Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/c5mfx8RauCCe830xP1oVUllSj_c.roa
File: c5mfx8RauCCe830xP1oVUllSj_c.roa (raw, json)
Hash identifier: 2/PQOOYRR/I4syx45YChqldU4I9x5Ebnx49iONfCZfo=
Subject key identifier: 73:99:9F:C7:C4:5A:B8:20:9E:F3:7D:31:3F:5A:15:52:59:52:8F:F7
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 018C8B8AF16B3076B0678B832EFBB58626DC
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/c5mfx8RauCCe830xP1oVUllSj_c.roa
Signing time: Thu 21 Dec 2023 08:43:07 +0000
ROA not before: Thu 21 Dec 2023 08:43:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 185.139.180.0/24 maxlen: 24
185.47.137.0/24 maxlen: 24
185.47.136.0/24 maxlen: 24
185.47.139.0/24 maxlen: 24
195.177.112.0/24 maxlen: 24
195.177.115.0/24 maxlen: 24
195.177.114.0/24 maxlen: 24
195.177.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:8a:f1:6b:30:76:b0:67:8b:83:2e:fb:b5:86:26:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Dec 21 08:43:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73999fc7c45ab8209ef37d313f5a155259528ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:c7:8a:91:ff:50:61:5b:52:8f:4e:45:6f:
6b:29:7c:cb:a4:1e:58:7c:4d:fd:b9:24:03:e0:8b:
04:92:2b:27:4f:d6:48:f5:1c:e8:9b:32:b4:db:69:
dd:62:9a:1c:8a:a9:79:17:99:b1:5b:0e:48:c6:bb:
5b:63:9d:2e:c9:cc:d7:f8:9d:f7:65:2c:c5:e0:23:
f4:5b:14:b6:c5:42:53:7c:57:7a:c9:25:07:36:03:
b0:7b:86:97:45:a5:29:e1:31:3f:27:c5:1a:62:45:
7d:b2:1c:55:d4:b5:a2:ff:87:56:19:4a:00:ac:87:
12:f1:a5:da:e3:c9:37:a7:b2:e9:73:36:7d:a6:43:
86:09:2b:e9:7e:a1:9d:a8:27:4d:f4:78:ac:a1:d4:
0c:52:41:55:a4:77:41:bc:bc:6d:37:74:ef:b1:60:
a7:51:17:bc:a4:f3:e0:d9:0f:2d:f0:b7:02:8c:53:
ea:07:30:27:2d:61:0d:79:85:2c:7e:03:70:08:db:
7d:d7:ee:d9:2a:0b:ab:e9:85:ee:1a:1a:e4:ca:4e:
93:e3:83:a1:57:d6:bc:7c:43:ad:83:a1:52:0f:63:
a6:e6:1b:cb:df:a9:54:f3:45:b3:14:f3:4d:d8:2b:
05:d6:31:0f:ee:b6:97:72:d8:4e:2a:e3:44:44:ae:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:9F:C7:C4:5A:B8:20:9E:F3:7D:31:3F:5A:15:52:59:52:8F:F7
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/c5mfx8RauCCe830xP1oVUllSj_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.136.0/23
185.47.139.0/24
185.139.180.0/24
195.177.112.0/22
Signature Algorithm: sha256WithRSAEncryption
00:de:48:15:cd:92:b2:db:6b:ac:87:35:12:0d:9f:81:8b:a1:
ce:2d:a6:c6:57:4a:60:f9:05:55:d6:63:0a:40:70:4b:8d:b6:
8d:39:a4:04:67:58:28:4e:bc:89:fd:89:fe:d7:db:72:43:6e:
9c:57:3a:08:26:57:6e:a4:e4:72:c5:31:51:40:c6:fe:ce:98:
e3:8e:de:51:ed:44:2d:3a:9a:a6:29:d3:d1:85:20:dc:d4:c8:
d8:08:25:e0:13:db:41:c6:84:74:e1:59:86:ec:78:89:b9:67:
1b:a3:1d:06:49:b2:24:c1:d8:ec:d0:32:a5:a6:b9:58:c9:75:
9f:05:d7:30:e9:ba:e3:c5:2a:4e:36:9a:dc:b2:a4:ba:ff:19:
71:e9:34:c5:85:f6:9d:77:22:82:ff:96:5a:1e:1c:b1:6d:e8:
d7:85:e6:40:be:73:7e:87:08:a6:41:14:20:70:15:14:38:e7:
1a:5e:93:7b:29:55:09:a0:99:b5:8d:ce:09:f4:76:6a:fc:6b:
a3:2a:cb:2a:0c:0e:07:05:dc:de:ce:46:10:20:d8:21:da:8f:
94:50:80:d4:2d:11:42:65:de:a0:4c:5e:81:45:2a:16:3a:a5:
61:cb:6f:92:95:7e:ca:1e:bc:82:86:4d:22:29:52:5c:aa:47:
10:d5:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org