Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Z20OvVt1XU-FqM8lspq-4k7Moc.roa
File: 5Z20OvVt1XU-FqM8lspq-4k7Moc.roa (raw, json)
Hash identifier: bsFXYgMPlmMugePkGMbTaNtP6+q9RB+J5/6UOVHm55A=
Subject key identifier: E5:9D:B4:3A:F5:6D:D5:75:3E:16:A3:3C:96:CA:6A:FB:89:3B:32:87
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018875F7C5E3200D68354E89E6E7169623DF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Z20OvVt1XU-FqM8lspq-4k7Moc.roa
Signing time: Thu 01 Jun 2023 07:59:12 +0000
ROA not before: Thu 01 Jun 2023 07:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 82.153.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Jun 2023 07:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:f7:c5:e3:20:0d:68:35:4e:89:e6:e7:16:96:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 1 07:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e59db43af56dd5753e16a33c96ca6afb893b3287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:93:14:f5:ad:be:c0:5a:8c:a6:be:17:6e:
cb:90:49:28:bf:23:cc:71:4b:b3:d7:9a:38:9f:fa:
cf:a8:63:66:29:b6:0f:df:20:fc:e5:02:04:05:b8:
49:4f:b4:45:96:bb:f9:4a:cb:62:75:8a:da:a7:d5:
b7:33:68:76:3f:1b:37:62:9f:3e:66:83:34:7b:5b:
da:f6:b7:e9:77:2d:cf:29:68:4e:e9:d1:60:1c:9a:
47:42:a8:5b:1b:8f:ab:20:4e:79:1c:ec:98:eb:73:
58:69:0f:3d:fe:42:ee:c1:a2:31:76:06:2b:64:86:
7c:bc:18:b5:fa:12:8e:ac:e3:4a:54:8f:5c:a5:f7:
a9:81:ac:31:50:b0:6b:c2:e8:35:a8:bd:6b:b4:b2:
05:4d:35:9a:44:31:72:ad:88:2d:27:a6:81:a9:b1:
d0:84:e6:b0:6a:55:25:46:5e:3f:ce:d8:23:16:5c:
b1:7f:08:08:15:fc:74:c8:3e:c0:f7:70:a0:0d:40:
d3:0c:9d:92:a6:7e:e3:b2:23:ad:48:bc:f7:7b:fd:
ea:d1:7f:d0:e7:2a:b7:56:28:4c:76:9e:b6:c4:1c:
43:6f:0f:2f:6c:06:5c:5f:25:5f:d8:52:1d:1b:28:
28:72:86:ea:a6:cc:01:52:b7:e3:ec:b2:55:d4:bf:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9D:B4:3A:F5:6D:D5:75:3E:16:A3:3C:96:CA:6A:FB:89:3B:32:87
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Z20OvVt1XU-FqM8lspq-4k7Moc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:c2:66:cc:1f:8e:19:1f:26:2a:c9:fe:0c:4b:56:ee:11:61:
90:77:0b:7a:0e:8a:a6:01:b9:b7:c7:13:3d:bf:59:d4:61:c5:
6a:2a:bb:7a:44:b1:f3:30:51:f1:af:82:fb:2d:b0:fc:31:67:
4d:d0:f7:97:a8:fc:a8:a2:bd:38:9f:7e:87:aa:8b:28:0a:5c:
d7:e8:8d:13:63:0f:8f:4f:10:8f:7b:c1:0a:12:48:f8:2a:f2:
b3:a8:b0:28:b5:20:61:0a:68:32:85:2b:c0:22:cd:9a:00:63:
59:42:ff:94:1a:68:50:52:23:e4:0d:44:b1:60:b0:b3:a5:b2:
e8:c4:65:5b:14:a1:9d:b9:3f:f3:15:d1:3e:0e:85:d9:fa:fc:
70:78:66:34:87:5c:77:06:b6:95:07:40:84:46:26:1e:d2:27:
d4:96:2c:1a:b9:c0:11:1d:9d:67:bf:27:3f:5b:15:38:b3:77:
05:b2:18:63:75:61:8c:04:a5:b6:be:42:b4:81:05:78:c9:24:
7b:1f:18:d4:b9:97:3e:03:ee:90:aa:3b:b0:19:23:3d:4f:f2:
1e:42:e0:a8:7f:58:c3:58:85:04:27:30:4f:cc:45:88:c3:d4:
8d:5c:89:a9:00:41:e4:d0:5a:31:db:25:03:a1:a3:91:89:ce:
43:77:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org