Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/pRUVD1karKEwgtu4P6La40_Mj6I.roa
File: pRUVD1karKEwgtu4P6La40_Mj6I.roa (raw, json)
Hash identifier: J3nkWXLMYMIxxyLA7r2yTOhTChDUst3acea1rNISEjA=
Subject key identifier: A5:15:15:0F:59:1A:AC:A1:30:82:DB:B8:3F:A2:DA:E3:4F:CC:8F:A2
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 018B23C021C787A06402AD5B91F7799F133A
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/pRUVD1karKEwgtu4P6La40_Mj6I.roa
Signing time: Thu 12 Oct 2023 11:57:56 +0000
ROA not before: Thu 12 Oct 2023 11:57:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197216
IP address blocks: 5.182.20.0/24 maxlen: 24
5.182.21.0/24 maxlen: 24
2a0e:b800:dddd::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Oct 2023 12:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:c0:21:c7:87:a0:64:02:ad:5b:91:f7:79:9f:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Oct 12 11:57:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a515150f591aaca13082dbb83fa2dae34fcc8fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:34:b0:c1:c5:65:11:62:41:55:e9:c4:29:
d1:4a:02:be:94:ad:47:85:ca:56:34:32:7f:55:7e:
7f:54:b9:d1:b0:69:74:84:89:eb:1f:a5:e8:9f:27:
e1:ec:4f:b7:3c:92:bc:06:81:fb:63:12:ff:a0:51:
d6:3a:be:3b:7e:50:07:50:64:2a:93:5a:42:60:8b:
7e:de:9d:14:c0:bf:64:6f:52:ba:63:bb:64:4e:d0:
06:73:66:2a:32:50:07:7b:03:c4:fb:ad:e9:44:88:
c3:83:a9:35:83:af:e0:4b:7b:d5:40:5f:51:27:c4:
ed:26:12:e0:f8:26:49:96:ac:f0:a7:f3:22:9d:9a:
4a:50:3d:02:52:31:6f:cb:a8:29:d3:31:e2:52:2c:
54:fd:68:96:01:86:20:18:5d:21:ed:e5:ec:e2:9d:
ab:e9:2e:3d:97:a0:c5:63:8d:b3:59:66:a6:30:cc:
eb:d1:18:a5:7c:e1:32:5c:c9:8e:76:5d:35:3c:f7:
07:bf:ff:0f:96:d3:6d:61:29:25:1f:5c:fa:86:53:
e8:b3:db:2c:a0:ba:b5:6d:59:cd:28:b0:7a:11:f0:
8c:79:b7:1a:2c:3a:f7:51:27:da:9c:d3:44:d9:7a:
d6:0f:90:4c:9c:d1:ac:31:11:1c:80:2b:b1:a4:79:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:15:15:0F:59:1A:AC:A1:30:82:DB:B8:3F:A2:DA:E3:4F:CC:8F:A2
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/pRUVD1karKEwgtu4P6La40_Mj6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.20.0/23
IPv6:
2a0e:b800:dddd::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c9:61:2d:ce:30:bf:1e:c6:bc:2b:5e:71:a9:13:1c:1a:ca:
b2:d8:dc:ee:b4:d3:f0:c2:51:74:f3:c2:82:e2:e9:d3:eb:7a:
4c:a8:79:99:ff:82:31:62:cf:af:d1:46:a1:2c:dc:6a:6f:a9:
3a:87:d8:3c:ba:ef:39:18:3b:69:96:56:e9:30:62:bd:d5:61:
5e:14:0d:11:58:7b:e0:f4:52:e1:16:87:6b:2d:33:95:50:d1:
14:c2:2a:28:a4:87:0e:f3:9b:d1:62:19:6b:11:49:f7:20:43:
ba:65:b9:bc:d8:37:61:62:58:99:17:f0:ab:e6:d7:c0:1a:06:
52:64:bd:c2:a3:09:6b:36:98:d7:d5:ba:21:3f:17:50:c4:87:
c7:3a:5e:f5:48:13:e6:dd:7b:b4:32:25:74:9f:1e:db:41:c1:
d2:98:57:14:1f:fc:90:f5:27:4f:94:5d:41:82:ae:44:42:b6:
dd:7a:72:31:f9:dc:cc:f4:9b:cf:33:e5:b7:4e:a0:77:a3:50:
d8:e1:3b:3e:41:30:a9:7e:bb:90:50:f9:f2:2d:7f:06:70:3f:
79:48:c5:eb:f3:b2:e3:ae:16:29:be:bf:36:cf:2a:79:63:fe:
27:30:b8:10:89:04:9b:61:d8:df:05:41:e0:88:d0:e4:69:65:
22:17:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:45 2024 by rpki-client on console-fra.rpki-client.org