Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/5mz80VDtfhJWrwInUskceukertY.roa
File: 5mz80VDtfhJWrwInUskceukertY.roa (raw, json)
Hash identifier: FDjYqHenpO4e4MmAV2SbwNtITcd5WiQy+K8EnryVTCU=
Subject key identifier: E6:6C:FC:D1:50:ED:7E:12:56:AF:02:27:52:C9:1C:7A:E9:1E:AE:D6
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 018CC6B8C89F5B99AD6DD4912C8A1AD14505
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/5mz80VDtfhJWrwInUskceukertY.roa
Signing time: Mon 01 Jan 2024 20:30:47 +0000
ROA not before: Mon 01 Jan 2024 20:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 185.51.184.0/22 maxlen: 22
2a01:b460::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 07 May 2024 09:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c8:9f:5b:99:ad:6d:d4:91:2c:8a:1a:d1:45:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Jan 1 20:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e66cfcd150ed7e1256af022752c91c7ae91eaed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:b6:0d:f8:f5:a3:f6:b2:2e:94:29:93:fb:
86:46:38:89:1a:69:d5:6c:4a:0a:aa:e9:97:1b:17:
3a:df:eb:73:f4:b1:6f:f0:e0:3a:39:b5:70:6b:6b:
f7:a4:3e:82:90:69:60:43:54:bd:0e:da:1a:d0:e4:
10:f0:e6:b6:3b:f1:7d:13:64:1d:9c:22:95:3a:03:
9c:47:e9:73:e8:8c:34:e0:1f:e9:f8:53:f5:60:40:
06:fb:e0:17:f8:33:0e:5c:b6:fc:7c:46:7f:58:26:
1c:79:d0:51:88:ff:88:b9:05:f8:03:a6:98:67:71:
e9:f9:9a:83:4e:f6:08:93:b5:c8:38:5a:39:71:85:
b0:73:b5:27:90:9e:53:46:68:2c:ea:43:da:7d:c9:
a1:da:88:aa:86:eb:00:f1:6e:95:f9:af:76:b3:3d:
a3:ec:f1:15:e6:e6:67:f5:f6:a8:8d:cd:1e:ad:cf:
24:1e:1f:19:ae:62:d4:fa:1d:07:6c:03:5f:69:69:
7e:67:0d:d3:ca:06:54:af:94:da:6d:99:7a:21:d2:
7f:04:27:9a:a3:c7:99:c6:f5:e2:9f:1a:d0:eb:2c:
c3:9a:2b:6b:f8:5b:bf:3c:a0:a0:8a:24:a4:88:e4:
b4:6d:92:a0:b3:bd:79:6c:84:24:9d:97:cd:4c:0d:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:FC:D1:50:ED:7E:12:56:AF:02:27:52:C9:1C:7A:E9:1E:AE:D6
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/5mz80VDtfhJWrwInUskceukertY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.184.0/22
IPv6:
2a01:b460::/32
Signature Algorithm: sha256WithRSAEncryption
01:ed:28:17:0d:36:bf:d8:b5:82:cc:44:f5:45:1c:b2:a5:e4:
1b:c8:0c:7c:2d:07:79:70:70:12:b0:ac:bd:d0:06:3b:39:69:
df:fd:1c:41:06:27:dc:0c:70:81:38:e5:f5:51:d2:b4:65:53:
8a:de:a7:cc:59:37:91:7b:c4:ea:ca:b8:21:04:76:20:cf:67:
13:a2:90:df:b5:df:07:98:20:29:7d:4d:bb:9a:fb:a5:09:f3:
16:f9:c7:0d:29:1d:4a:8f:8c:a1:ea:f4:03:ba:20:fd:40:6f:
0c:ef:e9:f4:4e:f1:60:27:46:4c:6f:89:3e:2b:8d:d1:51:ae:
ae:3a:d4:cc:fc:38:ae:83:dd:32:00:93:99:5e:b8:c6:76:af:
3c:c3:9b:b0:07:3e:41:09:85:57:45:75:2b:99:c6:a1:4c:7e:
54:19:b1:0b:07:81:fb:3a:f6:fa:b4:91:85:d6:a1:fe:3d:37:
41:71:d4:4d:a8:af:72:6b:41:be:17:02:0b:bc:86:28:e5:0e:
5c:da:e2:66:fd:0d:23:9a:6f:c2:7a:7e:e6:12:dc:e3:c9:23:
6d:ae:e2:30:f5:32:c5:4c:fe:eb:86:67:ac:ca:f5:c9:c5:81:
b9:88:09:1d:13:a1:f9:bb:7a:1d:f2:b0:30:40:7a:ae:e9:a6:
e7:11:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:33 2025 by rpki-client