Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/M1RbC5pIdrj21_3LAcjT4BcyiVo.roa
File: M1RbC5pIdrj21_3LAcjT4BcyiVo.roa (raw, json)
Hash identifier: WJNrs3vudyALNBduo9i/Vmy6Owkv3+Nb/Nfy8YBUXBw=
Subject key identifier: 33:54:5B:0B:9A:48:76:B8:F6:D7:FD:CB:01:C8:D3:E0:17:32:89:5A
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 018BF32A5CEAD41E1404D2FB82C32E97D303
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/M1RbC5pIdrj21_3LAcjT4BcyiVo.roa
Signing time: Tue 21 Nov 2023 18:35:21 +0000
ROA not before: Tue 21 Nov 2023 18:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21232
IP address blocks: 185.193.224.0/22 maxlen: 22
2a14:5300::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:2a:5c:ea:d4:1e:14:04:d2:fb:82:c3:2e:97:d3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Nov 21 18:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33545b0b9a4876b8f6d7fdcb01c8d3e01732895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:8a:78:d9:3f:47:70:b7:f3:6f:a9:83:44:
07:ea:4e:3f:e8:15:f7:1e:c9:f9:36:f0:c7:f2:13:
14:14:77:a6:0c:22:0c:eb:0f:6a:13:b5:62:93:eb:
2e:f9:75:81:b0:fa:44:5a:b0:8a:bc:36:d2:c5:76:
6a:2f:58:66:83:fb:80:28:5d:5a:51:ff:47:fe:75:
53:05:89:5e:fc:08:13:da:2b:45:ec:85:38:42:3a:
12:5c:f4:41:fd:34:99:99:74:a6:11:e7:ed:0f:68:
97:90:45:31:26:0a:12:85:ec:6f:e6:b0:89:9d:5d:
b3:45:59:5c:5f:e3:a2:b5:36:95:93:c5:12:62:89:
e3:59:ef:8e:ec:d0:99:9f:ae:8d:2c:34:05:0b:0e:
97:03:91:e8:d2:11:0f:24:28:a0:3c:d3:e9:3c:8c:
b4:a9:e3:b6:aa:19:2d:39:45:4a:72:b9:43:c3:c1:
ff:fe:62:18:de:85:92:02:88:dd:93:da:65:ea:63:
3c:fc:0a:3a:43:c2:33:7f:01:95:dd:40:61:ec:60:
f8:e4:15:a8:c2:b2:33:dd:fe:2b:b3:54:44:de:23:
7c:b8:96:33:2e:95:bf:b8:47:eb:f9:16:b0:0e:04:
1d:e1:4c:6c:44:ae:1d:33:9e:c8:1c:33:9f:64:ed:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:5B:0B:9A:48:76:B8:F6:D7:FD:CB:01:C8:D3:E0:17:32:89:5A
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/M1RbC5pIdrj21_3LAcjT4BcyiVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.224.0/22
IPv6:
2a14:5300::/32
Signature Algorithm: sha256WithRSAEncryption
8f:b9:6c:28:43:2e:bb:1d:c9:e1:e1:3c:db:ae:3d:ee:87:e4:
ee:a7:6d:93:d9:b7:3e:e1:81:12:b9:39:64:8e:51:d6:c7:6c:
a1:fd:2e:bc:9f:33:34:5d:03:5d:67:19:07:17:9e:44:a8:51:
28:b2:19:34:57:40:1c:33:5f:c4:c4:f5:40:41:d0:6f:69:35:
14:a6:2a:dc:d0:d3:e7:d7:36:cd:b3:28:07:ad:ab:ef:2b:90:
05:08:6f:a3:d5:c8:f3:e3:86:57:d5:26:a3:13:bb:48:2a:c6:
12:3c:08:7d:0a:75:d9:ca:20:3a:14:74:a0:f1:4c:6e:ee:a1:
78:bb:94:72:15:9a:db:34:82:c4:87:26:db:cb:d1:ec:41:4c:
ea:cf:cc:e2:be:f8:6e:54:51:42:aa:cc:f2:dd:b5:6e:fa:36:
67:1e:3d:ae:65:7c:db:96:53:e2:00:69:7f:95:14:32:35:87:
2d:84:a8:f0:a4:ce:7b:0b:97:c8:2d:02:28:23:8e:bb:40:51:
b6:65:24:f3:8f:48:d4:a2:9d:43:be:63:af:13:f1:5f:bd:8b:
65:e3:51:bc:e3:18:0a:07:93:7c:7d:50:fb:a4:5f:20:da:07:
5a:b3:17:0d:d8:d2:4f:d8:a7:ca:4d:1b:77:6c:d8:19:da:ca:
b8:08:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:16 2024 by rpki-client on console-fra.rpki-client.org