Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/1Wv1UTL17ibgtk0_QFvBoed-4kA.roa
File: 1Wv1UTL17ibgtk0_QFvBoed-4kA.roa (raw, json)
Hash identifier: OtC+QPA2rkM4QkvBUEm6f1DQr1l0EKZ3AmiqhWSi7BY=
Subject key identifier: D5:6B:F5:51:32:F5:EE:26:E0:B6:4D:3F:40:5B:C1:A1:E7:7E:E2:40
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0191542559FC5543E3CF0E6B05DADF8124F1
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/1Wv1UTL17ibgtk0_QFvBoed-4kA.roa
Signing time: Thu 15 Aug 2024 03:46:59 +0000
ROA not before: Thu 15 Aug 2024 03:46:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 06:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:25:59:fc:55:43:e3:cf:0e:6b:05:da:df:81:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Aug 15 03:46:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d56bf55132f5ee26e0b64d3f405bc1a1e77ee240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:26:c0:b4:8b:48:e1:f6:a1:47:9a:5e:86:
25:b4:bd:5a:13:a1:91:84:ee:6f:ec:c4:3f:fd:25:
c1:41:07:63:56:9c:18:66:97:54:84:cd:71:a9:71:
3e:5a:50:fc:49:5a:4a:c0:8d:bc:cd:de:3f:a1:c7:
a4:0b:32:44:38:ac:a6:8d:ed:4c:e7:83:67:c5:46:
64:18:dc:32:d9:8d:f7:e6:59:1c:0d:d0:b5:eb:94:
09:43:e0:9b:17:07:27:e8:24:64:d9:cd:b0:c1:9c:
6f:ab:24:5f:fc:2f:d4:c6:c3:d2:2f:74:3f:32:53:
ed:55:3e:83:f4:95:01:8d:89:92:fa:fd:b7:83:5c:
eb:13:04:9a:3d:89:6c:79:3b:b4:68:34:73:96:74:
73:f4:c0:6f:7f:fc:6c:d7:0e:58:76:27:0f:b5:8d:
07:e4:01:32:1b:c5:2a:5b:18:77:36:a5:fa:81:d6:
bd:70:b4:6e:67:a8:f2:b2:d0:47:17:23:da:2c:dc:
fd:9a:19:15:43:ec:e6:0a:f8:fa:6c:8d:2c:61:ae:
b2:d6:44:d9:c2:fd:71:56:1d:40:59:8d:ff:48:a0:
39:93:88:08:c3:21:0e:2f:6a:6d:b8:06:3f:f2:1d:
57:a0:99:e5:ec:b0:66:18:bc:04:98:a5:02:57:f7:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:F5:51:32:F5:EE:26:E0:B6:4D:3F:40:5B:C1:A1:E7:7E:E2:40
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/1Wv1UTL17ibgtk0_QFvBoed-4kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.1.0-140.150.6.255
Signature Algorithm: sha256WithRSAEncryption
88:0e:07:ce:1d:40:79:ed:63:b2:6d:3f:0c:84:69:95:37:37:
dd:0b:6b:5e:27:f1:c3:73:4e:e3:7e:b0:07:44:cf:94:c4:ca:
ef:d4:b7:1a:cc:2e:9e:f7:de:ce:e3:5c:ae:bb:30:26:ef:13:
d9:63:82:d7:00:7a:1d:4e:67:6f:69:96:54:5a:66:d8:45:36:
17:56:7e:59:2b:aa:28:46:85:7a:f2:e2:d8:71:01:44:4f:04:
a9:1a:8e:83:8d:81:5c:06:bd:94:af:1e:c0:f9:4e:ec:87:28:
1a:b8:d2:b8:e8:0f:eb:ef:c6:6f:11:db:f5:de:e6:58:dc:3e:
cd:11:de:1b:6d:96:39:44:8c:ac:0b:44:0f:99:b1:98:a2:fb:
79:36:6c:d4:8a:1e:63:6d:c8:6c:9d:e9:1e:f0:c5:7f:8f:97:
3b:75:20:67:b5:04:d9:6c:77:2d:c7:70:c0:41:d1:70:1b:4e:
9f:92:7c:0e:65:8c:fe:eb:62:52:36:4f:9f:39:58:de:9a:67:
03:37:fc:74:ad:2d:d8:f0:2c:18:30:0b:dc:75:d1:59:c0:48:
eb:b2:e6:05:43:39:e9:d0:0d:7e:e3:b4:e2:e9:53:9c:3c:ce:
6e:e2:7e:d7:0c:e3:c8:ee:0b:97:8a:6f:3b:a1:b7:84:a6:ef:
88:20:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:27:04 2024 by rpki-client on console-fra.rpki-client.org