Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/N5BirKOx6dz5uPSW4zo_4YMc3ng.roa
File: N5BirKOx6dz5uPSW4zo_4YMc3ng.roa (raw, json)
Hash identifier: k7P2ZyxZJd1IgftEqwau+MHFBvQbrQTQ6kxJJ164FbY=
Subject key identifier: 37:90:62:AC:A3:B1:E9:DC:F9:B8:F4:96:E3:3A:3F:E1:83:1C:DE:78
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0FA3C189E59DE388BEDB041D98C61
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/N5BirKOx6dz5uPSW4zo_4YMc3ng.roa
Signing time: Mon 02 Jan 2023 10:04:56 +0000
ROA not before: Mon 02 Jan 2023 10:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60711
IP address blocks: 84.236.248.0/24 maxlen: 24
84.236.249.0/24 maxlen: 24
5.154.39.0/24 maxlen: 24
84.236.182.0/24 maxlen: 24
84.236.181.0/24 maxlen: 24
88.148.98.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:fa:3c:18:9e:59:de:38:8b:ed:b0:41:d9:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379062aca3b1e9dcf9b8f496e33a3fe1831cde78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:c9:52:2a:f1:60:b2:e1:5e:f1:0f:9e:90:
b8:5c:2b:14:32:03:00:e0:ca:cd:33:16:53:d9:3b:
bf:3d:37:ef:50:a9:98:df:b2:b8:dc:af:44:7a:18:
bf:74:cd:0a:b0:4e:02:63:13:3c:fd:28:0a:83:ab:
e9:cf:56:63:31:7e:63:49:28:d0:99:cc:8e:41:09:
9f:3a:e9:0d:a0:96:b2:4f:de:51:c0:39:3d:fd:57:
55:85:61:b5:50:ef:5f:7e:f8:3f:fb:54:53:32:c1:
d1:df:f7:39:44:d3:b3:a4:f1:ea:22:1b:80:47:56:
bd:0c:3f:18:40:7c:a0:52:99:92:04:c0:bc:65:52:
a9:18:ab:7e:75:c2:63:e7:30:62:08:60:ee:47:d3:
41:be:81:2e:ab:12:18:e3:5a:d9:ac:46:3d:17:1c:
3c:98:e2:66:06:5b:cd:a2:65:84:24:b8:94:c9:dd:
b6:0a:00:8f:7c:1b:e3:98:08:27:33:5f:8d:42:19:
c3:71:60:b8:68:79:3e:3f:66:c7:8f:86:d4:f7:93:
8d:3f:83:16:e5:53:a7:8c:11:25:9c:c3:fc:eb:d3:
46:b3:b2:99:a6:f2:7c:f6:b4:46:30:e0:55:7f:54:
f9:6b:f4:a4:92:23:39:74:20:1b:75:96:3d:c9:5e:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:62:AC:A3:B1:E9:DC:F9:B8:F4:96:E3:3A:3F:E1:83:1C:DE:78
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/N5BirKOx6dz5uPSW4zo_4YMc3ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.39.0/24
84.236.181.0-84.236.182.255
84.236.248.0/23
88.148.98.0/23
Signature Algorithm: sha256WithRSAEncryption
89:51:17:7b:4c:69:d0:58:57:8d:9f:e8:a1:ee:69:b9:e5:3f:
ea:86:8c:d0:b5:2b:29:3a:40:77:44:59:70:11:fe:21:fb:6e:
f2:d5:7d:6c:a6:d0:da:1b:7a:29:2f:4a:58:89:d5:37:55:5d:
3a:4e:40:f7:26:0e:b5:21:c8:19:87:e1:f5:6e:b5:4a:5c:00:
82:64:e2:be:01:1c:f1:0f:65:71:28:2b:6a:fc:d1:6e:98:e5:
23:17:08:da:85:04:58:58:de:53:59:37:28:f0:8e:e1:3a:80:
d9:7c:8c:44:60:5a:67:ac:7e:1a:b4:a8:cc:a8:c3:1f:85:e1:
30:aa:30:be:4f:08:dc:18:83:6c:99:0f:9b:42:ba:4b:96:56:
62:d3:0f:f8:74:7b:54:12:0e:b4:5d:fa:5a:dc:4b:69:d8:d8:
39:8d:a6:4b:02:8f:ad:11:00:34:5a:03:5d:c6:5e:56:68:03:
cf:4a:b6:f3:98:97:0c:bd:d7:04:36:7b:f2:a5:b6:d3:87:29:
95:9c:c1:f6:89:78:12:3a:aa:2d:0b:95:d2:ad:0b:0f:36:e1:
bf:fd:6b:50:7d:49:3b:02:d7:52:50:5a:3e:d3:a6:12:a8:6d:
74:4d:86:7c:d6:1e:59:64:5e:38:6e:aa:a9:64:c4:97:da:1e:
0c:a3:0f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:46 2024 by rpki-client on console-ams.rpki-client.org