Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/5cgS9pfRrtX4obfAlJENM8AQL_Q.roa
File: 5cgS9pfRrtX4obfAlJENM8AQL_Q.roa (raw, json)
Hash identifier: n0/2liYpnpjW/abgikjNIC2H/8KEmV4dydieAI7uFpU=
Subject key identifier: E5:C8:12:F6:97:D1:AE:D5:F8:A1:B7:C0:94:91:0D:33:C0:10:2F:F4
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018B37913A5BFDFE702B00FAEB2217CD5D8A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/5cgS9pfRrtX4obfAlJENM8AQL_Q.roa
Signing time: Mon 16 Oct 2023 08:19:06 +0000
ROA not before: Mon 16 Oct 2023 08:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3058
IP address blocks: 83.149.192.0/18 maxlen: 18
188.93.105.0/24 maxlen: 25
188.93.104.0/21 maxlen: 21
188.93.106.0/23 maxlen: 23
194.149.64.0/21 maxlen: 21
2a00:db8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Oct 2023 10:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:91:3a:5b:fd:fe:70:2b:00:fa:eb:22:17:cd:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 16 08:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5c812f697d1aed5f8a1b7c094910d33c0102ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:d0:39:2d:f0:83:f5:0b:e3:5f:f5:fa:04:
3b:4e:f9:38:74:5c:80:ec:2c:57:64:28:47:bf:53:
9c:c6:d8:96:83:5b:8d:5d:ae:d8:c8:60:6b:ba:5c:
71:7c:be:48:7b:30:ec:9e:df:f7:78:c7:84:37:a3:
e3:d9:76:c1:ba:ed:b7:d6:60:49:4e:6f:32:af:40:
3f:d6:c4:0f:4a:f0:cd:a1:89:31:39:36:08:29:a7:
aa:68:49:a8:49:9b:bd:c1:a4:64:89:53:f2:77:1a:
40:47:d7:7d:4a:f3:04:85:a9:c1:7a:b0:36:ee:5e:
c9:69:83:c5:cb:97:79:cf:1b:d8:c8:6e:d0:b3:1a:
b7:68:57:23:2c:3b:a6:9f:02:02:d4:94:b6:7d:44:
87:e3:bb:d5:83:23:8a:fa:d5:75:f9:e0:d3:d4:14:
86:2a:3f:1f:2e:62:dd:5a:bc:f0:79:cf:9a:d4:e4:
3a:fa:56:37:8f:db:48:e9:29:b9:3a:04:b4:47:c5:
6b:93:8c:0e:d5:48:56:be:39:7d:b1:e8:fa:a7:93:
88:4a:e9:01:1a:ca:11:10:87:ad:a7:06:16:c6:f7:
53:b5:12:ac:a7:39:eb:32:d0:8c:95:e4:21:eb:15:
6c:2f:89:66:54:da:57:c5:d4:13:df:4a:cf:24:c5:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:12:F6:97:D1:AE:D5:F8:A1:B7:C0:94:91:0D:33:C0:10:2F:F4
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/5cgS9pfRrtX4obfAlJENM8AQL_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.192.0/18
188.93.104.0/21
194.149.64.0/21
IPv6:
2a00:db8::/32
Signature Algorithm: sha256WithRSAEncryption
60:0e:93:e2:ea:0c:5f:df:52:2e:18:9d:32:d9:01:7c:f7:d6:
ba:ff:10:99:7d:1b:f8:1b:d7:e4:b5:5e:29:d8:d5:33:91:f3:
36:27:0d:c4:6a:eb:78:86:ac:43:b6:30:1f:18:3e:1d:85:e5:
bc:14:45:1d:78:39:81:cc:16:3a:31:cc:d5:86:82:55:52:a2:
87:3d:45:12:4f:d8:69:5b:cb:9b:66:c8:24:2a:43:ef:66:9f:
d3:d6:b4:3e:a6:bd:09:2c:ed:f9:5c:66:38:22:3d:ea:a3:8f:
6d:05:11:99:0a:9f:2e:82:61:ad:cd:50:ca:01:24:a4:b3:50:
65:eb:1a:43:38:32:8e:b2:e8:45:de:9a:d0:dd:f2:88:ec:c8:
f3:dd:c3:53:cb:7a:84:c3:e2:1f:0a:10:51:5b:28:f1:f4:0a:
10:4c:b4:38:49:ef:1c:24:cd:c7:c5:ee:0a:b4:81:4b:d7:6a:
5e:fd:2e:d6:9e:a5:ec:0d:6e:95:9b:89:a6:4a:04:a3:6f:0b:
a6:f5:80:7c:4f:54:32:9b:7e:a3:70:97:8a:98:d8:a9:56:b0:
e3:71:ed:38:79:05:ef:c0:24:98:9e:05:30:17:3e:04:a4:2b:
c6:22:20:39:8e:f5:2f:32:eb:7d:72:70:98:2f:13:da:df:24:
3e:51:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org