Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/cYgpQxe5eS7fzm9dK5fDw3TxbXA.roa
File: cYgpQxe5eS7fzm9dK5fDw3TxbXA.roa (raw, json)
Hash identifier: y4SqmQqO+w92XKCHWtfiE3ffaMMeY/glfPg/3fb2Kwk=
Subject key identifier: 71:88:29:43:17:B9:79:2E:DF:CE:6F:5D:2B:97:C3:C3:74:F1:6D:70
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 018CC34900908B03C5865084F4BAE3851773
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/cYgpQxe5eS7fzm9dK5fDw3TxbXA.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 37002
IP address blocks: 5.183.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 15 Jan 2024 10:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:00:90:8b:03:c5:86:50:84:f4:ba:e3:85:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7188294317b9792edfce6f5d2b97c3c374f16d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:f8:ff:c0:b1:02:de:65:bf:ec:f7:a1:33:
e2:93:1b:7e:36:4d:55:00:78:b6:9e:4a:c5:92:ad:
de:00:6a:1c:6e:51:6f:98:f1:b4:b8:8a:ca:2f:ae:
08:f6:fa:7c:4d:61:14:0b:4c:d9:8b:cb:e7:2b:1c:
9a:5f:c5:8c:81:ed:bc:9e:93:59:39:60:ed:95:21:
9b:d4:a3:d4:b0:38:5e:d6:47:12:25:9c:3d:3a:d1:
fb:ec:d8:d0:11:8f:ca:e2:f1:3d:6b:c8:7c:ed:3d:
05:d7:34:a9:90:13:0c:3f:ea:65:fc:a5:92:22:6a:
ae:65:7d:06:1c:4c:67:61:e8:7d:35:0a:24:85:07:
40:07:87:59:cc:e9:6c:49:f3:c9:ac:14:44:f8:02:
a2:a1:36:e9:f3:22:24:01:08:1a:95:83:cc:94:27:
1c:9d:38:f9:7a:ee:16:c0:e5:55:fd:2c:b1:e5:9c:
8c:31:9c:ce:bf:6d:9c:e4:c3:6e:e1:c3:40:3e:76:
79:32:58:39:98:10:bb:bb:07:4f:cb:90:99:9b:52:
78:49:a9:74:61:02:bc:99:6d:82:d0:e0:3f:3a:1b:
c2:ff:dd:48:e3:0d:db:df:eb:65:ea:96:f2:fc:d9:
b4:96:52:6b:7f:d5:e6:94:49:a7:45:e2:c9:f6:bd:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:29:43:17:B9:79:2E:DF:CE:6F:5D:2B:97:C3:C3:74:F1:6D:70
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/cYgpQxe5eS7fzm9dK5fDw3TxbXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.212.0/22
Signature Algorithm: sha256WithRSAEncryption
18:fd:06:f1:4a:a4:39:de:05:bd:58:84:d4:bd:56:ee:f5:14:
89:3a:65:79:9e:31:4b:2e:0c:a1:99:9d:5e:4b:60:99:56:55:
c6:77:0d:fa:53:a0:9a:74:80:e5:e2:56:6b:ad:0c:ce:68:c3:
8f:3b:2f:37:65:3f:28:56:e1:e7:1d:89:2f:32:37:27:6a:97:
f6:ce:05:0d:68:c8:b0:30:81:30:42:33:74:78:0d:52:c6:b5:
4c:f2:52:a6:10:12:b6:b6:e9:e6:a1:32:01:be:a3:89:e4:95:
37:93:19:7d:c1:7a:16:b4:bd:84:21:19:87:3a:f9:4a:8c:87:
88:5e:89:23:2f:5b:66:c6:1b:c6:f9:6a:c7:c1:fe:c6:ca:54:
f8:0b:21:ad:a8:43:42:da:fe:4b:6b:11:19:bf:55:96:86:63:
96:5d:f8:54:64:36:24:7f:8a:61:53:2b:aa:d7:ad:46:44:0a:
7f:c1:d5:5f:77:c4:b3:02:b6:6d:13:2d:d9:3c:44:b7:91:f4:
61:ec:66:dc:e8:41:5e:f1:9d:51:c3:1b:87:ff:50:61:9d:4d:
14:50:91:7e:4f:7d:52:79:c3:8d:41:2b:f0:48:50:59:c3:81:
7f:d4:52:fb:fd:cd:f3:99:e5:1a:10:ea:67:d6:8a:e5:13:c7:
ce:23:17:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:25 2024 by rpki-client on console-ams.rpki-client.org