Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/s4USOX-LUTWfySsybrl_-_xRhRs.roa
File: s4USOX-LUTWfySsybrl_-_xRhRs.roa (raw, json)
Hash identifier: E6BJB0kX5gH/usKNdDu1uRX6XgHvAoodwI+Pmm0hyiQ=
Subject key identifier: B3:85:12:39:7F:8B:51:35:9F:C9:2B:32:6E:B9:7F:FB:FC:51:85:1B
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018A187D643EB3B90868330994818809BDAA
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/s4USOX-LUTWfySsybrl_-_xRhRs.roa
Signing time: Mon 21 Aug 2023 14:26:25 +0000
ROA not before: Mon 21 Aug 2023 14:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 5.181.200.0/24 maxlen: 24
45.158.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:7d:64:3e:b3:b9:08:68:33:09:94:81:88:09:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Aug 21 14:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b38512397f8b51359fc92b326eb97ffbfc51851b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:ec:36:17:ef:7c:77:65:6b:3a:e2:c5:53:
16:ca:b1:fe:e1:9a:d0:ad:15:24:f1:1c:f1:c0:13:
da:8d:12:e5:c9:18:da:8e:be:96:24:45:13:34:6a:
2f:a6:fa:21:85:1b:15:9f:31:d4:71:75:d3:23:48:
cc:cb:ac:29:c6:85:dd:2d:58:84:87:2e:b7:a7:c2:
23:79:15:cc:f1:c6:b6:0a:a2:fd:a0:11:d1:3e:19:
cd:a5:89:26:0e:7f:cf:0d:4a:20:50:aa:26:ba:3f:
b6:d8:3a:dc:5d:73:82:53:97:86:3f:2d:c5:7f:6c:
e4:69:3f:07:fc:01:35:df:b7:f3:1a:ff:76:81:f4:
f5:63:b3:7a:7d:e8:d5:e6:8f:06:3f:20:dd:d3:9c:
42:b6:e1:81:85:4f:61:16:b5:6c:8d:f5:90:c4:9f:
0f:fc:50:dd:5d:de:ac:d5:84:a5:ad:fe:ac:3b:9b:
c4:24:05:ad:51:93:95:a5:49:6c:c9:b2:36:5b:c6:
ca:f8:51:ab:98:3f:85:fd:d3:d9:a6:01:3b:3d:fe:
fd:cc:a9:17:71:25:60:84:44:7a:dd:cc:61:73:fa:
5a:4f:8f:88:5c:eb:45:7c:80:11:13:df:cc:68:56:
6c:68:e3:4a:4f:6d:4a:5a:00:56:a5:0a:10:36:a0:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:85:12:39:7F:8B:51:35:9F:C9:2B:32:6E:B9:7F:FB:FC:51:85:1B
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/s4USOX-LUTWfySsybrl_-_xRhRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
45.158.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:27:1b:77:01:b0:77:2c:7a:e9:64:8c:90:54:a1:ce:10:8b:
c2:8b:0c:d3:c8:d4:92:64:fd:3a:8e:45:f1:fc:53:9b:96:2d:
f9:6b:54:1c:dc:51:83:e6:85:2f:14:71:e9:b7:75:94:e1:a6:
5c:85:2b:e7:43:6e:61:bf:16:fd:22:7d:2b:d4:d4:e0:fc:86:
25:0e:79:48:0d:81:43:1e:a9:2f:72:ea:33:7a:80:e1:66:9d:
ca:a2:38:c5:b9:fe:6e:bd:37:27:17:4e:47:7a:ef:82:a6:68:
4f:78:8a:b2:79:bb:aa:0d:80:90:d4:ac:29:b3:d0:2e:65:d4:
7f:5e:8d:8d:66:7b:48:66:50:c9:f3:09:9e:fd:22:f5:ca:20:
8b:37:96:cd:94:99:4a:3f:67:86:55:19:93:8e:23:b7:cf:f9:
64:c7:4d:55:f8:1e:0a:26:0c:78:68:a2:ba:73:0a:f7:df:f4:
ea:9f:b9:3d:16:95:62:5c:d1:1b:8a:5f:36:0e:c5:a1:ad:a9:
b0:1e:5b:ee:38:11:03:0a:7a:0a:ad:aa:9f:ef:17:7f:c7:02:
7a:2b:1d:2f:90:c5:52:10:aa:e6:42:4a:20:38:b2:1c:17:f0:
cf:66:9b:29:c7:ac:3a:73:2e:35:17:7d:05:52:92:71:9e:2e:
fe:d2:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:18 2024 by rpki-client on console-fra.rpki-client.org