Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/ZSesQB6bjXqQCdvUaE9rI-MrygY.roa
File: ZSesQB6bjXqQCdvUaE9rI-MrygY.roa (raw, json)
Hash identifier: NWUgPZVKlStDPhtYYTPx851DexYK6xpC9P8sofIEeUI=
Subject key identifier: 65:27:AC:40:1E:9B:8D:7A:90:09:DB:D4:68:4F:6B:23:E3:2B:CA:06
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 0186BBCED7CAE14DAEE09EBEF07C36411A70
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/ZSesQB6bjXqQCdvUaE9rI-MrygY.roa
Signing time: Tue 07 Mar 2023 11:22:20 +0000
ROA not before: Tue 07 Mar 2023 11:22:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201814
IP address blocks: 5.181.189.0/24 maxlen: 24
5.181.188.0/24 maxlen: 24
5.181.188.0/22 maxlen: 22
95.214.52.0/22 maxlen: 23
185.16.36.0/22 maxlen: 24
2a03:cfc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Apr 2023 10:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:ce:d7:ca:e1:4d:ae:e0:9e:be:f0:7c:36:41:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Mar 7 11:22:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6527ac401e9b8d7a9009dbd4684f6b23e32bca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:0f:8e:64:06:36:11:0e:5c:3e:38:4b:ba:
e1:0a:33:f5:0e:7a:c8:de:ee:6a:60:b5:65:b7:3c:
c7:00:a7:d0:67:9b:b6:e2:0a:9a:0a:b8:36:78:96:
c8:01:0c:eb:5d:2a:d5:ea:c8:b7:a9:3d:a6:d2:3e:
27:4b:01:ae:7d:c0:d7:c9:72:bd:13:45:f1:14:1f:
be:f4:00:2d:59:61:e7:2d:62:63:1d:4b:e6:8a:97:
7f:27:a1:93:78:b1:8a:51:59:9a:cc:8f:69:36:64:
d8:a5:7f:35:5e:0c:fd:6f:59:8e:81:42:be:f5:7a:
d4:2e:66:00:de:c4:46:11:72:29:25:29:3f:f3:70:
1b:83:1d:65:6b:5c:15:17:27:82:e8:27:2e:94:28:
b1:56:bd:6e:93:3b:85:22:a7:46:7c:ea:b4:12:65:
b7:eb:15:68:3d:8b:16:7c:3e:9f:c1:dc:6c:36:4a:
e8:83:31:65:ff:67:df:11:a1:68:40:44:33:78:5b:
65:7a:15:4e:2d:52:9d:37:8c:86:b9:4d:75:35:a7:
9a:05:55:b5:69:ae:90:c8:95:a6:7e:9f:e8:8f:8c:
af:59:e8:5f:95:bb:ed:73:33:37:a6:13:0a:52:b3:
5d:cc:90:d1:52:61:50:57:3f:4a:59:8d:c8:50:a1:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:27:AC:40:1E:9B:8D:7A:90:09:DB:D4:68:4F:6B:23:E3:2B:CA:06
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/ZSesQB6bjXqQCdvUaE9rI-MrygY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.188.0/22
95.214.52.0/22
185.16.36.0/22
IPv6:
2a03:cfc0::/32
Signature Algorithm: sha256WithRSAEncryption
30:9b:a8:18:14:6a:8c:d9:66:d2:68:a1:3d:25:0a:01:96:56:
c1:e8:7a:6a:21:cb:88:0a:ff:52:e5:ca:f1:e9:5e:10:bd:3e:
be:65:d8:4c:84:9b:5e:bd:1c:e7:cb:0b:24:e6:3f:6b:b4:ea:
e4:b9:20:74:30:e4:6c:ab:95:8f:2e:39:30:f1:f9:f8:be:32:
fc:d1:c4:b9:48:d8:05:0f:3d:ab:a1:25:41:f6:a5:b8:85:07:
2d:35:4e:82:d6:86:62:b6:c7:cd:d8:9d:5d:af:cb:5a:94:d2:
bf:cb:6f:7a:67:f8:db:0b:95:e1:99:74:cb:cd:55:e7:07:58:
53:dd:61:4c:e5:60:bd:d1:aa:97:d0:88:66:95:3b:fa:08:d9:
cf:8f:b4:d1:c0:e4:00:fe:da:3e:33:4e:5c:09:26:7e:3a:2a:
8a:17:e1:df:c4:7c:33:c2:f2:ef:6b:f4:99:71:df:75:77:15:
da:c1:89:70:92:dd:65:9a:06:46:1b:1c:25:e9:ac:9f:0e:79:
20:87:13:99:6d:39:a4:fc:0e:b5:70:93:be:3f:23:8c:99:6d:
9a:cc:2d:58:5a:22:8a:1b:99:34:55:a2:d2:70:04:fd:0c:01:
e7:2b:a0:2d:00:f7:77:52:44:79:64:ae:db:18:57:30:4b:fd:
65:f7:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:03 2024 by rpki-client on console-ams.rpki-client.org