Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/g1S8yWX9uIdWOQiChiRhIXNEJhg.roa
File: g1S8yWX9uIdWOQiChiRhIXNEJhg.roa (raw, json)
Hash identifier: Fh9dG57aDtd1+HwonhfoxvHNwjxFkS4uIn22C9sbNJE=
Subject key identifier: 83:54:BC:C9:65:FD:B8:87:56:39:08:82:86:24:61:21:73:44:26:18
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 018AD9C7D695DFE818B888605B107FDB273F
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/g1S8yWX9uIdWOQiChiRhIXNEJhg.roa
Signing time: Thu 28 Sep 2023 03:14:27 +0000
ROA not before: Thu 28 Sep 2023 03:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25591
IP address blocks: 185.140.134.0/23 maxlen: 23
92.118.200.0/22 maxlen: 22
5.183.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:c7:d6:95:df:e8:18:b8:88:60:5b:10:7f:db:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Sep 28 03:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8354bcc965fdb887563908828624612173442618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:32:ae:d7:bc:d7:38:bb:b5:54:95:27:ee:
a7:16:e4:5d:5b:b8:0d:37:72:69:72:e6:bc:9a:39:
3e:d1:d0:5d:88:80:df:ed:5f:97:99:f9:7e:a8:2c:
04:dc:50:f2:46:11:09:66:85:33:29:c5:b2:ce:0b:
28:64:e1:cc:d0:17:30:52:bd:45:41:c7:33:53:7a:
ab:08:db:78:ff:a4:50:31:77:51:88:c9:8e:64:2d:
a7:20:07:e4:35:e2:96:4d:cc:05:09:04:1b:cd:3d:
3e:2f:3b:a3:03:28:fb:0d:71:36:38:51:de:74:73:
ac:a1:6e:9c:c6:c7:0e:e1:78:dd:72:af:a6:a6:47:
a4:9d:3a:c9:1a:fe:0e:4d:60:e9:08:d2:09:6b:26:
12:6d:59:6c:5a:b9:77:ff:81:7c:6a:37:32:59:de:
e0:80:2a:76:d9:c1:83:c5:2a:a7:22:70:e7:ad:15:
6a:cc:83:0e:d6:a0:f4:1d:3d:0d:14:eb:b7:0a:db:
d3:8b:ef:f1:b1:54:12:49:e2:9a:3e:e9:66:61:66:
ea:44:d3:fe:fe:94:a9:76:d1:17:0f:f4:d0:e5:4e:
bd:7c:28:70:57:db:b9:62:ab:e5:d9:d5:9e:a8:9e:
96:f0:f1:72:23:ee:24:1b:35:36:4e:46:a7:d8:cb:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:BC:C9:65:FD:B8:87:56:39:08:82:86:24:61:21:73:44:26:18
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/g1S8yWX9uIdWOQiChiRhIXNEJhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.68.0/22
92.118.200.0/22
185.140.134.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:7b:1d:95:00:60:4f:93:79:cc:e3:e6:2a:e4:8c:cd:e5:5f:
5f:83:66:34:0f:53:a5:c5:d6:a0:87:e0:34:dd:67:f2:7f:9f:
5a:cc:7e:9e:e1:35:c2:a2:ba:1e:08:98:e2:ef:7c:75:02:7a:
62:1a:eb:03:32:31:e5:03:b8:7a:b4:5b:0b:cd:91:a7:8a:59:
43:41:3b:10:9e:52:72:c1:f0:14:de:60:c9:1a:50:12:4e:bb:
f4:a3:65:bc:73:9c:b3:d3:c0:fd:ba:0d:cf:b5:55:73:7a:e0:
e1:1b:30:ad:c9:42:d4:8c:b8:f9:11:5d:69:fe:0d:11:18:6f:
43:27:0a:6a:4c:f8:e4:7a:42:d1:a1:43:16:3f:6d:c0:ad:f2:
24:c5:96:b4:ae:e9:12:a8:1e:fb:59:2f:90:4b:c3:96:19:0f:
3c:f0:ff:5b:85:28:17:85:3b:94:a0:5d:f5:c5:a9:59:d7:c1:
d5:81:3a:64:76:a3:c2:6f:df:12:e3:bd:77:71:18:63:53:cd:
68:98:22:10:b7:85:68:8e:f0:90:13:4a:df:f7:51:79:91:3c:
1d:dc:35:26:dd:ec:eb:b8:3d:c6:59:15:dc:37:fc:9f:9d:68:
96:1a:46:f7:e9:0e:05:0b:03:7d:3d:ef:1c:c9:39:80:23:9d:
3a:2b:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:25 2024 by rpki-client on console-fra.rpki-client.org