Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/5OUcXBFlhcNSyCvQiuVHic0tb-U.roa
File: 5OUcXBFlhcNSyCvQiuVHic0tb-U.roa (raw, json)
Hash identifier: ohSbTSLup3f43HulBslWPna1cn5lkscbBZkkxjykFgA=
Subject key identifier: E4:E5:1C:5C:11:65:85:C3:52:C8:2B:D0:8A:E5:47:89:CD:2D:6F:E5
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0192D7744FA46F585BD7B2E0E435A408D058
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/5OUcXBFlhcNSyCvQiuVHic0tb-U.roa
Signing time: Tue 29 Oct 2024 08:46:16 +0000
ROA not before: Tue 29 Oct 2024 08:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.101.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 03 Nov 2024 13:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:74:4f:a4:6f:58:5b:d7:b2:e0:e4:35:a4:08:d0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Oct 29 08:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4e51c5c116585c352c82bd08ae54789cd2d6fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:ee:59:03:5d:66:41:9b:26:90:68:39:d1:
3c:6a:cf:9c:e3:4d:ee:b6:ab:9e:cc:a6:95:6e:52:
b4:cb:ef:61:51:04:06:b6:6e:cc:7b:49:96:23:6a:
f7:86:3a:d9:a4:28:e9:f9:26:d1:c5:75:3b:83:92:
4a:d7:9c:99:60:25:a0:90:eb:da:85:9e:ab:95:d8:
7f:2d:7b:01:64:e2:40:92:57:ac:e0:61:3b:5f:08:
a7:42:f5:c6:c0:c3:b5:1e:67:38:42:38:9b:0c:77:
3f:fb:db:95:1d:a5:70:81:31:46:f8:d8:96:d7:a7:
0c:7e:19:57:78:b1:df:7f:96:2d:ca:c5:5a:9d:78:
f3:a0:12:b3:0d:a6:f3:74:93:9b:9b:88:3d:ba:c7:
58:56:be:d9:b3:ff:97:5a:d9:74:a9:99:f0:09:1d:
93:44:e9:e3:8f:80:ea:7a:8a:f6:a5:98:8d:8e:f4:
f9:ed:4b:85:f0:fe:ec:1b:ad:82:e8:d4:f3:26:1b:
49:17:e4:cc:47:9b:98:c8:f2:f8:20:62:65:6c:b4:
13:16:4c:cd:19:36:11:ac:17:cb:b9:95:45:86:00:
2d:e0:00:c9:f1:95:1e:e6:74:6a:4f:19:dc:8f:2f:
92:1c:6a:3b:9d:36:02:65:1b:2a:96:62:e5:08:a5:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:1C:5C:11:65:85:C3:52:C8:2B:D0:8A:E5:47:89:CD:2D:6F:E5
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/5OUcXBFlhcNSyCvQiuVHic0tb-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:6e:00:cd:e7:d0:d9:8a:eb:eb:72:af:f5:ed:36:12:a3:87:
eb:b0:96:8a:ca:1f:44:91:fe:f1:50:2c:74:d2:b2:ad:28:67:
26:3e:e1:c2:e7:79:08:c4:04:0a:21:ec:a4:50:7e:87:0a:2f:
98:0a:64:bc:30:f6:f4:55:25:42:46:97:37:3b:f1:c2:75:f3:
23:38:06:f6:2e:22:35:b3:3d:c1:f7:99:ef:b2:f3:32:b7:b8:
ac:cd:6d:d9:13:76:6e:2c:b2:2d:7d:b1:c7:e6:5a:31:e9:a4:
df:b5:4f:28:30:97:9e:6e:8d:e8:c8:00:ed:e5:32:59:3b:41:
2d:df:75:13:d5:33:8d:c1:33:90:3d:0f:e6:48:a4:60:1c:97:
cd:75:82:ce:78:b6:1d:18:7c:87:0f:35:0e:5b:00:83:58:7c:
62:0b:0b:c2:1e:57:42:34:19:4d:7c:26:e4:0c:ad:e9:8e:e8:
75:52:e4:b1:aa:f5:d8:5c:57:7c:b9:91:7b:7a:b3:37:86:ab:
50:63:26:09:a2:5a:67:f3:87:05:ea:0a:ed:a2:74:03:84:72:
9f:b7:21:c8:f5:17:0b:e0:95:72:f6:df:34:39:f1:4b:52:78:
77:f8:6b:4f:7f:3f:c9:c4:5f:7a:ab:b7:bb:90:ef:3f:b5:2b:
2b:dc:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org