Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/5lRWryVIci3Utt8lHQdlpw9E2-o.roa
File: 5lRWryVIci3Utt8lHQdlpw9E2-o.roa (raw, json)
Hash identifier: iQU/VfVywRxnYVWCGYqQNVuXiVZ6erW89750xyR0LG4=
Subject key identifier: E6:54:56:AF:25:48:72:2D:D4:B6:DF:25:1D:07:65:A7:0F:44:DB:EA
Certificate issuer: /CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Certificate serial: 018572F1388049FE6E51E07DEE2A63547514
Authority key identifier: 90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/5lRWryVIci3Utt8lHQdlpw9E2-o.roa
Signing time: Mon 02 Jan 2023 14:44:49 +0000
ROA not before: Mon 02 Jan 2023 14:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59813
IP address blocks: 194.124.237.0/24 maxlen: 24
2a0f:3cc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:38:80:49:fe:6e:51:e0:7d:ee:2a:63:54:75:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Validity
Not Before: Jan 2 14:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e65456af2548722dd4b6df251d0765a70f44dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:c9:73:e7:3b:81:89:d5:5b:10:8d:09:b2:
95:f9:d8:f0:2c:ab:19:90:ac:12:08:bc:94:c0:77:
8a:41:af:91:fd:4b:2b:69:eb:21:67:27:25:02:9e:
d3:be:9b:71:64:f9:43:ff:fe:4e:7f:84:86:91:2e:
d8:69:d1:aa:22:ce:a1:11:b8:3a:df:c3:44:0d:6b:
77:a0:70:72:ea:fc:3a:b8:bb:6a:58:8a:35:f1:f0:
10:7f:e6:96:16:96:b8:2a:40:29:b0:2c:f6:59:9f:
12:f3:8a:1c:b8:ef:53:59:bd:72:0c:5d:1b:54:76:
87:bc:48:94:60:6e:c4:2e:21:98:99:3a:fc:72:ed:
e2:c8:c9:ce:e4:b5:04:23:a9:bb:e1:33:8b:a6:d4:
b3:ae:c3:ff:32:11:f3:da:64:99:e3:a1:bc:30:0f:
9a:0e:0a:11:2e:74:65:80:93:59:4a:23:e4:93:2e:
06:19:f9:81:fa:e4:26:75:f7:95:ad:a4:1b:b5:0f:
88:9f:32:5f:1c:a6:e6:d0:65:e4:f4:5d:f1:31:21:
f7:f6:a7:05:ed:7b:ad:e8:58:60:ec:b6:96:96:7e:
0f:49:54:be:46:64:0e:71:59:ea:4f:58:5c:ca:9f:
9b:a3:7e:09:3a:65:a4:02:16:41:41:4a:d7:5a:8f:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:56:AF:25:48:72:2D:D4:B6:DF:25:1D:07:65:A7:0F:44:DB:EA
X509v3 Authority Key Identifier:
keyid:90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/5lRWryVIci3Utt8lHQdlpw9E2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.237.0/24
IPv6:
2a0f:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
c7:58:48:7d:9b:77:d5:0a:b8:df:e8:55:fb:5c:14:f5:ba:2c:
37:4b:97:b0:27:a8:24:6e:56:50:fb:22:9c:c4:2f:8d:8f:98:
eb:f1:e8:9f:71:f7:9d:22:ae:aa:c0:86:8e:c1:c7:37:01:f5:
ea:88:92:8e:7b:dc:31:af:7f:18:d4:8c:62:bc:03:f4:be:e0:
2b:2e:f5:57:01:e0:03:53:e2:8e:09:bc:86:74:e1:78:7b:dc:
98:5a:f6:d2:13:e3:93:28:a9:92:cd:ce:13:c1:23:8a:62:02:
19:6a:54:d2:ab:1d:78:3b:40:b4:e1:f3:99:65:b7:be:c4:2e:
81:86:78:8d:b9:00:a8:2c:4a:e1:39:ee:e5:f3:4e:bb:5c:ab:
fd:8d:ba:bf:86:8d:df:cc:3c:bd:23:bc:db:eb:34:c5:00:54:
ca:bd:d6:7f:e2:ae:dc:2d:8f:af:83:34:a6:59:f8:da:be:cd:
1e:f8:50:da:f0:22:61:54:0f:2c:9e:b8:cc:52:e8:5a:1d:ff:
78:62:f9:40:6e:4e:bb:93:e4:df:a3:ea:54:2a:e1:6d:7e:ff:
63:87:34:6b:2f:26:c7:e5:7f:5f:a3:51:a7:cb:98:14:7c:ac:
58:7b:37:a2:7d:f2:70:34:6d:64:23:fa:3a:dc:07:4b:e5:2b:
61:71:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:01 2024 by rpki-client on console-ams.rpki-client.org