Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/F3ZjE1sQWUbxl5yk4c2Yqb0rqe0.roa
File: F3ZjE1sQWUbxl5yk4c2Yqb0rqe0.roa (raw, json)
Hash identifier: wgrqBgzsugtLiNhPUyn7jJYCqZKuhPorc59hHJk7JNs=
Subject key identifier: 17:76:63:13:5B:10:59:46:F1:97:9C:A4:E1:CD:98:A9:BD:2B:A9:ED
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 018CC42458B894554EF038E6F43180E7AC7F
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/F3ZjE1sQWUbxl5yk4c2Yqb0rqe0.roa
Signing time: Mon 01 Jan 2024 08:29:25 +0000
ROA not before: Mon 01 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 5.181.189.0/24 maxlen: 24
5.181.188.0/22 maxlen: 22
95.214.52.0/22 maxlen: 23
185.16.36.0/22 maxlen: 24
2a03:cfc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Jan 2024 11:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:58:b8:94:55:4e:f0:38:e6:f4:31:80:e7:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=177663135b105946f1979ca4e1cd98a9bd2ba9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:1c:bd:45:3a:a7:81:7f:78:99:9a:cd:65:
fd:44:cb:7e:19:66:7b:ca:d1:d8:ae:54:d7:1a:b2:
63:fd:40:71:cc:12:ff:3d:a3:72:45:3f:2a:76:14:
5f:df:b7:00:a5:63:55:8e:b3:59:02:5b:fd:a4:9d:
6a:a1:de:b3:93:05:71:2a:c1:90:bc:71:e6:ab:39:
f3:d7:a5:81:f6:ae:1c:da:a4:87:0a:29:39:b8:3d:
3f:69:8e:ad:a8:d7:8e:6e:2c:1a:f5:ca:cd:39:b4:
5d:92:d1:21:67:6d:11:fa:e5:05:bb:b2:6d:0a:ff:
58:05:c3:bb:24:9a:ed:73:3e:0f:4f:cc:ff:bd:28:
ab:1c:ac:89:d6:39:b7:3c:30:af:9c:55:c7:9b:28:
e8:22:d8:e8:be:d7:06:3e:81:10:1e:02:dd:91:6e:
3f:81:45:c0:77:72:93:76:1d:69:f6:51:0a:1a:f0:
3d:2f:4c:9b:ff:fa:a2:2b:cd:2e:13:a1:4d:f4:0d:
4e:69:70:5e:0f:3e:ba:a6:33:b8:eb:89:d2:30:b8:
cd:53:8d:3b:49:93:8d:f4:88:3b:c6:40:96:34:1c:
00:a4:53:2e:88:6d:37:94:d5:11:34:cd:01:38:f6:
fe:78:ec:76:26:eb:17:8f:5d:ac:92:b4:1a:35:b7:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:76:63:13:5B:10:59:46:F1:97:9C:A4:E1:CD:98:A9:BD:2B:A9:ED
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/F3ZjE1sQWUbxl5yk4c2Yqb0rqe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.188.0/22
95.214.52.0/22
185.16.36.0/22
IPv6:
2a03:cfc0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:29:80:ca:27:b6:7c:a5:e1:62:55:a5:21:42:d7:91:83:a2:
ca:8b:90:91:66:e4:88:4a:f2:89:5c:d1:02:90:4f:75:9f:51:
c3:a2:45:e0:58:73:ca:c2:ce:7d:7e:76:af:8a:58:81:49:d4:
c6:5f:86:fb:74:31:46:9c:9c:f6:33:83:36:fc:69:58:7c:19:
b0:55:96:ac:4c:64:4d:59:05:c7:92:2b:b3:09:c2:39:11:7d:
e7:63:1c:82:3d:39:05:4f:e3:cd:6a:7d:4e:0d:98:7c:78:37:
f5:d0:06:13:1c:57:dd:84:b0:fa:67:ae:01:f3:69:83:c5:50:
80:f9:52:bc:bd:fa:4d:4a:18:03:1b:5c:32:91:d8:60:d5:74:
25:98:c4:98:8e:da:3b:68:b8:c6:f1:89:f6:9b:25:91:22:9c:
33:6f:fc:3a:87:25:75:95:14:af:d4:98:de:be:fb:f8:1f:c8:
6d:93:4d:aa:8d:03:32:19:7c:0f:37:12:c9:d1:2c:9d:93:25:
a4:ae:70:e0:a6:3d:a5:a1:1b:ab:40:91:15:8f:3b:62:e4:78:
3b:eb:84:7a:b3:0f:1b:69:b8:93:57:89:2d:bd:e9:de:9e:1d:
fc:86:2e:4e:6c:21:a6:b7:1d:b8:99:c6:3a:d3:ef:e1:7f:f8:
3e:35:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:03 2024 by rpki-client on console-ams.rpki-client.org