Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/00MKhULWpsic5epMD9dFFOGwHcA.roa
File: 00MKhULWpsic5epMD9dFFOGwHcA.roa (raw, json)
Hash identifier: 2EaCSAMYgEBOciDOebdS/TMTi9XCHpqPdElReN5G/QI=
Subject key identifier: D3:43:0A:85:42:D6:A6:C8:9C:E5:EA:4C:0F:D7:45:14:E1:B0:1D:C0
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01927AC742C9D10F81E40B9DA71BE3C5A593
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/00MKhULWpsic5epMD9dFFOGwHcA.roa
Signing time: Fri 11 Oct 2024 08:52:12 +0000
ROA not before: Fri 11 Oct 2024 08:52:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.39.192.0/21 maxlen: 21
185.10.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 11 Oct 2024 12:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:c7:42:c9:d1:0f:81:e4:0b:9d:a7:1b:e3:c5:a5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 11 08:52:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3430a8542d6a6c89ce5ea4c0fd74514e1b01dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:8d:99:6a:4c:87:33:45:36:c9:7f:d6:4e:
5e:2e:31:ff:1a:66:4b:dd:aa:98:b3:e8:14:85:fe:
5b:a8:a1:ef:b6:be:06:6b:7e:8d:2b:57:6f:16:1b:
2d:22:23:4e:a4:8a:d8:d5:46:67:96:2d:0f:9f:5d:
20:a3:46:ff:68:aa:a9:05:d7:47:85:a2:1e:78:68:
4d:31:4a:1b:74:2d:b2:1b:17:1d:40:d9:32:47:90:
71:24:56:df:a5:94:10:96:b2:74:fb:98:31:8a:e2:
54:a9:b1:73:0d:c3:e7:7e:e4:50:05:72:69:d0:f8:
78:c0:46:4d:d8:e0:3f:75:e2:2e:b3:8e:67:7d:6a:
95:7f:73:c9:82:a0:64:c1:ed:22:14:f9:70:62:c5:
b0:20:13:e9:62:1e:96:ef:ae:95:1b:0b:c9:25:50:
c6:ac:22:9f:ff:59:c5:79:53:0a:34:b2:97:55:cc:
96:cf:cf:12:1c:d6:52:63:a5:32:24:a7:a1:b0:08:
59:fd:37:b2:81:2b:95:47:7a:a9:1a:68:29:1d:57:
18:a5:44:44:cc:e7:9c:6d:f9:b8:3f:77:93:d1:27:
74:cc:d9:94:85:81:d5:60:9f:c9:7c:f1:de:5a:ee:
4f:c6:89:9b:73:1b:bb:0f:c3:a0:6f:9b:11:29:c3:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:0A:85:42:D6:A6:C8:9C:E5:EA:4C:0F:D7:45:14:E1:B0:1D:C0
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/00MKhULWpsic5epMD9dFFOGwHcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.192.0/21
185.10.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:80:e0:e2:a7:2a:1a:08:2b:0b:69:9c:cc:9d:38:69:fa:84:
7a:d1:65:ee:94:91:3c:5b:14:bf:5c:e4:e7:53:fb:ec:f2:84:
fd:7c:b1:44:98:8b:48:a2:e9:55:3e:9e:eb:1c:58:b6:ff:cc:
ab:5b:69:5d:98:00:5c:20:25:a3:43:5b:c2:cd:ff:c1:0d:83:
2f:5e:af:25:88:de:d3:2f:10:96:77:9d:24:65:ee:dc:0c:9e:
e1:7e:fb:58:bc:c6:12:38:b0:b2:ae:1d:00:a9:ea:9f:b1:80:
2a:db:41:47:65:1f:75:52:63:d7:a9:d9:06:06:d1:f0:d5:fa:
16:ba:3d:30:e7:d5:52:2f:a6:b4:2a:74:74:c8:ae:6b:15:c5:
9d:63:8f:de:ef:69:dc:1e:b7:b9:41:e7:65:46:24:b6:02:45:
8b:50:b8:02:05:48:b2:01:a0:d5:85:dc:50:b5:70:86:49:7a:
c6:21:83:36:a4:79:55:4d:15:16:8f:9b:fd:86:c7:98:cd:af:
08:ed:2e:f1:63:cf:fa:f5:ef:3a:1d:5f:57:ce:1c:47:8f:d9:
ad:8f:c4:4a:9e:3f:ef:6f:ad:9a:aa:01:bd:4a:57:79:21:2f:
2d:7a:86:ba:b2:bb:cc:9b:99:bc:ca:57:c1:eb:e4:60:60:1a:
71:4b:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:55 2024 by rpki-client on console-ams.rpki-client.org