Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/5SQ6Uj81t7QW_zB92AEogUxAWXo.roa
File: 5SQ6Uj81t7QW_zB92AEogUxAWXo.roa (raw, json)
Hash identifier: BY9g/yYm0+bNbj09fTI9phRIbIAZujBIqvBQoS9Ed+c=
Subject key identifier: E5:24:3A:52:3F:35:B7:B4:16:FF:30:7D:D8:01:28:81:4C:40:59:7A
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01863605B108149545DA16DD7A66B22F61E7
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/5SQ6Uj81t7QW_zB92AEogUxAWXo.roa
Signing time: Thu 09 Feb 2023 11:53:08 +0000
ROA not before: Thu 09 Feb 2023 11:53:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 188.74.64.0/19 maxlen: 24
2a05:87c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Aug 2023 14:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:05:b1:08:14:95:45:da:16:dd:7a:66:b2:2f:61:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Feb 9 11:53:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5243a523f35b7b416ff307dd80128814c40597a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:10:24:06:fb:47:d4:e2:c3:a9:92:9f:2a:
68:28:94:44:fb:14:f9:b0:4a:d0:c5:96:02:47:33:
bf:31:92:f2:c7:5b:ec:ac:93:49:85:0d:93:62:dc:
b6:10:18:34:cc:e2:e0:28:0f:84:08:91:76:e7:26:
e1:e6:ae:b6:52:96:b4:60:ba:82:34:ae:ed:fe:26:
32:9c:cc:cf:e3:da:50:b1:53:12:a8:6a:ac:e8:99:
d7:e8:1d:0b:82:92:80:11:69:de:81:ff:05:86:c0:
af:65:fd:00:bd:ce:40:61:00:04:b9:85:48:f6:46:
d1:cc:a0:b5:42:09:b7:25:18:aa:30:51:a3:8f:a7:
c3:59:92:d6:75:97:8a:f5:ec:2c:a1:9b:31:f2:ca:
98:c2:24:da:9b:4d:92:54:69:8e:98:2b:4b:a3:e1:
29:92:b0:c6:91:0d:ea:02:a5:11:9e:0a:4e:b0:91:
16:b8:87:0e:00:ed:7a:93:cd:60:20:10:db:f3:b6:
d3:f1:87:f1:4d:d3:ce:ae:88:45:0c:26:a8:1a:22:
88:99:a6:ed:c6:38:b4:33:be:26:a5:af:6a:85:b0:
28:62:5d:8d:0a:e5:74:65:76:ef:f1:62:b8:c7:5e:
89:d1:1a:cb:fc:6e:17:73:25:69:25:3b:e4:7d:c8:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:3A:52:3F:35:B7:B4:16:FF:30:7D:D8:01:28:81:4C:40:59:7A
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/5SQ6Uj81t7QW_zB92AEogUxAWXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.64.0/19
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:bf:45:22:ab:5f:c0:94:49:a4:6c:e9:e4:69:28:7c:5e:28:
92:ff:af:c2:79:6a:66:3a:eb:0f:67:10:18:76:f7:13:5d:aa:
75:b0:a5:22:78:bf:65:7e:0c:2a:98:63:e2:fd:1b:20:cd:c6:
ec:be:e1:cb:5a:fd:8c:e0:21:02:07:89:96:1f:07:f8:8a:35:
b0:44:3c:8c:ad:eb:69:84:c6:69:9a:eb:1e:85:db:e1:35:03:
b0:b7:15:3e:1e:32:9b:45:7a:51:6c:44:d8:21:08:3f:2a:91:
0f:af:8b:97:bb:80:40:54:05:bd:ad:2e:eb:37:a3:82:28:55:
22:3a:7f:35:ef:04:74:57:30:d8:e8:91:74:59:29:95:66:0d:
c7:93:87:7a:fc:27:3a:b7:4d:72:07:c5:56:70:d7:ac:04:04:
93:10:5c:84:25:69:58:f3:e5:81:8e:63:49:02:6e:10:2f:f5:
3e:c6:98:7d:6d:14:aa:b9:d2:3e:39:eb:e7:ad:63:dc:af:13:
52:75:97:a1:fe:76:58:b1:42:2b:9a:f7:b1:4b:17:2a:5b:f1:
34:08:7c:b7:fa:a3:4a:38:92:6b:42:d7:6f:b6:bb:63:22:b6:
81:5e:c2:78:88:32:b5:b6:5a:3b:5c:28:4e:0f:79:fa:48:11:
75:71:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:24 2024 by rpki-client on console-ams.rpki-client.org