Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/ppFIa4KPdW1WtJinzNGZE_6c1x4.roa
File: ppFIa4KPdW1WtJinzNGZE_6c1x4.roa (raw, json)
Hash identifier: BUYH+UQJp8vEF0NMTBma5J+QEENS54jmIph7ZT5IqL8=
Subject key identifier: A6:91:48:6B:82:8F:75:6D:56:B4:98:A7:CC:D1:99:13:FE:9C:D7:1E
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 018CC8DF8417042443344EA699C8610DBE6B
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/ppFIa4KPdW1WtJinzNGZE_6c1x4.roa
Signing time: Tue 02 Jan 2024 06:32:20 +0000
ROA not before: Tue 02 Jan 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34471
IP address blocks: 5.182.160.0/22 maxlen: 24
185.218.252.0/22 maxlen: 24
193.111.171.0/24 maxlen: 24
193.111.196.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 18:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:84:17:04:24:43:34:4e:a6:99:c8:61:0d:be:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jan 2 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a691486b828f756d56b498a7ccd19913fe9cd71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:7a:df:31:16:74:02:07:10:33:32:cb:6b:
24:91:97:ce:91:83:99:aa:bf:25:a9:2d:66:ba:c2:
e4:39:e5:b5:b6:f2:59:77:63:7e:e1:d7:ea:fd:75:
94:d3:91:32:fe:20:d7:2d:78:5b:ba:27:c2:07:96:
c0:2f:7d:3a:4b:e9:ba:0a:dd:45:ae:50:c5:79:c9:
87:66:c1:af:0f:63:a6:a5:63:73:74:cb:9a:ef:17:
53:a6:d6:6e:78:3d:c8:fe:ca:e1:e2:ee:d9:01:0c:
f4:5c:e4:c3:16:58:9b:3b:3d:11:f7:66:59:b5:58:
32:88:26:5d:91:eb:b9:d1:24:93:ba:e3:92:f4:32:
a8:a5:c9:6c:da:8d:28:9b:d8:9c:26:e9:b3:6a:63:
a2:c5:10:d2:52:08:9b:16:66:9e:c9:5f:5d:d2:5a:
57:d6:bc:95:4c:31:08:5a:7d:93:a7:8b:c2:ca:ba:
cb:90:d5:26:59:6f:1d:b3:7d:e1:40:80:ce:ef:22:
48:87:78:6f:5a:45:46:54:1e:6b:49:1c:8e:ef:fc:
a9:72:c1:7d:59:af:dd:2e:18:b3:9d:dd:0d:fb:1e:
d7:bd:b4:30:fe:b9:2d:44:f3:5d:43:b7:32:a7:31:
14:81:80:be:cc:47:5e:04:64:3d:28:5c:42:ee:2c:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:91:48:6B:82:8F:75:6D:56:B4:98:A7:CC:D1:99:13:FE:9C:D7:1E
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/ppFIa4KPdW1WtJinzNGZE_6c1x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.160.0/22
185.218.252.0/22
193.111.171.0/24
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
30:92:6a:f0:82:76:a6:f3:3e:c9:36:58:2e:0a:09:e5:24:71:
ea:93:ea:28:c7:9e:a1:a8:bf:7c:ea:51:44:d9:58:66:98:b6:
44:6b:7b:a0:18:8c:f7:bf:15:87:35:2e:47:60:09:56:26:cc:
ee:e6:89:95:d5:fa:00:b1:82:83:ca:04:63:64:c7:93:eb:13:
82:c8:28:bc:56:d9:38:ae:df:cc:d7:d1:fd:e6:c3:1c:a1:79:
29:10:32:c9:91:27:95:12:26:c5:e3:8a:12:59:a2:87:41:af:
4a:c8:38:56:36:f7:62:6d:3d:c6:6c:08:b4:c4:24:20:b8:c4:
ef:35:31:63:ce:98:5f:aa:07:35:fb:73:14:b0:1a:74:09:ae:
dc:34:af:74:b1:19:66:f8:30:7d:d7:e1:00:6a:83:eb:eb:c8:
64:ac:df:38:9d:c8:bb:bc:b0:ea:48:fd:14:52:79:3f:71:04:
0b:a0:f3:fe:5e:0c:3f:6f:76:46:18:bd:cf:9d:47:a0:9b:46:
9f:fd:80:34:c2:61:fc:a1:22:a2:68:86:b8:56:3e:80:aa:a6:
8a:da:f3:d3:88:a7:7c:0a:76:1e:73:44:2a:8f:4e:cf:fc:e2:
3d:03:22:f1:ea:d6:5f:3b:16:a3:ab:b6:71:08:74:50:5d:3a:
21:1f:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:05 2024 by rpki-client on console-ams.rpki-client.org