Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/5WR1fV-kwHi3RYUre9_pD0SZojQ.roa
File: 5WR1fV-kwHi3RYUre9_pD0SZojQ.roa (raw, json)
Hash identifier: rMlZ255tmSHodPDecJPmWs8hDxmppB5JViubMxzkQHU=
Subject key identifier: E5:64:75:7D:5F:A4:C0:78:B7:45:85:2B:7B:DF:E9:0F:44:99:A2:34
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 01856F66DEB839459D1132649827DCBC5365
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/5WR1fV-kwHi3RYUre9_pD0SZojQ.roa
Signing time: Sun 01 Jan 2023 22:14:50 +0000
ROA not before: Sun 01 Jan 2023 22:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 46.31.76.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
185.73.201.0/24 maxlen: 24
185.73.200.0/24 maxlen: 24
185.73.202.0/24 maxlen: 32
185.17.112.0/24 maxlen: 24
185.17.113.0/24 maxlen: 32
185.17.115.0/24 maxlen: 24
185.17.114.0/24 maxlen: 24
2a05:4640::/29 maxlen: 48
2a04:7c0:1::/48 maxlen: 48
2a04:7c0::/29 maxlen: 48
2a04:7c0::/33 maxlen: 48
2a04:7c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Jun 2023 12:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:de:b8:39:45:9d:11:32:64:98:27:dc:bc:53:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jan 1 22:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e564757d5fa4c078b745852b7bdfe90f4499a234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:77:9e:a9:19:f3:43:b2:c5:93:08:f6:ff:
46:5c:6f:7d:4f:04:5a:8a:fe:30:38:e1:23:ec:48:
a6:0e:85:96:96:a7:45:4c:84:5a:f0:ac:50:2d:16:
e3:db:7e:df:af:49:9a:50:de:84:c6:c9:f1:0f:ac:
63:c3:b6:5b:57:6e:f7:25:71:98:ca:06:0f:cf:2a:
88:5f:57:0a:06:c9:4a:d9:af:a6:93:c5:fa:af:1a:
6c:a5:91:04:ba:d1:9b:ef:b4:ab:26:86:5e:06:cd:
f2:23:38:40:c1:dd:ed:83:2d:07:d9:2e:d8:40:f7:
6d:8c:51:25:27:d2:8d:39:80:55:33:85:82:a6:a2:
5f:f1:22:7d:2f:c2:17:bf:1a:17:21:05:ad:b0:5d:
d6:9e:5b:51:49:d6:0f:de:93:e0:07:92:85:b5:bd:
07:ee:57:86:f4:f3:e9:ca:34:06:b9:10:53:34:95:
95:db:8d:84:ce:d3:8b:82:af:23:b8:ab:9c:80:c3:
db:4a:fe:2f:37:e6:01:2c:50:bb:43:16:b7:17:d6:
f9:2f:2d:54:6b:0d:d5:76:19:0e:ae:36:21:52:88:
b2:cf:e7:cb:6b:ee:f1:8a:c7:3b:43:ac:05:c0:cb:
b9:94:0a:20:3f:3f:b4:35:b7:0e:08:5e:e6:3a:6b:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:64:75:7D:5F:A4:C0:78:B7:45:85:2B:7B:DF:E9:0F:44:99:A2:34
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/5WR1fV-kwHi3RYUre9_pD0SZojQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.76.0/24
185.17.112.0/22
185.73.200.0/22
IPv6:
2a04:7c0::/29
2a05:4640::/29
Signature Algorithm: sha256WithRSAEncryption
43:43:33:5f:bb:d7:72:e8:3c:27:50:1b:b2:30:bc:be:38:c0:
10:0d:eb:d2:60:00:97:6a:ed:55:65:62:1f:c2:97:c3:a9:a7:
e7:da:7b:65:c8:03:9f:62:62:2c:c6:f2:2d:08:91:44:09:0a:
15:0b:8c:ce:64:6b:64:82:c1:36:3d:05:36:e0:4c:46:05:29:
9d:36:3f:8a:ef:1b:a6:e7:5d:8c:b1:58:9e:68:ee:d8:cb:06:
65:0b:d9:6a:9a:0e:49:49:07:09:e6:c2:8a:37:b3:aa:fc:f2:
0c:1d:bc:89:60:6d:64:86:15:15:e7:ce:6f:b2:5a:f7:a0:71:
64:a1:40:1b:cf:33:73:cb:09:69:81:3a:e8:40:53:97:eb:9e:
03:e9:60:32:81:91:6a:52:5d:cf:5f:a9:92:71:2e:f5:f7:36:
c5:4d:93:15:b8:31:e5:5d:3d:8a:0a:a0:28:18:36:4a:c9:f4:
5e:b5:d3:23:5c:19:0e:9e:b9:6c:81:12:e7:bf:f1:ed:5e:9f:
dd:67:44:f4:32:d9:56:cb:f3:6c:1b:6c:37:49:0f:76:0a:d6:
18:01:1d:ff:7a:f3:fa:99:15:30:1d:5d:99:b7:57:54:3f:78:
91:68:65:3d:62:6c:3f:e1:49:5e:eb:c7:94:b7:27:98:e2:b0:
81:71:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:46 2024 by rpki-client on console-ams.rpki-client.org