Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5YhgfgnwYRUjW-hfOJ23ndMSjqc.roa
File: 5YhgfgnwYRUjW-hfOJ23ndMSjqc.roa (raw, json)
Hash identifier: olaJaE0TEsBwiGxdVoGix6aBODYhUCiguEKIZS1pSwY=
Subject key identifier: E5:88:60:7E:09:F0:61:15:23:5B:E8:5F:38:9D:B7:9D:D3:12:8E:A7
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018C44B87AB3207C8B147E55A378A0E4E484
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5YhgfgnwYRUjW-hfOJ23ndMSjqc.roa
Signing time: Thu 07 Dec 2023 14:39:49 +0000
ROA not before: Thu 07 Dec 2023 14:39:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202265
IP address blocks: 94.199.1.0/24 maxlen: 24
2a04:5b81:1fff::/48 maxlen: 48
2a04:5b80:53::/48 maxlen: 48
2a04:5b86:1::/48 maxlen: 48
2a04:5b81:1000::/40 maxlen: 40
2a04:5b87:1::/48 maxlen: 48
2a04:5b80:202::/48 maxlen: 48
2a04:5b84:1::/48 maxlen: 48
2a04:5b81:2010::/44 maxlen: 44
2a04:5b81:2060::/44 maxlen: 44
2a04:5b82::/44 maxlen: 44
2a04:5b82:8::/48 maxlen: 48
2a04:5b80:200::/48 maxlen: 48
2a04:5b80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:b8:7a:b3:20:7c:8b:14:7e:55:a3:78:a0:e4:e4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Dec 7 14:39:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e588607e09f06115235be85f389db79dd3128ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:d7:b5:89:4c:82:c4:af:78:d6:ce:a1:fa:
71:f3:04:46:f8:a4:5b:23:88:83:92:ab:f5:9e:41:
f1:2a:24:2f:f7:4f:36:27:61:49:fd:d9:64:ff:25:
e6:1f:98:70:5e:2e:7f:76:a3:ba:fd:2a:b0:5d:29:
f1:bb:da:71:54:2e:39:b4:40:18:07:22:e9:bb:c2:
e3:51:56:e4:c8:c5:42:3b:f2:96:e7:5d:a2:ed:79:
43:95:78:9c:de:6f:a1:c5:44:67:8a:57:87:74:b1:
41:49:19:d4:65:3f:a5:b2:9c:63:27:c3:9c:cf:84:
db:4d:a4:7c:28:30:ac:08:85:a9:72:4b:3a:d2:53:
9f:15:29:c4:04:06:2e:12:33:f6:0f:1e:0e:65:5a:
93:35:a0:32:95:cf:28:2b:17:12:58:d0:9e:d6:c8:
58:d0:2d:27:e1:18:63:1e:b3:3f:f3:b0:4a:68:f1:
8c:9c:96:b9:08:bb:0a:3d:9b:e6:7e:89:8f:0e:f8:
74:5c:b7:26:c2:99:53:5f:e9:76:2f:b2:1b:49:a8:
04:d3:08:59:64:fb:00:d4:fc:ee:f6:d4:d9:51:48:
54:d8:37:24:40:68:12:03:8f:dc:c7:e5:6b:4c:5e:
e2:33:9c:9f:16:af:f6:05:b0:e6:fe:36:df:e9:0c:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:60:7E:09:F0:61:15:23:5B:E8:5F:38:9D:B7:9D:D3:12:8E:A7
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5YhgfgnwYRUjW-hfOJ23ndMSjqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.1.0/24
IPv6:
2a04:5b80::/48
2a04:5b80:53::/48
2a04:5b80:200::/48
2a04:5b80:202::/48
2a04:5b81:1000::/40
2a04:5b81:1fff::/48
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b82::/44
2a04:5b84:1::/48
2a04:5b86:1::/48
2a04:5b87:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:e5:ac:47:8d:9a:2f:3d:57:01:dd:02:7d:99:1e:b8:66:2b:
fc:8e:4e:8f:d6:b2:d7:c0:44:63:7c:33:20:c6:be:ca:34:19:
d7:a9:13:b0:f6:f7:47:34:03:65:a7:7e:b0:54:6f:20:27:2e:
b5:27:a5:d6:e3:f2:8c:be:2c:6b:46:10:8b:ed:38:90:f3:a9:
23:6a:f7:84:c1:74:f0:d1:e1:d0:9c:9b:aa:05:f8:92:c6:13:
f8:30:9f:55:e7:10:6b:c3:be:95:9d:8f:9b:65:c4:72:62:58:
d4:dd:b8:ba:ec:07:dd:6d:70:d2:81:26:07:10:a7:47:ef:ec:
f2:6e:df:da:c9:63:c8:c7:3d:06:ec:3a:05:89:58:c3:24:1a:
46:57:8d:67:44:fa:3e:b9:c8:1b:68:c9:35:f9:ea:08:cf:06:
0f:b6:58:75:ab:34:ad:16:1d:7a:a1:14:f5:f8:d7:9f:b2:99:
9d:a2:4b:b5:14:e3:e5:45:d3:6f:25:17:56:17:88:e3:75:8c:
73:c7:9c:80:9a:21:71:53:4b:d5:5d:4c:ff:fb:3e:6f:bd:03:
86:a3:6c:f3:91:a8:05:97:fe:2a:96:17:84:7c:81:54:c0:57:
71:b2:8e:e6:00:74:25:d8:4b:b6:8a:6b:26:f1:6d:ba:8f:f2:
4b:e1:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:20 2024 by rpki-client on console-fra.rpki-client.org