Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/d5jmEFmhIBy5me3vXqw7nkiYNZA.roa
File: d5jmEFmhIBy5me3vXqw7nkiYNZA.roa (raw, json)
Hash identifier: U5TUlm7pBCYzxYY13SpExS7MpSlWLK/XdeJuDTxRd4s=
Subject key identifier: 77:98:E6:10:59:A1:20:1C:B9:99:ED:EF:5E:AC:3B:9E:48:98:35:90
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018B04716BBB43264D027D7E3B5DB3EDEA2A
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/d5jmEFmhIBy5me3vXqw7nkiYNZA.roa
Signing time: Fri 06 Oct 2023 10:03:43 +0000
ROA not before: Fri 06 Oct 2023 10:03:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.50.253.0/24 maxlen: 24
194.187.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 14:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:71:6b:bb:43:26:4d:02:7d:7e:3b:5d:b3:ed:ea:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Oct 6 10:03:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7798e61059a1201cb999edef5eac3b9e48983590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:b7:c0:8b:fe:69:57:c8:85:e4:69:a4:57:
39:25:35:a0:6e:e9:bb:91:4e:02:fa:af:ad:d2:28:
aa:10:d6:37:a5:88:ac:77:b5:a9:fc:73:67:d0:de:
79:db:e5:00:10:00:71:23:a3:2a:a8:d0:dc:05:0e:
9f:4d:2e:f5:4e:8b:21:6f:a2:43:8c:11:42:7a:81:
26:1b:f2:50:6b:42:75:53:46:24:7a:3c:86:53:97:
dd:df:76:d6:dc:51:ae:8d:3e:57:df:31:db:c1:68:
ba:c3:9b:4f:04:7c:39:4c:d4:d2:f6:ae:ad:b9:fd:
b2:7c:a8:9d:a6:96:ec:23:ef:1e:84:36:34:76:72:
0c:2a:33:ca:27:02:1f:2e:ba:ac:5d:65:03:41:87:
40:94:ee:ad:51:4f:69:e1:20:18:9a:60:60:d1:d9:
8a:15:fd:ad:9a:55:3f:78:63:db:39:eb:64:d6:a6:
ed:aa:dc:fb:d0:f0:aa:1d:37:d8:78:9e:e9:1a:53:
49:c2:b2:bc:57:fc:47:c9:e5:48:23:35:90:6f:e3:
28:5b:f2:49:3a:88:f5:2f:66:4f:e7:6f:09:8c:b9:
5d:6f:a5:cc:53:e9:a3:41:75:0c:3b:8f:1a:03:e0:
fd:21:91:dc:ba:5a:fc:b5:04:ef:20:c8:5d:23:63:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:E6:10:59:A1:20:1C:B9:99:ED:EF:5E:AC:3B:9E:48:98:35:90
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/d5jmEFmhIBy5me3vXqw7nkiYNZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.117.0/24
202.50.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5e:ae:7f:25:ba:c8:3f:c5:c6:7a:15:99:3e:0c:bd:0c:b8:
1b:1e:d1:ac:12:05:ee:fc:b5:c5:81:30:ff:f5:3c:b4:bc:31:
f0:81:fc:6d:b8:9d:9c:77:ab:3a:e3:cf:d6:cb:a7:d8:5d:31:
6b:2f:43:b6:e6:0a:39:f6:ce:e9:84:ef:7c:d8:e9:c3:74:1e:
b9:23:3d:cf:73:46:3c:58:b7:72:77:90:fb:1f:ef:ba:d9:62:
34:94:17:15:14:2d:dc:e2:a0:90:00:f8:96:4f:f1:8d:23:91:
6f:a0:18:65:25:70:d9:ef:2f:d0:3f:da:e4:b5:b0:0d:04:e0:
c0:0a:74:ee:75:2c:5c:fa:ef:b1:e6:7e:5c:fa:d9:d9:67:93:
65:b6:60:bc:7c:ef:bb:99:3c:89:00:26:a3:54:0c:8d:31:79:
40:de:32:45:39:de:28:bc:e1:84:25:4c:5a:83:95:65:6d:00:
a0:e2:f3:b3:7b:09:e3:11:55:49:9b:3c:a8:93:42:97:8c:4d:
a5:f9:72:aa:ab:59:a3:d1:e8:a9:5a:f5:17:11:5c:a2:b6:ad:
03:83:97:58:3e:8c:99:6e:b8:d4:3a:c6:35:d1:cb:9c:de:e1:
fe:a8:1a:8d:7d:5a:2c:89:14:3b:85:22:f8:7c:fc:39:85:a1:
a2:f5:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:48 2024 by rpki-client on console-ams.rpki-client.org