Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/f0ZgIhdvWNv0Llg3u-btYxTOo_4.roa
File: f0ZgIhdvWNv0Llg3u-btYxTOo_4.roa (raw, json)
Hash identifier: 77F5L795NOXhuJ4DiHzPJEczy2JMYH9ghVsTmTmq0qg=
Subject key identifier: 7F:46:60:22:17:6F:58:DB:F4:2E:58:37:BB:E6:ED:63:14:CE:A3:FE
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018D45F71E97A77E6DA85F802508F712EF53
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/f0ZgIhdvWNv0Llg3u-btYxTOo_4.roa
Signing time: Fri 26 Jan 2024 13:30:39 +0000
ROA not before: Fri 26 Jan 2024 13:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211020
IP address blocks: 5.201.162.0/24 maxlen: 24
89.37.12.0/24 maxlen: 24
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 17:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:f7:1e:97:a7:7e:6d:a8:5f:80:25:08:f7:12:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 26 13:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f466022176f58dbf42e5837bbe6ed6314cea3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:ac:d5:b5:07:45:1d:f2:3d:79:b2:35:17:
6b:13:5a:14:1d:a5:8a:ba:e8:35:1e:15:8d:d9:64:
49:96:0d:8a:11:da:80:26:c8:8a:18:c1:be:f3:9a:
9b:7e:2d:f9:4f:8a:b6:47:46:ae:11:43:a4:86:cf:
bc:53:29:fe:21:b1:c6:bd:84:7d:38:a4:8e:32:c7:
a0:72:d7:7f:27:b1:5d:a3:a8:a2:fd:79:b8:dc:82:
7a:e8:6b:9d:c3:ad:d1:fe:fc:a5:b5:93:65:c6:12:
06:67:84:4d:95:b5:5b:df:b6:d2:9b:60:5a:0c:12:
9a:87:a7:86:68:4f:b9:09:fc:c4:1e:d2:30:45:44:
cc:9e:3e:57:2d:fa:70:c3:de:6f:9d:17:3a:e6:f2:
bc:0a:09:20:69:50:4a:f4:8a:e9:9a:22:a7:9b:5b:
d0:a7:3a:64:ba:bb:fc:a5:99:d7:40:fc:99:ae:e3:
47:13:9e:0a:58:c6:7f:06:f6:4c:c3:e2:77:8a:b2:
07:e9:88:ba:51:b9:95:b6:bd:60:42:60:32:64:75:
7f:4d:ba:d1:c4:e9:2d:68:db:56:70:ae:de:c1:67:
a8:d9:89:f8:1b:20:d0:09:62:bf:92:e7:77:85:c6:
1d:60:46:ed:58:5c:06:eb:f5:4d:03:33:33:86:6b:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:60:22:17:6F:58:DB:F4:2E:58:37:BB:E6:ED:63:14:CE:A3:FE
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/f0ZgIhdvWNv0Llg3u-btYxTOo_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.162.0/24
89.37.12.0/24
185.135.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:87:b8:17:b1:85:28:24:d8:28:c1:b8:b9:b4:cb:5b:4c:94:
f1:b8:54:11:7e:d3:55:84:d0:7f:b8:59:fa:a3:86:a5:c7:4d:
20:b9:46:95:ae:7a:b4:64:56:52:17:79:dd:70:f6:9c:6c:40:
ab:d2:7f:a0:46:ae:43:6e:fe:ae:06:9a:3e:a6:1a:db:9a:b5:
56:fe:9e:30:22:0c:c3:29:25:75:c3:52:cc:89:2b:56:cf:79:
46:a5:91:f1:b1:80:f3:7f:55:19:34:c0:08:46:3c:06:02:d0:
59:97:b5:1d:f1:1a:74:62:e4:b6:ee:d4:c4:ca:2e:21:27:2a:
1e:d2:18:e5:9b:7a:57:1d:e2:c9:0c:29:bd:ed:a6:c9:87:b0:
42:ec:94:e9:07:71:49:dd:df:97:5c:9f:b6:5e:9f:e9:61:c2:
51:b4:fd:02:b2:c9:aa:bc:bd:00:08:f0:87:d3:e0:d3:f0:d0:
bf:e9:b6:98:db:fc:de:87:28:d7:06:ba:ce:7d:3a:79:31:09:
b9:ef:db:a5:52:6b:57:af:88:16:2e:1c:7d:3e:cf:de:09:4e:
73:0a:5f:9e:8e:f5:f3:f6:6a:d8:57:13:1d:2c:e8:e9:5d:44:
98:ae:13:d9:b6:4c:8e:6c:ff:25:ba:f2:65:80:da:53:d3:d2:
69:8a:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:19 2024 by rpki-client on console-ams.rpki-client.org