Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/e7n5-QQy-m3usBsiY9UacT1g7bQ.roa
File: e7n5-QQy-m3usBsiY9UacT1g7bQ.roa (raw, json)
Hash identifier: NvB/xAwEb/O10v3GLz0JNhtWWvfIE+bEe8Z3e4K991Q=
Subject key identifier: 7B:B9:F9:F9:04:32:FA:6D:EE:B0:1B:22:63:D5:1A:71:3D:60:ED:B4
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 018570673CE6158E719C6882F42816AF089F
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/e7n5-QQy-m3usBsiY9UacT1g7bQ.roa
Signing time: Mon 02 Jan 2023 02:54:52 +0000
ROA not before: Mon 02 Jan 2023 02:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12965
IP address blocks: 193.178.150.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3c:e6:15:8e:71:9c:68:82:f4:28:16:af:08:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Jan 2 02:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bb9f9f90432fa6deeb01b2263d51a713d60edb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:35:5f:6f:ee:c9:6b:39:b2:35:5a:38:1f:
a9:18:a3:e0:3e:d2:4d:25:a6:2c:df:ac:58:79:00:
31:94:1c:ab:c3:2d:04:a4:a8:18:fe:cf:74:2d:d2:
b6:10:98:23:83:33:e6:63:11:d6:43:b5:cc:83:8b:
d6:d6:d8:12:90:86:0b:1f:22:69:cf:dc:2d:40:5b:
aa:e2:b9:c2:e3:df:17:9c:69:ab:24:1b:ed:83:36:
ba:bc:ef:fe:f3:39:dd:fd:9c:15:77:5a:42:24:56:
ea:b2:5e:74:f1:4e:cf:59:51:46:b1:ba:21:65:10:
da:e1:24:31:fe:f5:6c:2b:75:b0:59:e7:5b:d1:f5:
35:15:b7:d7:37:06:b2:59:4e:20:0a:6e:1c:f5:84:
1e:d2:62:c0:45:cd:8c:f5:16:32:04:66:c3:b6:cb:
2b:1d:2f:9c:0a:e6:8d:c6:fe:5c:ab:ec:7c:b1:2c:
9a:c7:41:ab:cd:46:26:9c:a4:c4:ab:b1:9a:91:f5:
3d:ec:cc:47:b3:2c:7c:1e:d9:5a:19:0b:de:ef:15:
3c:01:ed:81:7c:4b:d4:d0:a4:a8:df:16:e5:d1:19:
d8:bf:77:5f:b9:26:ce:79:d4:60:5a:68:9a:09:cf:
50:b0:2e:b4:82:c3:3b:bc:74:35:cd:0b:da:67:3b:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B9:F9:F9:04:32:FA:6D:EE:B0:1B:22:63:D5:1A:71:3D:60:ED:B4
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/e7n5-QQy-m3usBsiY9UacT1g7bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.150.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:fe:c5:0e:7c:54:13:af:e9:dc:b5:69:8b:bb:2a:bf:bd:f7:
4d:be:34:bf:3a:c3:98:b7:1e:68:dd:11:8a:ed:fd:5b:1a:74:
07:e7:4b:d3:6a:4b:e8:29:6c:4c:d7:5e:d8:e5:f0:d5:f8:59:
a9:23:10:e0:67:b7:bf:40:47:35:af:e5:ce:27:60:b7:b3:f8:
77:ac:6a:5e:db:91:76:a2:91:9d:9d:b9:76:9d:5e:26:53:8d:
dc:da:d8:60:33:91:55:b3:a9:e5:51:04:94:e3:0a:56:a5:42:
aa:dd:30:75:18:88:2a:28:bd:46:aa:45:98:21:78:cc:a8:d9:
1c:a7:82:34:06:98:55:3e:21:c0:e9:2d:87:ff:50:8c:a0:93:
d2:41:2b:b2:fc:be:d6:c1:a3:3d:e6:42:ee:8b:c4:34:7f:a6:
f0:d3:e2:77:68:6e:9d:1a:e8:99:d8:8e:2b:25:17:bd:53:83:
cb:a4:2b:f8:07:96:4d:ad:3c:3e:8f:6b:76:32:ea:d4:ad:da:
21:aa:c0:a6:1d:7c:f7:84:ae:44:b6:1d:2e:71:d4:4e:b8:69:
4d:74:86:72:8e:94:dd:8b:db:c3:35:3b:88:51:c4:86:87:23:
99:4c:df:06:99:7b:b8:51:f2:50:bd:33:30:1c:3c:4d:c4:8e:
50:63:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:09 2024 by rpki-client on console-ams.rpki-client.org