Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/AB5zBM-Zlv-lM3BWzY5UwxSC2lg.roa
File: AB5zBM-Zlv-lM3BWzY5UwxSC2lg.roa (raw, json)
Hash identifier: 93RBrevKdyCV0koArL+sW1TgWuWqW6uoXYP9Y4qXmdo=
Subject key identifier: 00:1E:73:04:CF:99:96:FF:A5:33:70:56:CD:8E:54:C3:14:82:DA:58
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018AB73D067BC73364DDD2092F52D6CB8B00
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/AB5zBM-Zlv-lM3BWzY5UwxSC2lg.roa
Signing time: Thu 21 Sep 2023 10:15:44 +0000
ROA not before: Thu 21 Sep 2023 10:15:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205820
IP address blocks: 185.244.50.0/24 maxlen: 24
185.251.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:3d:06:7b:c7:33:64:dd:d2:09:2f:52:d6:cb:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Sep 21 10:15:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=001e7304cf9996ffa5337056cd8e54c31482da58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:69:fc:36:cb:89:f9:97:07:fb:9f:2a:a0:
41:4e:84:d7:a4:44:a5:b3:b0:ee:93:18:50:27:f0:
29:ed:d4:f1:fd:76:a8:d0:da:bc:1a:4c:43:59:ff:
8f:21:ec:1d:e0:6e:25:56:22:83:c7:fb:27:c0:08:
54:47:1a:bc:3e:9c:21:9e:57:9f:29:45:4b:a3:62:
7c:39:0f:ae:06:59:88:51:be:5e:98:00:9b:56:ea:
84:30:92:56:42:eb:48:f0:c6:de:a3:87:2c:ae:c6:
a1:5e:8d:df:06:be:6d:c0:0d:d0:35:66:c9:96:06:
56:66:ae:86:a0:69:c0:52:a8:7e:87:4c:48:04:41:
f0:a8:5a:2a:d1:a8:b4:31:23:d8:63:71:0c:cf:d1:
c1:bf:00:2e:e6:af:21:69:44:db:5e:a2:a4:38:d9:
7f:97:61:ee:3a:b1:06:50:42:49:59:67:63:40:bc:
82:0a:38:9b:dc:16:ec:f2:af:97:24:11:ac:1d:96:
f6:67:c4:67:df:22:e9:af:a4:6b:68:22:59:aa:10:
94:08:44:95:4c:57:fd:90:71:56:b1:06:b4:e7:0e:
1e:89:9d:e2:ba:e0:5e:85:a0:aa:ca:64:f0:88:dc:
7a:0f:8b:b2:62:d5:4e:13:c2:b6:4a:9b:b5:3d:9c:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:73:04:CF:99:96:FF:A5:33:70:56:CD:8E:54:C3:14:82:DA:58
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/AB5zBM-Zlv-lM3BWzY5UwxSC2lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.50.0/24
185.251.38.0/24
Signature Algorithm: sha256WithRSAEncryption
68:05:5a:27:fd:65:17:0d:ea:2a:4f:42:1e:07:33:e1:7d:f9:
ec:e4:df:ae:bf:71:08:6c:60:3e:4c:8b:1b:f8:e1:1d:cf:10:
63:ce:58:99:24:c5:43:dd:84:7c:d8:9d:05:38:08:7b:64:1e:
86:4b:3b:c7:24:e9:18:08:9f:83:6e:0c:5f:88:8a:96:e0:62:
63:e8:89:25:9f:02:9f:40:fe:92:b6:3e:04:9b:42:3c:f7:8f:
98:bb:92:6e:ba:58:98:a5:61:1e:3b:42:b4:00:a3:35:d6:db:
95:a2:84:8b:b1:75:d7:a9:4c:f3:51:d6:98:a4:67:80:6e:11:
78:72:dc:d3:e2:ba:dc:f9:b3:33:c2:5f:70:d6:51:ba:7a:c3:
b5:c3:33:50:3f:86:4c:92:73:8b:c6:61:98:8a:39:09:d6:7f:
82:11:3e:81:b4:6d:aa:52:f6:2e:97:81:47:b4:43:e3:49:74:
9a:67:f7:98:09:82:2a:f7:ba:95:aa:72:ae:8d:c3:9e:e2:06:
e9:1e:e8:90:fb:3f:49:fb:e3:ac:50:83:ac:54:62:f1:cc:df:
c8:eb:6b:b5:7d:b0:24:48:65:d6:de:78:d5:00:da:a7:c2:e8:
2e:c5:ed:ad:89:80:99:bc:14:e8:16:9d:ab:c1:bc:88:44:a8:
8f:18:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org