Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/5PWCORWdb1uKOGlyfYdz1ae-bhc.roa
File: 5PWCORWdb1uKOGlyfYdz1ae-bhc.roa (raw, json)
Hash identifier: 5/IlSXuZCqwrV2sBpMWGczazSSP15kNVG9xMbUZ9Xfs=
Subject key identifier: E4:F5:82:39:15:9D:6F:5B:8A:38:69:72:7D:87:73:D5:A7:BE:6E:17
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018ACC7DE4C4B63872E7FB3163160BA2A8B2
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/5PWCORWdb1uKOGlyfYdz1ae-bhc.roa
Signing time: Mon 25 Sep 2023 13:18:37 +0000
ROA not before: Mon 25 Sep 2023 13:18:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 188.191.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:7d:e4:c4:b6:38:72:e7:fb:31:63:16:0b:a2:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Sep 25 13:18:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4f58239159d6f5b8a3869727d8773d5a7be6e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:22:95:69:f7:95:e0:72:db:5c:61:bf:39:
74:b8:60:97:4b:0f:59:8e:42:16:e5:60:71:7d:25:
f3:47:92:34:8a:df:a2:4e:84:43:35:2a:f1:71:a7:
d7:78:40:e9:55:8f:a9:0d:f8:66:3d:89:52:a1:41:
82:99:e6:9d:53:49:de:a2:31:42:cb:60:35:da:b8:
bf:ff:b2:aa:6b:9f:a9:ea:5f:02:94:35:37:83:30:
c0:3e:e3:c5:e8:2b:ba:a2:75:26:a6:60:15:89:c6:
8d:29:4a:db:0b:87:27:5f:a5:32:2f:cb:50:d2:5d:
c3:84:0c:39:36:63:c8:88:21:19:94:0f:f5:c3:49:
b9:20:3a:72:fc:2f:26:9d:ec:77:0e:22:1a:c9:ee:
a1:47:82:4d:26:c0:a1:ff:e4:fe:3d:fc:45:04:02:
bd:ab:c7:a9:b8:32:15:78:07:8d:b7:19:5b:df:17:
e1:b2:13:8e:4a:4b:64:b3:0c:d7:b5:0f:88:bb:8c:
a6:d3:2f:44:1d:00:60:f8:15:b9:66:eb:49:b3:a5:
bb:d2:f6:1c:0e:1c:78:4e:f7:3b:6c:6f:0a:ee:ec:
54:31:af:95:cc:46:7d:c3:a8:7e:fa:3f:24:15:fa:
25:fe:97:44:1e:e7:64:97:84:84:b8:b3:6d:61:01:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:82:39:15:9D:6F:5B:8A:38:69:72:7D:87:73:D5:A7:BE:6E:17
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/5PWCORWdb1uKOGlyfYdz1ae-bhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:05:b8:cd:80:60:42:68:ec:fc:9e:4f:26:38:9e:c4:6b:9a:
13:9d:47:9d:00:b2:03:b2:5d:9a:60:1d:13:76:5c:68:43:84:
c4:fa:90:1d:de:ab:8c:0d:62:e5:df:a1:6c:48:e3:5d:e7:12:
c7:28:36:e4:f0:20:8f:cb:db:05:3e:b6:87:63:13:d7:68:fb:
c6:fe:86:37:c8:c7:5e:51:27:44:a7:91:c3:63:a1:90:39:46:
c7:23:41:b1:03:30:7a:fa:d9:3a:90:8d:65:73:23:e2:36:40:
a7:19:43:ea:ac:24:8d:81:47:dc:42:94:7b:cd:c2:3c:78:f8:
1f:73:7c:77:ac:4a:c3:f7:96:b0:99:23:86:ac:fc:ff:66:21:
4d:3f:f4:8e:72:a8:99:bc:b2:f4:e1:86:de:91:e7:7a:f5:ba:
c0:60:74:c1:65:ed:b3:a7:f9:e5:3a:f1:fc:c2:6d:14:97:67:
99:03:7b:22:cc:87:c3:1f:03:0a:9b:16:01:4e:b2:b4:c9:88:
8e:87:47:33:9a:0e:bb:fc:fb:c0:58:86:67:27:f5:63:85:c3:
26:11:79:c4:a1:1f:93:c8:26:7a:a2:ed:a7:4b:6e:7b:44:d5:
4d:5c:cf:0a:64:d2:4d:2f:28:e4:e8:6c:7d:92:71:ee:ad:40:
02:b2:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org