Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/oGEOQ1AMzxD3Mlog_T76BNxrPsM.roa
File: oGEOQ1AMzxD3Mlog_T76BNxrPsM.roa (raw, json)
Hash identifier: uuT6B+UUigCwg15fDUAv9nEABNN8kbxjDd7yY/PuMn4=
Subject key identifier: A0:61:0E:43:50:0C:CF:10:F7:32:5A:20:FD:3E:FA:04:DC:6B:3E:C3
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 018571832782D679102BDA85CD1E0F8DEFD1
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/oGEOQ1AMzxD3Mlog_T76BNxrPsM.roa
Signing time: Mon 02 Jan 2023 08:04:58 +0000
ROA not before: Mon 02 Jan 2023 08:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211670
IP address blocks: 5.190.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:27:82:d6:79:10:2b:da:85:cd:1e:0f:8d:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 2 08:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0610e43500ccf10f7325a20fd3efa04dc6b3ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:bd:0d:ca:74:39:7d:40:55:21:7d:55:38:
9a:8b:6e:dd:3c:01:94:66:72:0f:4c:88:01:de:84:
fd:fc:5b:d2:07:be:1b:17:58:a8:a2:52:d0:88:09:
35:4a:ef:8a:e6:f6:86:ac:1d:8e:cd:9c:56:23:dd:
3e:cb:00:11:81:eb:97:7d:21:f0:cc:25:2b:be:5d:
aa:d5:c1:75:47:9c:b4:f2:f9:5b:b7:74:cf:af:e4:
d7:81:f4:9a:69:0d:01:84:30:09:f3:80:2b:a3:42:
c2:ef:7f:08:a8:09:c7:1c:c4:99:af:30:1a:ca:15:
17:06:51:d9:d6:b5:ba:29:a8:a6:75:a2:d6:65:fe:
74:a1:5f:85:e3:30:84:02:64:33:bc:a1:6e:f0:18:
d6:b6:08:27:1f:44:a1:61:4f:18:90:93:23:8f:5d:
8c:bf:5f:0a:b0:18:d2:81:c6:e8:67:a7:d0:03:2e:
f4:0e:9a:71:11:fd:7b:72:d2:ab:80:0a:ea:64:98:
2a:f6:32:0c:ad:e0:71:a8:5a:7b:88:aa:da:ca:f9:
70:94:e2:c5:0f:fe:6b:8c:d0:04:d6:80:35:0d:9d:
c3:af:1b:61:ca:35:0f:1c:af:60:c4:2b:0f:03:eb:
9d:1a:db:53:8b:1d:37:17:3d:9f:4b:e8:2f:67:40:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:0E:43:50:0C:CF:10:F7:32:5A:20:FD:3E:FA:04:DC:6B:3E:C3
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/oGEOQ1AMzxD3Mlog_T76BNxrPsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.190.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e5:c1:56:80:b9:4b:4c:7b:0e:60:ba:1b:10:c8:3f:df:db:
2b:4e:eb:d8:6b:13:88:f6:18:cf:ec:e8:1d:36:92:f0:57:79:
91:b9:7e:f8:8d:ef:ed:b5:94:1b:5d:05:ac:8f:54:db:20:df:
23:6b:e5:a0:73:a9:47:f3:fc:81:93:26:91:13:84:ad:1d:32:
b6:83:89:a2:82:80:6a:3b:fe:29:52:e9:21:af:19:94:1f:d9:
78:91:6a:55:fc:9e:54:d7:02:33:26:2a:79:a2:20:f5:82:50:
89:54:d0:94:9e:7f:b6:d8:18:84:d4:ac:3f:3f:df:a2:05:7e:
13:52:9c:5e:a3:0f:04:c1:95:29:f6:43:92:93:19:c0:ff:05:
d4:de:bd:a0:ba:78:48:7d:c8:20:08:88:d1:5e:59:22:2a:49:
55:c5:78:44:b9:2a:3e:5a:d3:b2:0e:34:91:38:15:f0:8c:19:
65:2c:3d:64:d7:96:e1:91:06:90:d3:75:96:e5:b9:2a:8a:26:
c6:7a:08:fb:64:58:cc:dc:c8:17:7d:ef:eb:c1:09:fe:02:f3:
f8:15:9a:e9:62:b1:c5:cc:31:7f:a7:a2:ac:83:32:58:19:ad:
21:4b:c3:c8:f1:b8:d6:90:6c:b3:99:5e:7d:af:42:c7:b2:d5:
2f:c6:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:43 2024 by rpki-client on console-fra.rpki-client.org