Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/4tXwBM3U2mTdLU6SZ2pNWL3GZNQ.roa
File: 4tXwBM3U2mTdLU6SZ2pNWL3GZNQ.roa (raw, json)
Hash identifier: yIRgc9bDuU/bk+OG+Dv0RtNFrx48IRB4lEFpGQdhgsQ=
Subject key identifier: E2:D5:F0:04:CD:D4:DA:64:DD:2D:4E:92:67:6A:4D:58:BD:C6:64:D4
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 01856D81B40FDBB01EBBE6E4B1A6E2EB0908
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/4tXwBM3U2mTdLU6SZ2pNWL3GZNQ.roa
Signing time: Sun 01 Jan 2023 13:24:54 +0000
ROA not before: Sun 01 Jan 2023 13:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209968
IP address blocks: 185.23.5.0/24 maxlen: 24
2a09:be44::/30 maxlen: 48
2a09:be41::/32 maxlen: 48
2a12:49c0::/29 maxlen: 48
2a0e:ec00::/30 maxlen: 48
2a09:be42::/31 maxlen: 48
2a0e:ec04::/31 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:b4:0f:db:b0:1e:bb:e6:e4:b1:a6:e2:eb:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jan 1 13:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2d5f004cdd4da64dd2d4e92676a4d58bdc664d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:68:76:37:7e:ad:18:ea:72:52:47:db:a8:
b2:1d:46:d6:a0:5e:7b:8e:85:c4:e1:99:35:75:70:
47:f6:a0:6c:bc:bd:98:83:c7:a8:c0:f3:56:e5:9b:
87:65:df:4f:ab:b6:cb:97:ca:4b:1a:6d:e5:fc:f2:
24:4d:b8:6c:93:18:e8:2d:40:27:1b:fe:35:13:64:
2a:53:a8:6e:d9:e8:f4:01:b3:52:4e:5e:c2:cb:32:
17:df:62:6a:53:ad:5a:82:95:ef:71:b8:0e:15:84:
c8:e1:a9:0a:8f:04:70:0e:b5:f8:4b:99:61:55:8d:
dd:25:5e:1f:d6:86:60:6a:1c:de:c1:29:eb:06:59:
56:6a:21:14:2a:70:4f:06:98:ae:79:52:6c:5e:95:
24:8f:6b:d5:49:b2:ed:5d:ba:4f:61:a1:53:6c:85:
13:a7:4f:f4:fa:20:ea:d2:b8:2e:52:2e:ff:95:89:
11:10:73:7b:f2:40:b2:c6:ac:85:18:8c:a0:48:20:
11:ec:7d:97:86:b1:72:a1:77:95:43:6f:12:1d:54:
2e:62:c0:25:15:ce:a1:9b:13:08:c4:31:e1:05:b4:
54:65:f8:70:07:8d:6d:92:c0:39:ed:af:b5:7f:ac:
a0:01:94:bf:23:48:87:6b:8a:51:39:88:68:65:2f:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D5:F0:04:CD:D4:DA:64:DD:2D:4E:92:67:6A:4D:58:BD:C6:64:D4
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/4tXwBM3U2mTdLU6SZ2pNWL3GZNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.5.0/24
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:ec00::-2a0e:ec05:ffff:ffff:ffff:ffff:ffff:ffff
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:fc:d3:e1:ab:0a:8e:65:f2:b0:2a:ae:49:a5:01:91:3d:47:
e2:02:a3:91:c7:ac:21:18:a4:b9:15:91:c3:5d:7c:a9:00:0a:
6a:fd:b4:c6:bb:ff:30:dc:6b:ab:75:8e:83:a6:73:99:31:65:
66:87:bf:33:fe:a4:de:eb:3e:1f:72:da:b1:ab:96:2d:d2:de:
36:9d:7b:2c:64:0f:76:44:26:5b:0c:e2:25:1d:d6:63:2f:4c:
85:9d:36:35:fa:03:61:fa:30:0a:c4:1d:ce:7d:8b:5c:84:88:
b3:0b:20:39:bb:0b:77:47:cc:19:07:3f:8e:7f:ec:24:39:4c:
4f:93:96:62:9e:55:49:5e:f8:a3:c5:5e:65:25:ef:bd:67:a2:
0a:cf:49:e2:fd:b4:49:2b:8c:8b:6d:3c:b8:a7:44:69:ee:7f:
5f:08:55:37:7e:11:fd:a4:ad:2d:12:53:7c:95:b5:e4:91:ab:
86:35:68:2b:e0:c6:b2:40:06:8c:2d:5f:43:1b:f7:25:c3:b7:
cf:ad:cf:f4:bd:c8:f2:88:7c:39:96:b1:0b:83:a9:ea:20:55:
d3:1c:6f:82:e0:e2:54:e9:6b:eb:0a:34:d3:d4:87:59:af:ad:
fc:3c:5b:92:73:e3:5a:76:bd:35:80:3c:8b:0e:dc:98:08:a8:
44:98:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org