Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/62YUtjiuqLFzxaCL1W6WF6lHyxw.roa
File: 62YUtjiuqLFzxaCL1W6WF6lHyxw.roa (raw, json)
Hash identifier: OW7dYy88YhGBxOHneNKvgs5VQa9l3MjtnyQOaiIPaYU=
Subject key identifier: EB:66:14:B6:38:AE:A8:B1:73:C5:A0:8B:D5:6E:96:17:A9:47:CB:1C
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01929B3F68D4D71F86E2880534B817943E74
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/62YUtjiuqLFzxaCL1W6WF6lHyxw.roa
Signing time: Thu 17 Oct 2024 16:11:16 +0000
ROA not before: Thu 17 Oct 2024 16:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.39.196.0/22 maxlen: 22
185.10.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 17 Oct 2024 17:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:3f:68:d4:d7:1f:86:e2:88:05:34:b8:17:94:3e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 17 16:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb6614b638aea8b173c5a08bd56e9617a947cb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:1e:a6:bb:83:e5:0c:3a:e1:30:5b:68:ff:
6e:de:7d:8b:a5:d3:45:0e:04:6c:13:c0:19:3d:bf:
c4:14:c7:5b:df:0b:8f:c5:43:58:95:e2:de:76:6c:
3b:4a:85:a0:f5:b4:17:10:57:2f:e8:ee:eb:10:03:
1f:f4:60:ba:2c:f5:5e:f0:02:fe:da:78:d1:84:5f:
ea:21:14:63:2e:7e:b8:97:4e:42:54:7d:06:c1:9a:
f0:9e:08:b6:e7:4d:6e:49:ca:26:18:7d:d0:3a:7f:
fe:38:ee:c1:14:d4:07:28:46:25:c1:0f:35:62:22:
2d:5d:6c:57:7d:bb:a4:42:2b:52:ef:b1:3c:8f:d8:
f8:53:f3:e2:e0:b0:7d:88:4c:45:85:10:dc:99:dc:
0e:5d:ec:4b:c4:03:d6:31:5d:da:21:d7:e5:4b:95:
42:6f:6e:0a:ba:d5:2d:7b:0d:ca:ed:d7:29:49:6f:
0f:56:30:14:01:cb:98:37:9d:e7:87:f5:74:93:43:
50:5b:7d:46:9e:51:73:24:d4:99:b9:7a:6f:e3:0f:
95:e3:c2:e9:b6:ac:8e:a6:71:da:e2:8d:c7:4b:90:
eb:bf:22:82:e7:1d:ec:e1:29:c5:1a:8a:1d:eb:26:
bc:d9:6e:9e:2e:3e:e4:44:97:d4:89:49:cb:86:29:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:14:B6:38:AE:A8:B1:73:C5:A0:8B:D5:6E:96:17:A9:47:CB:1C
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/62YUtjiuqLFzxaCL1W6WF6lHyxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.196.0/22
185.10.122.0/23
Signature Algorithm: sha256WithRSAEncryption
66:b9:2f:ef:df:e2:95:22:89:ac:98:75:21:66:a8:6f:37:da:
4f:50:bc:c5:ab:b1:ac:ce:16:4a:61:55:c5:d1:ed:ef:3b:06:
95:e3:e8:17:91:46:36:f5:84:95:61:68:93:f9:e9:c9:e9:01:
9b:53:9c:24:b4:ec:86:9d:d0:7e:35:5d:ab:25:9c:ac:38:63:
63:b2:ca:91:5b:9b:c4:57:74:82:89:59:04:e6:e0:17:0a:a1:
e4:bb:4d:ed:d4:c6:dc:17:4a:cf:91:55:43:0c:8d:ec:1c:09:
24:4b:4d:3c:f6:20:35:90:64:8d:9a:b0:c1:c3:6b:34:ca:3f:
10:09:d9:b0:4c:42:89:a0:43:20:2a:8a:8b:a8:ea:cd:e3:8e:
13:ce:82:98:51:16:41:dd:22:53:4a:4f:a9:4f:63:60:27:14:
ce:e7:5a:01:a8:d3:06:73:2f:9d:a2:86:45:55:a3:c8:49:db:
e2:3c:06:cd:af:fa:89:a0:03:b4:3d:f1:a8:35:47:32:a9:09:
ef:1e:a6:09:e3:f3:71:0e:88:96:e2:67:a1:01:e1:49:e0:6c:
1d:67:7f:0f:74:f0:08:26:73:af:33:d1:c1:6b:07:82:43:38:
e8:f0:f8:95:a8:f0:38:ef:a4:77:4d:c3:fa:b6:cd:a0:4a:82:
d7:40:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 22:34:22 2024 by rpki-client on console-ams.rpki-client.org