Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/XVEflhz56omV0-E4ac7ZXDJ6Vik.roa
File: XVEflhz56omV0-E4ac7ZXDJ6Vik.roa (raw, json)
Hash identifier: cUJbTMkiGPqf7fN3w4GhcN+kHCjaBYY2IpqKAw4PRtU=
Subject key identifier: 5D:51:1F:96:1C:F9:EA:89:95:D3:E1:38:69:CE:D9:5C:32:7A:56:29
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 018AEAE08F31DE91FD5E220B3B6C3D6066D8
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/XVEflhz56omV0-E4ac7ZXDJ6Vik.roa
Signing time: Sun 01 Oct 2023 10:54:59 +0000
ROA not before: Sun 01 Oct 2023 10:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51020
IP address blocks: 5.62.136.0/24 maxlen: 24
5.62.142.0/24 maxlen: 24
185.69.4.0/23 maxlen: 23
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 07:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:e0:8f:31:de:91:fd:5e:22:0b:3b:6c:3d:60:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Oct 1 10:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d511f961cf9ea8995d3e13869ced95c327a5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:19:e9:98:0c:10:08:64:ea:a2:eb:6e:51:
e6:a0:bd:f9:ec:ca:91:d9:3a:dd:9d:99:f9:bf:cc:
91:98:65:9a:19:8c:3a:59:33:e2:a7:b9:d0:35:d6:
0d:7e:07:d5:c0:84:47:e8:8a:b8:a2:c9:d8:66:91:
dc:ce:33:1c:a9:26:89:e9:d4:bb:b8:77:08:33:fa:
44:2b:80:06:85:f8:37:f8:49:7a:d4:a4:be:78:6c:
f3:48:75:fa:44:76:43:45:7f:6b:84:19:5b:6c:f4:
6f:ff:c0:c2:5c:5c:e3:d9:e4:c0:01:96:e0:cb:86:
b5:1d:b8:df:77:59:be:ed:dc:7e:9d:0c:4d:42:17:
d5:f8:3b:9f:5a:b3:44:9d:39:45:ad:3a:44:cb:f1:
0b:dd:75:12:60:dc:85:66:14:67:37:a2:05:73:fe:
f6:79:47:66:ce:fa:26:fe:ea:eb:93:1e:f9:af:70:
a9:b3:ce:c5:ce:9c:fb:4d:54:a3:29:ca:c8:c5:6c:
7f:63:f3:4c:6f:33:69:77:ef:93:0b:8e:60:47:b9:
54:9c:f0:b4:5f:9a:b7:98:8e:a7:6f:f0:2a:3a:e2:
c9:2e:ec:1f:4e:93:f9:79:db:8e:ec:1f:73:a3:1a:
e0:a5:66:3f:04:82:8d:d3:8e:7e:66:ed:f9:0b:0b:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:1F:96:1C:F9:EA:89:95:D3:E1:38:69:CE:D9:5C:32:7A:56:29
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/XVEflhz56omV0-E4ac7ZXDJ6Vik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.136.0/24
5.62.142.0/24
37.77.50.0/24
185.69.4.0-185.69.6.255
Signature Algorithm: sha256WithRSAEncryption
05:f3:2c:5a:e5:e2:5d:42:b6:7c:af:48:3d:3f:74:da:74:9f:
22:da:55:85:41:d6:cd:da:49:96:d1:a9:61:b5:4a:54:e9:d4:
d7:ef:0c:ed:0b:27:9b:ae:2b:62:cc:60:59:f3:4f:4b:a0:d9:
7f:b5:75:35:e9:a6:42:cc:ee:89:9c:29:39:5b:2c:e2:9a:13:
9e:84:a7:01:4a:3c:b1:c6:69:c3:6c:1c:83:46:5d:5f:b3:fe:
92:ec:5b:ec:fc:28:08:e6:84:1b:a9:96:ef:b2:b7:37:6a:37:
5e:2d:59:72:a9:a1:6e:53:ca:98:f9:de:8f:fc:8b:27:49:8e:
7f:45:af:60:75:39:77:db:8e:1e:d2:10:79:eb:f8:f1:e1:fa:
20:aa:55:b0:bb:ea:34:6b:b8:ef:91:c7:79:2d:0e:41:c6:8e:
85:3e:a8:e3:dc:32:e3:6b:51:54:d6:dd:34:8f:00:22:d1:ee:
a4:fb:da:c6:76:78:ec:ff:4e:54:bd:ea:56:66:39:26:3e:3c:
c4:25:42:e5:ba:2c:7c:94:1d:e1:2f:0e:66:90:7d:e2:94:57:
dc:c0:23:73:39:9d:d4:5c:82:a0:98:1d:44:1a:58:07:6b:b9:
3d:ba:23:03:06:11:a9:94:18:bb:04:72:89:0c:1a:14:04:36:
9a:23:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:58 2024 by rpki-client on console-fra.rpki-client.org