Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/5ggwdPTt04dvb2YwqxzVpD8j-BA.roa
File: 5ggwdPTt04dvb2YwqxzVpD8j-BA.roa (raw, json)
Hash identifier: HA/O5Wpkl2ileoP0Ih7bxoWG3/EIA43LxBfSSki9KJQ=
Subject key identifier: E6:08:30:74:F4:ED:D3:87:6F:6F:66:30:AB:1C:D5:A4:3F:23:F8:10
Certificate issuer: /CN=d090785798cec6769f17cdd75cbfaaf2fc865ce6
Certificate serial: 018572034D806E2D863AE522725775AB0C8E
Authority key identifier: D0:90:78:57:98:CE:C6:76:9F:17:CD:D7:5C:BF:AA:F2:FC:86:5C:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JB4V5jOxnafF83XXL-q8vyGXOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/5ggwdPTt04dvb2YwqxzVpD8j-BA.roa
Signing time: Mon 02 Jan 2023 10:24:57 +0000
ROA not before: Mon 02 Jan 2023 10:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200811
IP address blocks: 185.98.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:4d:80:6e:2d:86:3a:e5:22:72:57:75:ab:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d090785798cec6769f17cdd75cbfaaf2fc865ce6
Validity
Not Before: Jan 2 10:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6083074f4edd3876f6f6630ab1cd5a43f23f810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:a5:54:57:5d:bc:44:d0:70:ca:e9:b6:f5:
3d:38:d6:3f:3d:1b:b4:c5:78:d1:8c:5e:ba:b3:fb:
52:fe:24:99:14:c3:ce:3c:c7:52:1a:77:7b:e5:3f:
da:59:24:d9:bd:5d:52:da:7a:6c:d6:0d:cf:9a:56:
2f:1d:f7:a8:08:0c:af:dc:95:92:a5:27:d3:60:2c:
1b:4e:b3:91:58:0c:74:e1:fd:a2:ec:bc:0b:c5:07:
86:46:3c:49:29:1c:be:bb:5a:8a:ef:8f:c1:d3:59:
e2:79:04:af:0f:04:e0:f9:f9:65:f4:5c:83:97:12:
b3:ac:f8:f5:a1:09:44:e9:1b:7c:f5:dc:23:f7:8d:
16:95:c6:7b:fb:2f:94:c8:6e:b9:7f:41:59:15:fd:
01:a5:af:87:4f:05:3f:7c:f1:e4:b9:74:d2:0b:ee:
d6:03:a7:02:8d:82:a4:04:b6:d6:4e:65:13:e4:f8:
5b:90:84:34:9a:ef:4e:4f:bf:3d:c2:d3:bf:0b:b5:
0f:29:6f:8f:9c:4c:b5:6d:57:b6:08:10:0a:a7:1a:
57:88:1a:c0:91:c9:43:36:1c:0d:88:fd:a6:bd:f9:
68:5d:4d:12:5e:8c:5e:dc:6a:5e:60:9e:86:85:31:
37:ba:71:81:ba:ad:03:28:7e:48:ec:34:18:c4:32:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:30:74:F4:ED:D3:87:6F:6F:66:30:AB:1C:D5:A4:3F:23:F8:10
X509v3 Authority Key Identifier:
keyid:D0:90:78:57:98:CE:C6:76:9F:17:CD:D7:5C:BF:AA:F2:FC:86:5C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JB4V5jOxnafF83XXL-q8vyGXOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/5ggwdPTt04dvb2YwqxzVpD8j-BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:12:87:c0:64:23:40:30:d0:3f:ff:2e:fa:dc:7f:03:44:21:
55:3f:f4:5e:11:7a:58:5b:e1:7c:97:70:d5:86:16:b3:f1:ee:
3c:69:b2:a4:ce:dc:8b:11:34:b4:18:c4:46:05:c8:b3:46:8b:
81:f2:ac:bd:c6:81:7e:60:f1:c0:16:12:4d:21:ef:21:67:2e:
13:49:e4:d6:3d:e7:aa:e9:12:3a:3e:f2:da:07:47:e8:34:76:
97:a6:09:95:82:bd:28:0a:85:17:e9:3b:3f:a8:18:2c:45:46:
b9:34:de:c6:0d:4c:43:98:e2:77:91:0c:ff:1c:5e:4d:8f:f3:
45:e8:a0:7d:f6:d8:06:37:36:a0:67:bd:07:6e:cc:4b:4d:c9:
55:fc:b7:a1:68:0e:e1:a3:6d:f4:63:7e:75:49:30:34:e3:57:
76:e8:da:b3:35:af:73:dd:82:2c:5d:2f:ab:ac:1f:3b:64:04:
a3:a7:59:1f:bb:59:08:fb:8f:65:20:0e:5d:87:9b:d5:ac:a7:
97:60:49:4f:c5:cc:22:41:58:aa:57:e1:de:77:fd:dd:c4:a6:
e9:8a:5f:23:f9:ee:ce:71:47:f5:33:62:fa:b8:c9:39:95:a9:
55:18:fa:5a:26:e6:2f:a1:0d:2a:cf:c0:b6:a9:b4:6e:a1:8e:
f5:c5:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org