Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/5Zl_UZVudwpUoCUJKbFrKDc13n8.roa
File: 5Zl_UZVudwpUoCUJKbFrKDc13n8.roa (raw, json)
Hash identifier: hbc7eQpjibN/0TCkNZmSbAFcTZdmiEPr0qSF03a5q64=
Subject key identifier: E5:99:7F:51:95:6E:77:0A:54:A0:25:09:29:B1:6B:28:37:35:DE:7F
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0185E30CFCF8C773F336C91B06347F7ED35C
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/5Zl_UZVudwpUoCUJKbFrKDc13n8.roa
Signing time: Tue 24 Jan 2023 09:12:37 +0000
ROA not before: Tue 24 Jan 2023 09:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35292
IP address blocks: 87.239.136.0/21 maxlen: 24
78.31.168.0/21 maxlen: 24
193.47.73.0/24 maxlen: 24
2001:678:2a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:0c:fc:f8:c7:73:f3:36:c9:1b:06:34:7f:7e:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jan 24 09:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5997f51956e770a54a0250929b16b283735de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:48:8c:3e:ab:07:96:d4:a6:a5:3e:84:e9:
68:6e:c5:c9:92:3e:ec:8e:53:31:de:57:d4:b3:29:
9c:ed:03:2d:76:6f:23:c3:6e:e5:2e:72:36:59:2f:
2c:4a:0b:83:f2:27:d7:bd:e7:74:82:8f:24:44:a4:
f7:33:4e:c2:31:e3:9d:d9:5d:91:11:cf:14:f1:ee:
e8:36:0a:bc:01:9d:4d:31:39:cf:5a:8a:c5:a8:1c:
6f:1e:11:2e:d3:f5:c2:eb:ca:f4:f2:3f:c0:cf:d4:
2c:3e:58:3a:67:c4:99:b5:ee:4a:6b:84:b0:4f:83:
b6:9f:43:78:4c:ec:95:f9:2c:87:27:10:82:38:aa:
d3:c0:25:85:3a:ca:67:40:cf:33:b5:77:37:9b:a2:
e2:6f:0b:c3:86:a1:e4:c5:a6:50:46:aa:c1:18:70:
72:27:9c:91:cc:8c:46:68:80:ad:0c:88:eb:2a:bc:
fd:43:cc:4e:d0:8b:c3:63:03:2b:00:65:0b:91:1f:
0b:99:8c:18:72:55:98:f1:4c:49:dd:0d:c4:b6:4f:
69:de:92:d4:ea:51:0c:d0:39:35:3a:a8:e6:ca:e6:
55:ec:05:51:77:bc:52:03:80:0d:28:fb:4f:88:98:
d0:83:28:0a:0e:f6:2f:c1:bf:c3:82:34:82:00:5c:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:7F:51:95:6E:77:0A:54:A0:25:09:29:B1:6B:28:37:35:DE:7F
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/5Zl_UZVudwpUoCUJKbFrKDc13n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.168.0/21
87.239.136.0/21
193.47.73.0/24
IPv6:
2001:678:2a0::/48
Signature Algorithm: sha256WithRSAEncryption
94:cd:65:10:09:2c:4b:2a:d7:51:df:f3:24:90:95:dc:e3:36:
25:4d:85:48:fd:93:02:aa:e5:61:0f:de:76:a7:9d:49:52:4f:
06:6f:03:95:9d:eb:d9:17:13:bb:99:e5:86:a8:76:42:f4:48:
49:f2:59:ac:8e:92:45:05:65:0d:ae:44:2f:97:9a:64:cc:98:
ef:5a:b4:de:b9:f6:1b:9e:f5:3b:03:98:33:af:5f:72:6d:be:
02:80:d3:a0:48:26:b6:99:64:bd:5d:55:8c:66:65:7c:f0:7c:
f3:62:da:4c:a0:d2:1d:38:dc:6b:5d:c2:6f:52:a7:94:3e:e6:
74:13:60:a7:ac:f4:0c:b0:0b:f4:82:30:79:f4:a1:c5:ec:29:
e4:22:8c:55:ce:98:6d:7e:ab:5b:7c:f1:30:85:01:27:7f:7d:
f1:62:0f:62:65:ec:a5:3a:84:cc:57:b5:af:e1:e3:f2:03:ff:
1b:8c:25:3b:8f:94:82:ff:3d:2a:3e:02:0c:bd:59:a9:48:95:
db:82:6a:de:c9:b1:e0:56:e8:12:c3:88:00:90:cf:76:1c:b0:
04:92:d6:7a:e5:9f:a0:36:a2:da:7a:20:69:00:cc:f4:08:19:
ae:70:41:ee:04:15:a0:1a:a1:7c:26:fa:b6:f6:8e:33:21:d5:
59:c7:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:50 2024 by rpki-client on console-ams.rpki-client.org