Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/5xwsFnRvuyaqZpjOWv5HldkUxUQ.roa
File: 5xwsFnRvuyaqZpjOWv5HldkUxUQ.roa (raw, json)
Hash identifier: su0qNu8N0w3A3wDF1tZgq1l7W4CyTvgoX1OjwRKNHwg=
Subject key identifier: E7:1C:2C:16:74:6F:BB:26:AA:66:98:CE:5A:FE:47:95:D9:14:C5:44
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 01857227D71134486DAE2B115BEB40DCBD63
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/5xwsFnRvuyaqZpjOWv5HldkUxUQ.roa
Signing time: Mon 02 Jan 2023 11:04:51 +0000
ROA not before: Mon 02 Jan 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12406
IP address blocks: 194.158.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:d7:11:34:48:6d:ae:2b:11:5b:eb:40:dc:bd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Jan 2 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e71c2c16746fbb26aa6698ce5afe4795d914c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:6c:1d:60:bb:e1:be:f3:2e:60:de:5d:35:
ed:f4:9a:83:19:7f:f0:82:03:b1:18:df:79:a9:56:
c3:d0:fb:fa:6a:ae:88:e7:52:df:c1:94:4c:d9:98:
04:af:c2:3b:9d:63:de:95:52:66:d0:23:92:e5:17:
e2:8a:da:d5:6e:9b:4c:89:29:1e:8c:e4:79:62:b0:
91:4f:1b:3f:48:13:66:b7:88:cc:ac:c3:2a:c0:fa:
86:da:0d:d1:a8:8e:9d:59:76:b2:ef:41:c6:3d:ca:
a5:b5:46:1e:32:84:5e:e3:34:2c:7f:1e:35:e7:2a:
55:cf:9d:e9:fc:bf:68:d5:f3:31:e3:41:fe:19:c0:
de:bb:1b:51:20:cd:0d:c0:bb:ea:23:5e:b8:d2:3c:
4b:30:6b:a3:6c:c0:7b:16:61:a8:53:a5:f1:b8:19:
5a:57:e9:82:de:46:1a:2a:b3:fe:64:e6:70:a1:c9:
22:b0:1d:8f:ae:dd:66:c4:2e:7a:e1:ae:02:01:2e:
70:f2:1d:34:68:34:e6:2c:50:78:24:8b:86:50:ce:
4a:61:2a:b6:f0:b2:b3:c1:5a:86:2e:1f:ab:4d:16:
18:e7:f0:1f:55:50:01:41:0d:a6:b3:3e:2e:05:92:
3a:77:62:1d:c5:b5:ee:0f:c3:79:7a:0f:24:69:25:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:2C:16:74:6F:BB:26:AA:66:98:CE:5A:FE:47:95:D9:14:C5:44
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/5xwsFnRvuyaqZpjOWv5HldkUxUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.158.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:32:c8:ef:50:a7:62:13:2e:d9:90:50:30:c9:b0:be:0d:20:
e0:08:b3:0d:a9:3b:88:d2:71:c7:0a:3a:9e:79:bb:44:f0:05:
90:de:03:ab:d6:49:5e:18:7f:a0:65:34:13:f8:03:56:46:25:
72:db:6a:da:6b:f6:55:fe:d3:89:b8:c3:c9:03:92:74:9f:17:
f4:63:84:5a:9c:27:06:f9:96:24:33:7b:08:75:60:6f:24:a7:
cf:90:8d:d6:2f:33:63:6a:ab:c6:12:28:e4:d3:98:71:98:34:
31:f6:c3:73:5f:9a:e6:ec:ba:97:b3:34:5e:f8:22:4b:69:df:
10:2b:62:fc:5b:30:b0:7c:c1:24:b8:46:a5:1f:9e:a3:1a:d3:
65:bc:71:61:0c:41:79:34:19:50:fb:f8:28:ff:de:25:a8:cf:
72:0b:0b:92:17:53:5d:f7:ce:93:ff:3a:1f:7d:9e:b8:28:3a:
87:c4:75:80:51:c4:2f:62:d7:c8:21:35:e4:5e:f3:e5:03:c3:
b7:38:19:1b:5e:10:cc:03:9f:09:07:80:ed:de:c8:28:b8:51:
bb:ff:64:45:d2:93:8d:21:60:22:37:4f:dc:53:3e:d4:ad:3b:
eb:fc:fa:8b:51:0e:a0:d6:64:f6:8e:25:83:1b:fb:3a:c7:c8:
f7:44:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org