Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/5WjN-nlCBxr9JUnbzHNSTFPVqGI.roa
File: 5WjN-nlCBxr9JUnbzHNSTFPVqGI.roa (raw, json)
Hash identifier: M3UUNIjk9cDJKwTkQcJx8ujz3QEA/hqf3vziPJgbS9g=
Subject key identifier: E5:68:CD:FA:79:42:07:1A:FD:25:49:DB:CC:73:52:4C:53:D5:A8:62
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 01856C0A5F5E184D57E984E498CBC3C8EC71
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/5WjN-nlCBxr9JUnbzHNSTFPVqGI.roa
Signing time: Sun 01 Jan 2023 06:34:57 +0000
ROA not before: Sun 01 Jan 2023 06:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29337
IP address blocks: 217.70.241.0/24 maxlen: 24
217.70.240.0/20 maxlen: 20
217.70.242.0/24 maxlen: 24
217.70.246.0/24 maxlen: 24
217.70.244.0/24 maxlen: 24
217.70.245.0/24 maxlen: 24
217.70.243.0/24 maxlen: 24
217.70.248.0/24 maxlen: 24
217.70.249.0/24 maxlen: 24
217.70.253.0/24 maxlen: 24
217.70.247.0/24 maxlen: 24
217.70.251.0/24 maxlen: 24
217.70.252.0/24 maxlen: 24
217.70.250.0/24 maxlen: 24
217.70.255.0/24 maxlen: 24
217.70.254.0/24 maxlen: 24
185.140.191.0/24 maxlen: 24
185.140.190.0/24 maxlen: 24
185.140.188.0/22 maxlen: 22
185.140.188.0/24 maxlen: 24
185.140.189.0/24 maxlen: 24
217.70.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:5f:5e:18:4d:57:e9:84:e4:98:cb:c3:c8:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Jan 1 06:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e568cdfa7942071afd2549dbcc73524c53d5a862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:d9:db:fe:c8:a3:d1:53:bc:f5:e3:f3:57:
62:1b:3e:a1:28:42:89:29:c6:67:5b:37:55:57:62:
8c:4e:dd:fc:69:ff:a5:1a:d3:12:c2:25:9c:1f:67:
87:ec:94:65:75:d0:62:28:50:c0:df:48:9a:18:29:
60:4e:07:a9:b1:ea:73:a2:8c:b0:f7:93:b7:d3:21:
b6:fb:55:49:6d:5a:96:08:f9:07:0f:42:a7:73:34:
c4:ae:bf:11:a7:a3:bd:4f:15:b4:25:b0:1b:27:0c:
af:05:d4:ed:c0:82:56:f8:b1:29:4c:23:c4:5b:3e:
cc:f1:8f:ed:7f:53:89:25:37:93:47:b2:28:56:a8:
10:82:41:28:2f:e6:1c:97:f6:61:0a:fe:95:e1:c8:
13:8d:b4:ec:0a:36:6f:c9:68:59:06:d7:e9:b0:c9:
93:77:1d:6a:75:ab:26:a6:6f:cf:9e:72:44:2f:f3:
9e:ba:95:c3:d6:4c:98:1c:f5:84:63:d4:ce:0e:9e:
36:50:25:31:91:7b:14:4f:f0:0f:40:b5:60:3a:3e:
83:8d:79:87:de:79:fb:2a:08:98:e1:e9:90:25:5c:
f2:fd:34:5b:8b:5f:2a:e3:ba:eb:83:e3:b8:30:21:
16:02:61:ed:66:1a:22:62:8c:25:fa:68:80:23:67:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:CD:FA:79:42:07:1A:FD:25:49:DB:CC:73:52:4C:53:D5:A8:62
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/5WjN-nlCBxr9JUnbzHNSTFPVqGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.188.0/22
217.70.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:60:b3:8b:b5:34:74:4d:cf:c8:82:ee:1d:b6:54:bf:e3:56:
b5:a5:cb:45:82:6f:77:35:bb:c2:fd:20:14:f4:6c:27:47:15:
60:95:a0:80:d1:71:b0:c5:a1:59:6b:30:83:05:e0:bd:96:51:
3e:0b:68:ab:b6:67:ef:b0:fb:db:5c:78:fd:25:21:b6:1a:e3:
68:13:e8:37:e9:3d:a0:95:6a:cb:6c:4a:b5:3d:9e:58:07:69:
f2:dc:22:1a:a5:78:6b:ce:45:ed:3c:59:aa:cd:6f:f6:3f:1e:
c4:2d:15:20:5e:f0:cf:a7:97:b0:86:44:b0:5f:2f:07:c0:ed:
72:6d:28:e2:6b:74:af:49:6a:bf:1b:6b:8a:fd:59:a4:4b:32:
cd:a8:d3:80:3d:8a:8f:64:dc:1e:d9:b2:11:66:ff:18:7d:2f:
fe:ea:bc:80:6e:3f:f8:1b:67:df:e8:4f:5d:db:ef:c2:6e:e9:
ad:47:29:0d:c8:b3:b1:e0:ea:35:a5:ac:87:d0:8c:fd:2f:57:
b3:b9:55:a7:21:8a:fc:18:ae:2c:83:f9:ef:6a:f8:b1:3c:dd:
57:49:a5:af:0e:96:00:e3:b7:c2:b1:f5:3e:0a:6d:cc:90:46:
1d:36:71:b8:d0:2f:c0:9c:4a:e2:08:f3:6d:c0:69:55:3d:91:
1c:c1:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:12 2024 by rpki-client on console-fra.rpki-client.org