Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5_PjoDC79Ym9B3rDxo_mbEBXLaY.roa
File: 5_PjoDC79Ym9B3rDxo_mbEBXLaY.roa (raw, json)
Hash identifier: d1UISjBPN4Brjsh+Lmo/rY1DIHTMzHbzEiz1JUU1YP8=
Subject key identifier: E7:F3:E3:A0:30:BB:F5:89:BD:07:7A:C3:C6:8F:E6:6C:40:57:2D:A6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CF94ECF5FEF4C3AF6F29BD2392231AB1B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5_PjoDC79Ym9B3rDxo_mbEBXLaY.roa
Signing time: Thu 11 Jan 2024 16:15:40 +0000
ROA not before: Thu 11 Jan 2024 16:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 86.107.51.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 15:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:4e:cf:5f:ef:4c:3a:f6:f2:9b:d2:39:22:31:ab:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 11 16:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7f3e3a030bbf589bd077ac3c68fe66c40572da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:20:83:51:f6:34:bd:bb:ca:8d:07:17:7a:
cd:94:1e:ab:3a:f2:eb:5a:4d:11:2f:20:1b:04:0d:
f7:cd:27:92:32:11:82:7d:78:04:e1:5a:76:cd:09:
da:4d:cc:6a:31:7b:e0:63:fa:d9:20:d0:4a:64:69:
c6:b5:65:32:ce:85:57:79:d1:f8:bd:fb:c4:e8:d3:
69:ee:61:4c:fc:42:89:e8:be:64:f4:b2:89:8d:c7:
d8:04:ec:25:50:21:b7:2c:e7:60:f1:3e:3f:f5:cb:
bf:37:fd:f8:57:a3:b0:e9:7e:40:9c:5f:4c:dc:bc:
92:e8:4b:64:99:25:de:a7:c4:8a:83:ca:29:67:0e:
fc:58:93:a2:8d:e7:f8:10:e7:ef:d7:fd:fe:8b:63:
42:3d:36:42:ea:7e:ef:7e:91:27:2c:52:1a:2c:d9:
4a:6d:1b:30:46:d0:d8:fc:5b:3c:6a:6c:c3:38:65:
98:5d:08:63:50:37:85:64:0b:0b:c3:44:68:f5:e8:
8d:79:09:c0:c3:ca:33:04:aa:1b:8f:dc:5a:29:e0:
c3:e5:c2:b8:62:67:1b:96:b2:1f:f8:75:d5:00:7f:
62:23:22:d8:2a:b9:47:51:37:b4:bb:8c:f2:77:a7:
71:d1:2f:6c:6f:cc:7b:45:c2:d8:cf:f8:fc:c4:34:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:E3:A0:30:BB:F5:89:BD:07:7A:C3:C6:8F:E6:6C:40:57:2D:A6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5_PjoDC79Ym9B3rDxo_mbEBXLaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
94.176.215.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:20:bd:b7:20:56:49:de:1d:d3:56:1d:fe:80:88:3f:a4:0a:
b6:c5:fc:d3:35:e5:ea:fb:c4:7a:98:2e:11:36:61:6e:cd:f2:
f4:40:f5:a3:90:35:60:60:c4:32:ad:a5:cd:b0:f3:a8:2c:a6:
01:6e:3c:57:b8:ed:ab:f3:3a:55:a8:db:30:82:89:49:61:9e:
73:de:6e:81:e4:95:0e:8d:5d:0f:1f:86:47:10:9b:d4:9d:d1:
1a:c7:57:3a:e3:e4:87:3b:e9:7b:b8:59:5d:e8:85:37:79:13:
6e:f4:e0:75:ab:10:4b:62:a3:97:a6:7d:17:7b:da:d6:a0:9c:
e1:05:17:5c:94:4c:b1:b1:09:2e:52:f4:43:56:6f:1e:60:de:
84:0c:ee:72:9c:43:ed:8c:c4:6f:9e:ce:07:50:10:3e:2c:2e:
17:72:db:0b:da:5b:1d:2f:51:67:2c:65:5e:27:0c:1f:03:76:
35:2b:22:a6:7f:2e:ce:ed:33:b4:82:52:dc:49:04:4b:59:7b:
b7:5d:9e:16:5e:d2:5f:3f:10:9c:12:e0:06:d9:ed:5a:c5:c3:
6f:e5:d6:35:4d:2a:d0:3f:52:5b:38:6d:25:b5:12:10:b2:04:
06:4f:0e:17:7f:19:75:81:a5:ae:48:5d:d7:07:f7:f9:8d:40:
58:29:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org