Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/VSbV5VsBZ14NoDW_aVOs2FwQSqM.roa
File: VSbV5VsBZ14NoDW_aVOs2FwQSqM.roa (raw, json)
Hash identifier: yhHb3eiw0q5u9jo1LHfBYD21n1xMdp8BgDEZcUn2acw=
Subject key identifier: 55:26:D5:E5:5B:01:67:5E:0D:A0:35:BF:69:53:AC:D8:5C:10:4A:A3
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 018C5DDA2397C1CCF426D5E5659718DB0510
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/VSbV5VsBZ14NoDW_aVOs2FwQSqM.roa
Signing time: Tue 12 Dec 2023 11:47:06 +0000
ROA not before: Tue 12 Dec 2023 11:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34471
IP address blocks: 5.182.160.0/22 maxlen: 24
185.218.252.0/22 maxlen: 24
193.111.171.0/24 maxlen: 24
193.111.196.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:da:23:97:c1:cc:f4:26:d5:e5:65:97:18:db:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Dec 12 11:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5526d5e55b01675e0da035bf6953acd85c104aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:93:f5:3c:8c:8c:be:55:b6:7d:f4:e5:4c:
51:d3:42:75:a0:eb:f5:62:a9:12:01:c2:0d:65:42:
ff:6d:e1:16:3a:52:b4:62:2e:82:c3:f3:79:c4:3d:
78:21:10:cd:e9:09:0d:df:d0:ea:95:e3:dd:f6:84:
af:1d:17:c9:ce:1d:79:74:3e:a6:24:95:73:48:ac:
b1:1d:f1:04:2e:c3:70:c8:06:21:63:cf:7e:fd:df:
35:3a:5a:15:6f:41:c3:7d:a2:05:c8:3e:1a:75:e7:
4f:00:99:ab:e6:11:f5:f7:39:4d:09:77:f3:32:16:
fd:84:f9:8e:f7:a1:68:06:a3:96:d1:58:6e:d4:3d:
29:24:8e:2d:6d:9a:4c:91:4e:59:49:eb:82:fa:79:
27:f5:ea:02:5c:3f:08:8f:41:55:59:07:c5:25:7f:
dc:83:33:fa:27:5a:d2:11:db:87:7a:e1:4f:8d:00:
57:49:3c:13:da:85:04:04:2f:9c:e9:4c:50:e5:9f:
2c:c9:9f:70:90:cd:7e:74:3d:8c:1f:15:0f:9d:9d:
f6:79:20:79:ef:79:8c:b4:35:51:d8:94:4c:dc:0d:
62:25:38:b2:db:5b:90:c4:7e:92:67:19:bf:b7:6b:
1e:c6:b2:9e:85:83:9e:63:96:94:c4:11:7b:ef:08:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:D5:E5:5B:01:67:5E:0D:A0:35:BF:69:53:AC:D8:5C:10:4A:A3
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/VSbV5VsBZ14NoDW_aVOs2FwQSqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.160.0/22
185.218.252.0/22
193.111.171.0/24
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
10:c9:0e:83:7a:5f:f2:33:ac:d1:b7:58:12:d7:3b:ce:76:d3:
03:2c:d4:b7:e3:24:12:7b:f4:b5:94:42:00:6a:47:56:ca:39:
92:f3:32:e3:2c:63:c7:93:e8:0f:c0:07:1f:6e:ad:c5:de:8a:
51:b7:4f:ad:43:e5:5e:b7:25:6e:85:a0:2c:80:f9:36:b9:7d:
d3:ee:b3:c6:7f:b0:bf:58:1f:75:a4:18:de:12:4a:2f:68:cd:
be:62:65:87:f2:21:9c:92:6c:1d:ba:d8:61:9c:9e:30:88:53:
d4:7d:db:c6:b5:d7:a8:e4:d4:d2:f5:1d:a9:64:ae:8f:95:18:
e0:3d:ae:c2:2a:de:31:c0:91:d6:bd:4f:78:25:2e:ad:91:a2:
02:71:6c:da:ae:d7:6d:3a:90:03:e1:fb:66:a6:2c:93:b6:f2:
37:05:f9:65:e6:c6:e2:ef:b9:e3:3e:f0:5a:a8:22:38:f6:c2:
98:27:d3:ca:a1:99:57:90:b8:92:dc:00:e9:f4:b0:15:95:5c:
90:01:86:23:bf:50:91:1c:07:99:b4:e1:8b:04:ae:00:5e:b4:
e4:76:9e:92:04:b0:db:d2:5d:6a:99:b1:2c:ac:f5:f1:e6:d5:
d2:2f:2c:02:7c:c6:b1:73:28:5b:13:90:a1:bc:c6:3d:34:08:
67:f5:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:42 2024 by rpki-client on console-fra.rpki-client.org