Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/5vdjek3cTVzvFRsvsN7kvvK8vYQ.roa
File: 5vdjek3cTVzvFRsvsN7kvvK8vYQ.roa (raw, json)
Hash identifier: bGstG/2e/UBJQ81jEV2Ev9lUXb8atqeT5RPwlyOjOqg=
Subject key identifier: E6:F7:63:7A:4D:DC:4D:5C:EF:15:1B:2F:B0:DE:E4:BE:F2:BC:BD:84
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 019073186C39EBC281E0B66CD2F88DDEA54E
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/5vdjek3cTVzvFRsvsN7kvvK8vYQ.roa
Signing time: Tue 02 Jul 2024 10:58:18 +0000
ROA not before: Tue 02 Jul 2024 10:58:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202207
IP address blocks: 5.56.160.0/21 maxlen: 21
5.56.160.0/22 maxlen: 22
5.56.164.0/22 maxlen: 22
5.181.44.0/22 maxlen: 22
185.5.124.0/22 maxlen: 22
2a03:1c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 03 Jul 2024 16:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:18:6c:39:eb:c2:81:e0:b6:6c:d2:f8:8d:de:a5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Jul 2 10:58:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6f7637a4ddc4d5cef151b2fb0dee4bef2bcbd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:26:6a:1a:bf:ea:38:d3:06:a7:fc:b6:28:
04:00:d0:de:bc:45:a2:f2:b4:2d:2f:36:45:9b:d2:
3d:af:6b:8e:32:78:fd:d5:6e:38:38:99:fd:a6:8a:
9a:9e:46:7e:59:8f:3b:66:34:3e:32:64:2b:82:0d:
d8:ec:af:5d:8f:d0:94:31:e3:8e:8c:0a:01:6c:bb:
4c:cd:1f:a4:d2:39:ae:9d:3e:13:70:4e:8f:ca:b5:
01:a1:ad:09:d8:24:17:b8:f1:e7:12:da:31:cd:6b:
7b:c3:b4:f9:f0:f8:6d:ed:df:ab:c4:8e:ec:31:27:
8a:7c:a6:7e:b4:0c:fc:67:db:ca:cc:c1:dd:a3:3f:
2f:b2:d7:25:b9:77:89:27:50:9f:d0:76:1a:6d:9e:
57:bd:b8:ae:8b:38:c9:5e:88:bb:3f:c2:57:92:ba:
cb:43:aa:d6:f9:54:4b:e1:fa:e6:02:a8:f2:77:b4:
58:41:4f:9c:0b:23:85:e1:b4:16:25:29:1f:81:d6:
c9:6c:fc:ae:a0:6c:2b:27:33:d5:a9:27:1c:83:b8:
72:82:d0:20:42:f7:85:28:a4:1e:45:15:d4:a6:1b:
39:78:7a:9e:4d:02:09:b2:10:5b:a2:71:3d:9e:21:
16:66:62:73:34:58:1a:d2:48:59:9a:0f:27:e6:a4:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:63:7A:4D:DC:4D:5C:EF:15:1B:2F:B0:DE:E4:BE:F2:BC:BD:84
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/5vdjek3cTVzvFRsvsN7kvvK8vYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.160.0/21
5.181.44.0/22
185.5.124.0/22
IPv6:
2a03:1c0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:2a:1b:f1:94:6d:3a:da:81:f4:69:06:d5:ae:d0:51:11:65:
eb:3f:6a:c2:28:9a:b2:4e:b1:51:01:37:b4:9d:d8:eb:0f:6d:
ca:7d:93:e8:1c:d3:ea:57:6d:34:8d:e3:46:ca:f9:5c:ad:93:
d1:18:87:df:34:cc:7e:82:0e:ca:40:a6:bb:83:c5:41:53:1d:
67:71:57:77:ab:76:68:4f:2d:5e:76:4d:cf:4e:6f:da:3c:b9:
69:92:82:a5:72:4b:bb:cc:c2:f5:31:0c:3f:93:46:c7:12:1b:
f1:4c:06:b8:d3:bf:56:9d:62:1e:e8:2d:76:e2:bc:7d:92:f9:
2a:58:51:5e:a2:a6:35:8d:47:b7:c3:b4:2d:ab:16:c3:f4:c4:
dd:28:1b:d9:3b:2a:e4:bf:c7:72:74:4b:1f:79:07:20:1d:f1:
6b:d2:66:9d:8f:50:41:c5:f3:7e:b7:46:9d:3a:da:aa:47:54:
6a:26:3e:16:fe:62:52:30:85:f3:44:9c:1b:23:4d:dd:4d:bd:
c1:eb:d6:60:ce:51:68:56:9c:ec:ba:4f:38:b2:8e:73:64:01:
ca:31:a2:8e:0b:43:56:b6:27:8b:09:5d:30:72:ce:10:3b:21:
68:81:76:1c:fd:cb:a3:36:6f:7b:e1:7f:36:cf:4c:7f:94:07:
5d:f6:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 18:11:53 2024 by rpki-client on console-fra.rpki-client.org