Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/E2bF7fZMcofK54C5TaPAKgRRmws.roa
File: E2bF7fZMcofK54C5TaPAKgRRmws.roa (raw, json)
Hash identifier: nrLmzZ6u17T70z0TszS+FCW2LuyH9v45n3ayZ3nBgpE=
Subject key identifier: 13:66:C5:ED:F6:4C:72:87:CA:E7:80:B9:4D:A3:C0:2A:04:51:9B:0B
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 01856F2FD0218BFE241200ECA37154BDBFDD
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/E2bF7fZMcofK54C5TaPAKgRRmws.roa
Signing time: Sun 01 Jan 2023 21:14:42 +0000
ROA not before: Sun 01 Jan 2023 21:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38983
IP address blocks: 5.172.216.0/21 maxlen: 24
185.64.192.0/22 maxlen: 24
188.126.96.0/19 maxlen: 24
185.122.152.0/22 maxlen: 22
188.126.108.0/23 maxlen: 23
188.126.112.0/21 maxlen: 22
2a09:f400::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d0:21:8b:fe:24:12:00:ec:a3:71:54:bd:bf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Jan 1 21:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1366c5edf64c7287cae780b94da3c02a04519b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:80:4f:80:a1:be:1c:c3:5e:27:c2:21:d1:d7:
5f:cd:6e:4a:52:88:7a:fb:55:34:95:2b:89:10:61:
65:53:b8:ff:75:ae:15:a4:d6:8f:00:ab:ce:c8:d0:
6f:07:f3:a7:e7:10:cf:8a:77:34:ef:5b:09:4c:98:
c3:cb:11:f1:46:52:25:eb:a7:31:6b:19:67:43:85:
2a:15:ec:8f:14:44:73:d5:be:01:7c:00:7f:ca:67:
f9:87:bf:09:3c:aa:cf:0c:89:9a:82:13:43:12:93:
7f:14:67:c6:80:1d:3c:bc:df:14:2b:79:a7:19:c0:
a4:13:bf:65:35:8e:1f:4c:be:93:b0:50:eb:3d:df:
b6:66:e3:89:9d:12:84:27:b4:1d:b1:92:9f:da:de:
f3:87:91:c3:14:4b:46:bb:27:c0:c1:52:9b:f4:c3:
ed:04:64:42:d8:64:6f:7e:ec:e2:a8:a3:34:97:0f:
b8:82:cd:e2:5e:56:a3:43:66:8b:59:14:ab:07:8d:
df:7c:fe:4f:4a:8b:85:36:fd:6f:a6:66:22:f3:9d:
d2:6d:78:c6:16:48:e6:52:dc:31:de:d4:d4:54:00:
4b:ea:19:ec:75:a8:4b:1e:43:e4:e8:9b:a5:3b:bb:
b5:c2:14:af:9e:76:20:26:d2:89:5f:61:8d:fd:53:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:C5:ED:F6:4C:72:87:CA:E7:80:B9:4D:A3:C0:2A:04:51:9B:0B
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/E2bF7fZMcofK54C5TaPAKgRRmws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.216.0/21
185.64.192.0/22
185.122.152.0/22
188.126.96.0/19
IPv6:
2a09:f400::/29
Signature Algorithm: sha256WithRSAEncryption
9c:e7:28:d7:0a:a3:e5:b2:de:f1:98:68:dc:e9:62:7f:39:a7:
5b:95:73:57:85:7f:b8:4d:f4:50:53:98:a7:38:f2:8a:8d:93:
f9:24:08:be:30:d3:73:09:14:3d:7a:29:80:08:63:3c:d7:d4:
87:5b:5d:eb:ba:a1:ea:94:2a:25:80:bf:11:6f:fb:59:dc:e6:
9a:31:b3:1a:da:cb:e9:8f:df:b0:3e:82:a2:54:27:8a:41:d0:
d1:6e:50:05:cf:17:bc:8d:da:60:f2:7f:7f:e8:58:c6:9d:20:
13:80:4a:e1:17:b5:25:73:a9:8a:13:7b:4e:3a:43:d4:67:23:
11:5f:ad:ea:26:48:bf:f0:98:90:28:a3:f9:52:ac:a1:9a:bc:
43:cd:3a:ba:6e:ca:2f:17:27:e9:a5:2b:3a:23:56:51:3c:6c:
2a:99:f5:9f:23:26:8c:33:c5:f6:d6:8c:55:76:72:4a:9a:04:
73:bd:40:37:74:e5:04:71:be:18:17:be:5e:d0:20:3b:dc:0d:
5d:dc:b5:a5:de:75:87:15:cf:ee:71:4a:e0:d6:29:d8:c1:f5:
66:1a:e8:77:1b:b5:bd:80:43:4c:f6:1f:7a:96:e1:a0:28:5f:
e6:a9:5a:16:e2:7e:c8:f8:4f:6e:c4:69:1d:46:a9:c2:77:67:
08:9f:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:22 2024 by rpki-client on console-ams.rpki-client.org