42:2c:09:04:60:
a4:ca:7b:ac:ba:b8:72:69:9c:fe:db:9c:ff:75:b8:ca:22:25:
c6:75:ca:42:30:10:b2:dd:86:c6:11:9f:42:47:8b:da:96:b0:
3e:3f:4c:a1:5a:c3:cc:bd:83:9d:8c:c9:c1:c9:78:40:ee:0b:
f3:e3:6a:2a:09:ed:ef:ad:81:e7:35:7a:4d:35:90:f7:d0:0b:
89:17:01:b0:1c:75:c0:7b:38:81:c0:b0:7d:2f:af:a1:e6:c1:
c9:e6:86:7d:e6:1d:e5:b7:fc:e8:75:0d:ef:bb:d3:e8:a7:1a:
0b:26:c3:e9:8d:da:32:68:8a:3c:cf:6a:48:15:63:e8:b7:2e:
41:95:b6:83:3d:16:76:bf:69:32:34:68:3c:73:2f:f8:43:22:
c1:96:dd:10:22:b5:1f:01:2a:06:35:90:59:02:01:69:0f:28:
f7:86:42:97:68:63:9a:bb:f7:fe:5a:77:da:46:b9:d6:ba:60:
13:0b:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:46 2024 by rpki-client on console-fra.rpki-client.org