Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/4Z1fhbx6yI9l7pyZizcOzQLycoU.roa
File: 4Z1fhbx6yI9l7pyZizcOzQLycoU.roa (raw, json)
Hash identifier: 829rtA0rocCEHTlKw/ZhQp6xQXZrXeacx2BIqNqVnYY=
Subject key identifier: E1:9D:5F:85:BC:7A:C8:8F:65:EE:9C:99:8B:37:0E:CD:02:F2:72:85
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 01856EA6A7F9BC116BF676BAD9B153DFA79B
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/4Z1fhbx6yI9l7pyZizcOzQLycoU.roa
Signing time: Sun 01 Jan 2023 18:44:53 +0000
ROA not before: Sun 01 Jan 2023 18:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196890
IP address blocks: 5.149.192.0/21 maxlen: 21
193.19.124.0/23 maxlen: 23
193.25.222.0/24 maxlen: 24
194.28.104.0/22 maxlen: 22
2a00:d5c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:a7:f9:bc:11:6b:f6:76:ba:d9:b1:53:df:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Jan 1 18:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e19d5f85bc7ac88f65ee9c998b370ecd02f27285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:45:0b:c0:c5:22:7d:03:de:92:f8:95:20:2b:
3b:b1:df:e5:08:6b:ac:a0:df:bf:0c:6f:cb:17:6c:
8d:73:97:04:24:45:dc:c2:0b:56:0a:26:bb:42:7b:
0e:e5:99:93:49:67:24:1e:74:71:8a:7a:08:26:f2:
42:25:3b:52:ef:11:b3:b7:5d:03:5d:16:95:42:76:
5a:83:cb:8e:5c:77:45:2e:54:ab:0d:4f:d8:99:d1:
30:66:35:67:ce:e4:3d:46:c7:36:e0:1b:79:53:10:
2a:73:d6:1f:c7:d9:c4:b4:2d:4c:54:75:53:92:f3:
a9:b3:61:dd:57:fc:13:ff:6b:d2:82:1f:ba:76:83:
34:75:7d:6b:4a:c1:6d:6a:84:61:56:49:f2:67:09:
48:45:37:4b:6b:27:40:46:6f:81:51:88:d2:d8:8b:
86:55:d5:5d:b1:f3:9c:39:07:f8:ac:5e:0d:46:ee:
f9:17:10:14:2b:1f:93:b9:50:18:40:65:b8:c5:e5:
86:15:70:fb:bf:f0:6b:05:b9:78:6a:18:83:ae:73:
d4:b2:64:c0:4a:08:31:19:81:a6:f5:ca:81:d4:3e:
fa:7c:c3:70:7b:08:c2:f9:06:09:b7:02:b2:62:3c:
50:4b:67:cc:9e:a6:f1:54:50:f8:e9:6c:a8:53:13:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:5F:85:BC:7A:C8:8F:65:EE:9C:99:8B:37:0E:CD:02:F2:72:85
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/4Z1fhbx6yI9l7pyZizcOzQLycoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.192.0/21
193.19.124.0/23
193.25.222.0/24
194.28.104.0/22
IPv6:
2a00:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:47:5b:59:6e:c9:ed:2e:01:9e:0a:e7:41:8d:0d:2c:2a:88:
b7:00:46:11:de:a6:18:28:04:04:c7:e9:55:82:e0:86:78:12:
72:ea:fd:ac:35:ba:08:44:88:6c:9a:9a:c7:46:c7:13:70:9c:
5b:ab:90:a5:d9:99:01:06:b4:ab:0a:16:49:8a:83:e4:3a:4c:
26:03:75:a1:ce:62:4e:f8:0b:25:00:da:db:4f:c4:d1:01:51:
39:d9:d3:42:5b:8b:a3:25:91:8e:08:7c:4f:56:d1:7f:60:a6:
70:ee:97:35:07:7b:62:53:70:0c:c1:8d:69:40:21:ab:cc:e1:
8b:f5:bc:b3:cd:4d:97:20:7c:fb:08:7f:73:27:6f:d1:ca:37:
fc:31:1a:29:ae:da:73:fa:0f:fc:89:5c:1b:d5:f4:77:5e:fb:
23:a8:e1:9a:47:cc:ed:0c:1b:7f:83:ff:ee:40:80:22:47:cc:
65:df:73:77:43:86:29:cb:7a:f0:40:34:b8:4b:fb:73:a4:73:
53:39:5b:1e:48:03:e8:69:d9:52:e9:31:ad:45:35:c3:e1:80:
49:50:47:8b:26:e5:53:54:7d:e0:f1:1f:b3:04:c7:86:9b:52:
e9:22:7d:67:e7:3d:d1:93:5a:d8:4a:23:ce:aa:02:5c:41:29:
15:04:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:52 2024 by rpki-client on console-fra.rpki-client.org