Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/e_Jc5bypkAbIQrS1qH3z5vlrp30.roa
File: e_Jc5bypkAbIQrS1qH3z5vlrp30.roa (raw, json)
Hash identifier: gIMtsyEF6efqpnmsmxsWoUWPq1Zk+PXkVpMnK5XRe5U=
Subject key identifier: 7B:F2:5C:E5:BC:A9:90:06:C8:42:B4:B5:A8:7D:F3:E6:F9:6B:A7:7D
Certificate issuer: /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial: 01881865DE9FD8A74F693B2C241A227FD42D
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/e_Jc5bypkAbIQrS1qH3z5vlrp30.roa
Signing time: Sun 14 May 2023 03:55:09 +0000
ROA not before: Sun 14 May 2023 03:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41486
IP address blocks: 194.9.61.0/24 maxlen: 24
194.9.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:18:65:de:9f:d8:a7:4f:69:3b:2c:24:1a:22:7f:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Validity
Not Before: May 14 03:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bf25ce5bca99006c842b4b5a87df3e6f96ba77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:da:d0:20:f6:15:93:9d:f9:12:9c:23:93:
03:28:30:51:d5:05:44:3f:14:fe:a9:b0:de:a9:ad:
29:b7:1f:41:30:ae:3e:43:51:2f:f5:5a:a3:98:4e:
4b:f2:c7:3f:d0:92:a1:ae:2e:31:ff:5b:b5:b4:73:
0e:58:95:c1:f5:d4:2c:78:3b:21:5f:13:db:f3:c5:
3a:ee:bf:6a:ec:3d:cc:9d:0a:b9:cc:ea:ea:41:00:
6e:df:fa:58:20:ab:05:15:92:4d:d1:1e:09:e6:06:
59:be:52:aa:de:55:1c:25:35:af:ff:d5:f6:38:03:
a1:07:dc:4b:ff:4f:c8:ae:5f:ba:d5:d1:5b:1c:89:
ee:aa:a6:79:77:ae:8b:80:a6:02:4e:0d:e8:f9:73:
53:e1:55:06:3b:ec:6b:c9:bf:0d:44:d5:dd:a2:35:
7c:d9:81:0e:57:36:97:54:03:42:41:40:1f:a4:05:
55:8a:97:66:f4:fa:a7:5a:8d:c0:56:bb:e3:1d:4c:
62:64:fb:33:7a:33:01:2e:7e:b3:9a:cb:8a:bf:1b:
a2:61:ba:24:f4:4f:f1:fc:45:4c:88:db:8f:9c:ec:
f2:72:26:bb:62:d8:ac:37:81:c0:31:ec:76:f5:e9:
22:94:2f:ef:f1:6e:67:05:0c:7b:9c:ab:f8:74:94:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:5C:E5:BC:A9:90:06:C8:42:B4:B5:A8:7D:F3:E6:F9:6B:A7:7D
X509v3 Authority Key Identifier:
keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/e_Jc5bypkAbIQrS1qH3z5vlrp30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:91:0b:c8:06:f6:4d:7a:6b:f2:ca:21:32:13:78:bd:0e:7a:
92:c0:c3:e7:d9:2b:4a:ea:d8:8c:59:13:ac:84:57:24:a3:24:
44:2b:a7:ff:e4:26:1c:5e:62:68:75:b4:ec:b7:f4:0b:2a:6f:
d7:81:7e:f4:e3:ec:23:49:53:f7:47:af:ad:7e:bc:aa:13:96:
0e:98:37:9c:de:04:7a:ef:05:d5:b0:cf:25:85:57:39:a7:47:
6a:c4:cb:6c:f2:b8:88:a4:0b:cf:91:35:dd:77:d5:19:81:30:
7a:9a:bf:4b:60:03:46:12:68:35:d6:25:2a:bb:91:b9:da:41:
75:a6:e0:ea:76:c4:da:45:1d:79:24:39:8b:32:4e:9f:f8:ae:
da:d0:a4:f3:a8:07:7a:f3:14:60:9c:97:25:6b:d5:ee:6e:11:
fb:2d:30:03:ee:f4:28:9d:c3:a3:ef:c2:9d:4c:d8:0c:f7:40:
0c:62:d1:2b:ac:59:c7:ba:48:68:43:e8:e1:66:b7:56:99:d0:
e9:4e:8e:f8:bf:a3:c0:7c:dc:d7:43:32:27:7b:d9:f3:d3:40:
01:64:15:ee:79:c3:a0:87:b5:1b:41:2f:2e:3e:10:9a:30:fc:
6f:40:95:5a:20:21:5c:c4:bb:ae:f1:08:2a:cf:87:11:e2:67:
d4:3b:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:24 2024 by rpki-client on console-fra.rpki-client.org