Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5ej81MNKvzIDyy0VThnEOSVRlgU.roa
File: 5ej81MNKvzIDyy0VThnEOSVRlgU.roa (raw, json)
Hash identifier: pfuxduNZIB4OYHeeBG0tE5o6igUO36QhKZ02yXXcheI=
Subject key identifier: E5:E8:FC:D4:C3:4A:BF:32:03:CB:2D:15:4E:19:C4:39:25:51:96:05
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0186826EFDD4E93D08C8D5A62F46791BC91C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5ej81MNKvzIDyy0VThnEOSVRlgU.roa
Signing time: Fri 24 Feb 2023 07:59:17 +0000
ROA not before: Fri 24 Feb 2023 07:59:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.106.192.0/23 maxlen: 24
82.163.54.0/23 maxlen: 24
82.163.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Mar 2023 07:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:6e:fd:d4:e9:3d:08:c8:d5:a6:2f:46:79:1b:c9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Feb 24 07:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5e8fcd4c34abf3203cb2d154e19c43925519605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:67:43:87:cb:3f:37:cb:a8:e9:a8:b3:f1:
ae:b3:3a:5e:db:a5:85:f5:ac:56:ae:dd:4a:51:2f:
1d:d9:51:aa:7a:c2:21:9f:52:55:1c:18:cb:58:83:
8e:37:db:83:2e:fb:0b:0c:74:3a:ff:9d:e2:45:25:
e7:e6:30:d0:c3:9f:77:73:44:43:b8:72:54:fa:81:
42:2b:c7:10:da:ce:1c:08:26:17:f2:21:5d:39:91:
e4:d4:54:d8:7a:82:f3:33:32:c5:f2:e0:56:bb:f9:
ac:c3:54:de:a0:64:fa:2a:64:2a:03:60:41:45:6d:
ae:1d:54:14:e4:51:fd:f8:05:71:3d:61:27:24:97:
a4:43:22:51:1d:1f:0a:ac:a2:b3:4d:b2:7e:aa:4e:
45:70:a8:77:a8:7f:80:53:45:ef:b0:2a:23:39:62:
ae:22:da:8c:64:d8:64:1a:44:cf:ba:27:72:49:e0:
a2:83:f5:51:53:27:d8:a0:01:18:7d:34:4b:38:78:
f1:f0:b2:39:d9:e0:06:5f:29:c9:a1:a9:5f:a3:9c:
b6:d7:eb:50:af:3b:18:bf:15:b5:60:d7:0f:3d:aa:
f6:ed:e9:30:1d:b1:60:0a:c9:1f:59:05:c1:69:b1:
9f:59:96:c1:06:11:c6:ea:f3:16:ca:d4:c6:ef:1f:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:FC:D4:C3:4A:BF:32:03:CB:2D:15:4E:19:C4:39:25:51:96:05
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5ej81MNKvzIDyy0VThnEOSVRlgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/22
185.106.192.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:bc:0e:c8:4e:cc:28:6c:1f:c0:9c:1c:90:4d:09:70:ed:98:
4b:bd:52:20:23:ec:9b:3e:1c:80:ea:9c:82:dc:29:0e:75:bb:
c4:57:a1:62:79:e6:53:4c:c6:9e:34:90:fb:8c:b0:31:c6:32:
a9:31:fb:ea:f5:3e:2e:2b:11:85:26:3d:ef:2f:ea:3e:5a:6d:
36:d0:7b:cc:d0:91:79:c1:27:8b:bf:7f:1f:7c:5f:5c:f7:57:
bc:0c:2e:8c:ec:dc:5f:77:56:ab:0c:a2:da:d8:35:d1:ff:e4:
b7:a3:b7:1a:b6:18:30:14:17:51:77:54:61:0b:5e:aa:de:1a:
0e:58:81:b5:47:bf:dc:fe:16:d5:e5:62:ca:b5:9f:89:f3:f1:
9c:1c:62:93:cc:92:83:22:67:e9:04:0b:90:b5:e8:8e:cc:2a:
08:7b:77:35:46:3f:1c:1c:62:b6:fe:56:d7:07:5e:0c:54:4e:
0a:a7:76:a3:48:60:d6:52:39:c0:68:1e:38:75:ec:22:54:1e:
24:60:1b:b3:9b:c2:94:f8:34:37:4f:f5:d8:a2:2f:18:dd:32:
0c:2d:68:55:60:14:d2:e4:1d:14:de:5f:c4:d3:22:fd:7e:26:
d5:7a:db:34:24:69:b5:d8:68:58:06:2a:ec:bf:ee:7f:05:d5:
89:4a:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org