Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/5pWG9D8t6JRVUs59ODK70zNfQnI.roa
File: 5pWG9D8t6JRVUs59ODK70zNfQnI.roa (raw, json)
Hash identifier: g4wAnr+WgUNF1v7Wbof+Xkpf7OE6R82oaIPCjolsy+g=
Subject key identifier: E6:95:86:F4:3F:2D:E8:94:55:52:CE:7D:38:32:BB:D3:33:5F:42:72
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 018CC64A877B6B6F65B3BEEA7C1B77C20650
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/5pWG9D8t6JRVUs59ODK70zNfQnI.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51717
IP address blocks: 185.73.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 13:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:87:7b:6b:6f:65:b3:be:ea:7c:1b:77:c2:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e69586f43f2de8945552ce7d3832bbd3335f4272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:da:fd:28:59:96:a3:78:04:41:44:4d:25:
ed:99:67:cd:9b:17:fe:d4:43:60:5b:29:33:e4:a9:
53:e8:bb:e0:b8:85:f0:41:42:87:f9:b1:53:22:a3:
e0:64:3d:cf:b9:6e:70:de:35:37:8d:0c:93:65:ce:
5b:b1:94:f4:35:55:76:1d:7f:fa:77:42:e8:1e:7f:
7f:67:9f:12:6a:d0:1e:1f:67:55:24:5d:c9:0d:bb:
9c:51:1a:d6:58:1b:52:1d:d7:5a:6f:4c:d7:bc:99:
34:17:a7:80:a2:0a:31:eb:78:45:36:da:55:66:79:
ee:9f:86:e9:97:87:6e:17:96:c1:ad:a2:d3:06:86:
2a:79:7f:c2:c5:28:86:02:01:10:a7:e5:3e:dc:2f:
75:70:3e:09:10:22:87:73:6b:bc:1a:ba:8d:f2:95:
65:09:a9:52:31:41:31:6d:a6:2a:44:0b:3d:3a:18:
8c:a9:4f:70:66:3f:2b:dd:ba:a1:9b:6c:46:b8:4c:
e5:3d:ac:7d:30:bc:b7:a3:8e:6d:62:46:5a:f8:bd:
7f:9b:51:89:40:82:55:01:87:e3:9a:e4:1a:04:cf:
61:61:67:7c:05:6d:32:4e:0c:80:dd:8b:a6:25:35:
96:0d:3b:54:9a:12:ea:bf:af:01:e9:63:a5:48:be:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:95:86:F4:3F:2D:E8:94:55:52:CE:7D:38:32:BB:D3:33:5F:42:72
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/5pWG9D8t6JRVUs59ODK70zNfQnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:51:3b:10:0e:8b:9b:64:ee:08:8d:f3:bf:d2:b0:25:a9:41:
67:f7:30:8d:1c:77:7b:02:6b:8a:5f:19:e1:5a:38:f3:35:db:
3e:b2:c6:16:3e:36:fe:aa:df:48:d6:0f:6e:81:ca:a1:56:6f:
5b:38:dd:16:c3:87:91:3d:03:97:50:47:6b:ff:99:92:3b:5a:
a1:5d:c8:6f:b9:eb:45:1f:2a:14:16:66:c9:7f:ca:d1:d0:71:
4b:54:a6:ef:c4:ea:e5:91:51:ec:c3:c6:7d:d5:f6:be:b6:cf:
83:61:1a:8e:6d:ce:21:6b:63:e0:77:e1:e6:c6:67:09:c1:23:
1d:53:21:21:86:0b:ed:07:32:75:ef:ce:ae:18:67:e5:7b:ab:
03:cd:2c:e9:90:53:a9:54:dd:7b:53:6e:b8:48:ab:66:26:65:
27:29:18:d8:7e:a8:14:06:d9:ca:e5:14:bb:77:4c:59:af:89:
5d:90:2a:62:23:18:2d:d4:81:6a:55:00:a8:26:14:36:a7:e7:
1b:b4:cd:be:eb:11:47:85:0f:0d:b4:11:c3:3f:14:63:a0:0b:
9f:4d:ab:b7:86:c4:44:7e:51:58:96:af:14:e4:be:d1:2b:3e:
49:cb:44:78:5e:5b:1c:1b:3b:b3:4c:83:2b:98:cc:0b:36:0c:
c4:d4:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 17:51:37 2024 by rpki-client on console-ams.rpki-client.org