Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/IJ3_fhFudWVJI5VNsrkm-9qrTN8.roa
File: IJ3_fhFudWVJI5VNsrkm-9qrTN8.roa (raw, json)
Hash identifier: 6IfZgAaz/QquqU3fLgeCx+mzVgleGzrTS57QvpmcWHY=
Subject key identifier: 20:9D:FF:7E:11:6E:75:65:49:23:95:4D:B2:B9:26:FB:DA:AB:4C:DF
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 018DEB03C1873CBDCE33327B9934FEB39D13
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/IJ3_fhFudWVJI5VNsrkm-9qrTN8.roa
Signing time: Tue 27 Feb 2024 14:41:48 +0000
ROA not before: Tue 27 Feb 2024 14:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212602
IP address blocks: 5.133.114.0/24 maxlen: 24
5.180.112.0/24 maxlen: 32
5.180.113.0/24 maxlen: 32
185.194.208.0/22 maxlen: 32
2a10:7040::/29 maxlen: 29
2a10:7040:2::/64 maxlen: 64
2a10:7041::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 17:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:03:c1:87:3c:bd:ce:33:32:7b:99:34:fe:b3:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Feb 27 14:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=209dff7e116e75654923954db2b926fbdaab4cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:63:72:c1:c6:df:e9:7f:f4:f4:09:c4:13:
e7:0a:a2:f9:77:6d:40:68:ad:fd:32:a2:46:a2:eb:
13:2a:8c:8a:94:c9:b3:79:5d:a9:4c:de:a5:d2:53:
b2:02:32:5a:b2:c1:aa:73:7a:c5:ba:08:02:6c:f6:
77:2d:76:09:41:42:ad:31:40:56:af:5f:ed:b7:45:
0d:e8:24:6f:02:a7:4a:c1:33:cd:f2:f8:e7:c0:ab:
b1:ba:cc:ac:8a:2f:22:e3:45:b3:64:b3:68:25:6f:
37:1c:2b:d5:d7:df:ac:fb:b5:35:ef:d4:13:66:4b:
9f:54:6c:ef:c1:2e:38:3e:12:14:49:78:63:48:e9:
c8:e3:d5:ee:3f:43:a9:a0:a9:19:24:10:a7:01:9e:
3e:e5:fb:be:7c:fa:e0:f8:f1:39:06:d9:e1:5c:03:
ed:f8:e5:38:c5:3f:ed:bd:bf:de:8b:da:6a:16:4c:
68:1c:f2:48:93:4e:64:29:21:ff:7a:34:c0:79:6a:
17:5e:e7:d2:8e:37:f9:da:2f:f5:57:ab:bf:c3:0a:
47:0b:16:2e:72:d8:2a:cd:04:0a:66:53:05:c3:76:
e5:f3:a8:ea:04:5f:35:bd:b5:10:c1:da:b3:af:89:
3f:2c:a8:0b:c2:09:a6:54:cc:02:cf:35:3a:43:ba:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:FF:7E:11:6E:75:65:49:23:95:4D:B2:B9:26:FB:DA:AB:4C:DF
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/IJ3_fhFudWVJI5VNsrkm-9qrTN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.114.0/24
5.180.112.0/23
185.194.208.0/22
IPv6:
2a10:7040::/29
Signature Algorithm: sha256WithRSAEncryption
be:b2:8f:73:d2:0f:af:ad:f2:32:e0:d8:36:c1:cc:3d:17:cf:
73:24:6f:82:5a:b7:a8:2c:4b:c9:5c:33:c0:e2:61:62:cf:dd:
13:33:e8:e5:4e:4f:40:bc:9a:3b:d3:ae:71:6f:55:4c:46:8d:
3f:32:f9:4b:82:e8:e1:4d:dd:dc:6b:0e:6c:c4:ac:ba:77:40:
83:fa:bc:37:f6:69:29:49:af:ca:af:ee:07:84:11:ed:73:db:
de:b7:48:74:d8:5b:e9:6d:6f:51:98:52:14:84:08:15:89:c2:
da:83:0b:4a:be:5f:15:e8:7b:73:17:1d:c9:17:7b:38:7e:ba:
b2:4d:4d:69:e0:bc:bc:09:55:08:39:1b:a9:c0:72:3f:da:ef:
d6:f2:96:be:25:66:dd:49:3a:8a:73:7a:ce:92:a3:3d:40:a4:
e9:e7:fc:0a:16:25:f2:06:51:5b:74:a1:fd:2b:23:b2:92:34:
fa:f0:1f:a8:83:e3:a6:d0:18:f9:18:31:ef:cc:56:87:4b:e2:
b2:92:75:f2:10:f1:85:bb:3b:d9:13:be:8c:8d:59:8f:b9:45:
9e:a4:97:20:f7:ff:de:da:8a:a9:b8:a9:ee:a4:ed:f5:0f:ce:
c8:ab:d5:56:5e:99:6a:39:74:92:04:7e:bc:02:2c:bf:7f:77:
47:a8:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 20:08:15 2024 by rpki-client on console-ams.rpki-client.org