Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/cFtmOuwyffoEsHOaW2dFjtiM7-g.roa
File: cFtmOuwyffoEsHOaW2dFjtiM7-g.roa (raw, json)
Hash identifier: aztYmL0U+WTtdR1gadUDV5kFDw510k41t4IVg9F/yhQ=
Subject key identifier: 70:5B:66:3A:EC:32:7D:FA:04:B0:73:9A:5B:67:45:8E:D8:8C:EF:E8
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 01856D4ACA86D28A34254C4773CA7168AFFB
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/cFtmOuwyffoEsHOaW2dFjtiM7-g.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2418
IP address blocks: 192.54.175.0/24 maxlen: 24
192.54.176.0/24 maxlen: 24
192.54.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:ca:86:d2:8a:34:25:4c:47:73:ca:71:68:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=705b663aec327dfa04b0739a5b67458ed88cefe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:d8:ec:af:d9:a5:47:0d:52:37:89:8e:3d:
8e:a9:ba:7c:cf:22:b2:1a:59:2a:f9:c4:e8:b3:c7:
2d:2a:d1:4c:be:ee:3b:0d:d4:a5:6f:a8:9c:54:d8:
b4:bb:53:ed:74:0e:9f:6f:78:07:b3:ef:4d:de:59:
12:fd:c5:8a:cc:19:d6:23:30:ea:13:7f:93:e3:81:
95:84:79:3f:73:93:b4:91:db:48:e8:74:4d:a7:f6:
07:11:22:a5:ed:65:57:e9:32:e7:71:da:b0:51:5c:
09:f9:9a:e0:c0:32:8d:a0:6a:16:b8:2c:42:97:01:
49:13:49:61:2c:fb:46:d3:1d:31:43:c5:42:18:83:
d8:35:1e:d0:21:01:ea:54:41:82:fd:5c:ad:9d:c3:
09:17:1d:d7:40:41:24:e8:18:4d:a8:d2:e5:fc:ed:
26:92:ed:65:8c:9a:8d:b3:58:26:4e:47:76:1c:41:
ab:1e:b6:e5:17:20:ec:26:76:bf:c9:2d:44:6c:e0:
87:c3:29:33:d9:b0:77:e4:50:31:b8:59:ca:77:0a:
f9:62:49:46:3e:77:cf:c3:52:91:3c:5a:1c:e9:8e:
e0:af:82:5a:df:00:56:d1:bf:04:cd:11:4b:92:c9:
a6:a6:df:bf:00:77:e3:04:cf:e1:fa:a8:f3:af:0a:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:66:3A:EC:32:7D:FA:04:B0:73:9A:5B:67:45:8E:D8:8C:EF:E8
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/cFtmOuwyffoEsHOaW2dFjtiM7-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.174.0-192.54.176.255
Signature Algorithm: sha256WithRSAEncryption
9c:8c:1b:ca:9f:c4:0a:63:db:e4:f5:45:bd:2c:66:32:75:7a:
2e:ca:87:22:16:4a:c0:52:bc:1f:ed:85:11:a8:0d:d3:53:62:
b0:26:f6:fd:29:fe:ec:51:5c:92:2b:37:1d:fc:4c:a5:f3:5e:
2f:5b:4f:b2:1d:ae:10:b8:e2:f4:1f:24:47:0c:52:02:79:e3:
11:01:d8:04:1c:64:18:ce:be:e9:d6:a2:f5:63:93:60:87:f4:
17:a9:99:d7:1f:78:ab:7c:0d:27:a3:0a:3f:98:81:f7:51:d9:
0e:d1:89:e4:7d:83:66:73:bf:9d:d2:0e:be:0f:c4:05:e6:81:
39:c9:cc:31:e2:9d:b4:4b:1f:80:f6:71:c0:5f:8d:30:1b:e0:
c6:b3:a0:db:86:4e:25:e6:5d:da:3d:e8:0b:1c:35:6a:ed:9f:
3e:d2:7d:b0:28:4c:ae:39:9b:ae:e7:1f:d2:b5:ae:80:1c:93:
8d:86:8f:c2:1b:7a:97:c9:c0:ad:46:93:74:b5:c4:78:17:15:
a2:3e:7a:7b:06:eb:75:ac:2d:6a:c4:76:31:4c:95:67:50:1f:
33:07:f4:ef:ed:fa:d2:f3:75:64:33:e1:1d:5a:6f:f4:22:b3:
9f:ac:a4:36:06:3d:d7:cd:70:0b:e1:5f:98:bc:6a:2b:1f:80:
ea:7d:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:08 2024 by rpki-client on console-ams.rpki-client.org