Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/1-pGDlxvsr5AHiPcjj2ia0B7ba_E.roa
File: 1-pGDlxvsr5AHiPcjj2ia0B7ba_E.roa (raw, json)
Hash identifier: vFnxuNm8eVvqH08B5dIyPRUYqSyx2jZBlh/a8coahps=
Subject key identifier: FA:91:83:97:1B:EC:AF:90:07:88:F7:23:8F:68:9A:D0:1E:DB:6B:F1
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 018B3DA5A13515A8DBFE26F88273A139C00F
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/1-pGDlxvsr5AHiPcjj2ia0B7ba_E.roa
Signing time: Tue 17 Oct 2023 12:39:06 +0000
ROA not before: Tue 17 Oct 2023 12:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57103
IP address blocks: 185.119.200.0/22 maxlen: 24
91.229.172.0/24 maxlen: 24
2a06:8bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:a5:a1:35:15:a8:db:fe:26:f8:82:73:a1:39:c0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Oct 17 12:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9183971becaf900788f7238f689ad01edb6bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:fc:66:b2:28:5d:1c:ef:fa:90:fd:be:e8:
33:63:10:1a:44:cf:d1:59:2b:ad:f2:cc:21:1e:e3:
c0:61:b1:36:7c:47:34:3d:8c:77:b6:90:79:34:c8:
a0:c8:d9:8b:c4:79:60:5b:8f:82:c3:b9:1b:66:4a:
30:6f:94:d8:d7:42:c1:1f:ee:30:93:92:fb:a4:f0:
d3:a4:e5:62:76:71:2d:8a:e5:94:1f:cb:aa:5f:9c:
be:1d:3a:72:93:86:9e:86:65:93:72:15:d8:36:72:
51:46:b9:9f:f5:48:65:ed:e1:e5:39:4f:06:58:a3:
8e:65:61:ae:88:a5:53:72:a5:c2:c4:45:20:fd:9c:
3f:2a:1e:b0:e2:af:93:e1:55:e6:38:78:ef:20:14:
01:9d:ef:fe:8b:47:92:34:f5:47:b6:17:a6:40:f9:
ca:3e:fc:50:03:df:9a:8a:16:ea:f0:19:77:18:fb:
0d:04:4d:ad:7b:70:57:c0:00:9e:46:33:8a:97:4b:
c4:e0:b2:0e:1e:e6:75:52:c2:1a:fe:f7:3a:d5:96:
2d:2b:01:0c:06:11:85:26:12:6f:09:90:e3:56:e5:
d4:41:48:0c:f5:97:e7:29:1c:10:32:d5:91:f6:eb:
68:53:aa:eb:a0:88:ab:b9:0c:4e:8b:07:b3:13:a4:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:83:97:1B:EC:AF:90:07:88:F7:23:8F:68:9A:D0:1E:DB:6B:F1
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/1-pGDlxvsr5AHiPcjj2ia0B7ba_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.172.0/24
185.119.200.0/22
IPv6:
2a06:8bc0::/29
Signature Algorithm: sha256WithRSAEncryption
68:0a:0a:1a:10:8b:48:d9:43:40:06:d9:bc:e2:b3:ec:e4:a6:
40:64:50:69:ec:8d:fa:46:cc:b8:a5:3c:40:19:1d:e6:24:4a:
8a:62:91:57:c9:1b:c1:58:24:bf:ba:c6:5f:c1:dd:e4:dd:03:
a6:a8:2c:3e:f3:9d:d7:1e:4e:cb:09:1a:ea:6e:ec:97:58:b2:
f4:3d:49:54:f2:65:23:90:c1:19:85:89:61:ce:39:a8:ef:6e:
03:51:23:e7:d3:c5:c4:14:35:fc:73:74:6f:89:ab:71:37:a9:
7b:bc:4d:ff:26:ce:f5:72:fb:1a:c1:f3:72:44:64:12:61:93:
51:94:99:08:7a:49:ab:90:de:b4:2b:20:cd:ab:7a:61:e8:bb:
3f:e3:0b:56:27:b7:2e:d8:e0:47:d5:fc:9e:50:0c:bc:26:e2:
b1:68:1a:cc:c5:30:30:67:1f:68:bd:7d:cf:1e:f1:25:c5:f6:
d6:9d:88:36:fe:60:9e:34:5b:9d:b8:42:86:09:e9:ba:37:2d:
7b:a8:5a:73:ef:74:0b:c3:6a:4d:70:b7:c9:8a:bf:85:97:f0:
a9:a2:b4:4a:74:f6:f3:2f:ca:6c:75:1d:23:b2:99:62:8c:ff:
76:b7:a9:d9:4c:e2:90:ca:26:1a:27:85:39:a7:43:da:a7:51:
fe:f5:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:11 2024 by rpki-client on console-ams.rpki-client.org