Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/rUcnI-xKIFB_KIvzE6ibhTZeEeY.roa
File: rUcnI-xKIFB_KIvzE6ibhTZeEeY.roa (raw, json)
Hash identifier: cS3zfVRBEEIyVRfaVUrVs2wK/l/KEIncbHALh7RmRRY=
Subject key identifier: AD:47:27:23:EC:4A:20:50:7F:28:8B:F3:13:A8:9B:85:36:5E:11:E6
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01929BA074B7740ED17B0865E01B365FE8A5
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/rUcnI-xKIFB_KIvzE6ibhTZeEeY.roa
Signing time: Thu 17 Oct 2024 17:57:17 +0000
ROA not before: Thu 17 Oct 2024 17:57:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.39.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 19 Oct 2024 08:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:a0:74:b7:74:0e:d1:7b:08:65:e0:1b:36:5f:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 17 17:57:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad472723ec4a20507f288bf313a89b85365e11e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:1c:7f:44:72:a0:e9:f0:0e:a5:74:3e:ac:
c3:f8:42:4d:54:73:b5:e1:a2:6a:97:b5:4a:ab:57:
51:31:cc:b3:1e:ac:a0:41:e5:a7:b0:6c:8a:14:a6:
1c:97:04:db:bc:37:d6:8c:33:e6:36:78:11:ab:1a:
64:8a:a9:f5:8c:fb:44:cf:e4:41:bf:43:28:b1:15:
dd:85:9f:2c:d4:5d:51:f9:a1:55:66:cc:48:42:c7:
4c:66:a3:50:61:ed:8b:76:fe:71:e0:92:c2:1f:48:
f8:61:b9:f6:8c:5e:f2:1c:b4:d9:b6:61:59:5c:f2:
eb:2e:08:a2:71:09:f9:c7:27:ed:8b:c4:b4:83:db:
9a:89:97:36:c0:36:55:a0:58:dc:21:87:9b:41:8a:
59:04:3a:12:3c:0b:ae:0c:ef:53:f1:19:3d:06:af:
05:00:db:9c:f1:d8:3f:8a:71:02:e1:f8:bb:5d:68:
7e:d6:3e:55:ab:4f:cd:86:37:5e:1a:c7:37:f0:cd:
60:04:ef:9c:7e:9f:8f:0c:5f:6b:2b:73:62:c8:3d:
77:f3:9f:33:75:86:5d:90:ab:1a:33:76:9a:2a:3f:
7b:74:bd:dd:11:5f:ba:cf:c8:55:a5:d7:25:1e:50:
b0:62:93:21:31:69:9c:3f:8f:50:22:70:45:c1:2c:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:47:27:23:EC:4A:20:50:7F:28:8B:F3:13:A8:9B:85:36:5E:11:E6
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/rUcnI-xKIFB_KIvzE6ibhTZeEeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:8c:02:6d:8f:48:d4:59:88:c6:f2:5b:d9:da:04:58:02:43:
57:55:7b:46:da:e5:de:51:de:c2:72:f1:30:a2:3e:b9:b9:60:
da:de:c0:e8:bd:5e:0f:84:35:2e:2b:7b:4b:b2:7e:91:56:b0:
0b:de:df:8e:b5:10:1e:64:d9:f2:46:2a:9f:6e:0c:08:e7:af:
de:a0:1c:b7:6c:4f:52:e8:7b:70:73:24:a2:fd:f9:d5:16:ef:
49:2e:07:21:41:19:9b:a3:a4:c6:77:a0:03:98:3c:fd:4e:4e:
01:84:6f:32:c5:f8:ac:f6:75:ce:6c:06:69:5f:d7:ba:75:af:
01:01:64:c8:e9:28:f9:8d:c9:56:34:2a:f2:62:45:05:7d:f7:
3b:be:39:bd:05:3c:0d:b1:c7:e2:06:82:aa:17:e9:93:b9:7f:
14:17:26:ad:37:94:fc:0b:e3:64:97:79:ff:4a:3f:e7:2a:a4:
a3:f4:21:2e:59:ec:71:ad:2f:a3:3d:b7:97:dc:ac:e1:64:2c:
e3:bc:23:61:75:ea:26:6f:f9:55:d7:ef:bc:2b:d3:f5:f3:4e:
60:21:3b:b8:fc:93:d6:ee:0f:2d:50:c6:67:c2:41:46:4b:09:
a3:9b:07:b4:30:13:45:3d:51:d6:ea:30:f7:dd:c9:6a:72:d8:
51:57:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 10:24:28 2024 by rpki-client on console-ams.rpki-client.org