Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5RS6I2DZpMiisIR55G5dlbTYcZM.roa
File: 5RS6I2DZpMiisIR55G5dlbTYcZM.roa (raw, json)
Hash identifier: 2UTlrptpKwgQ/7LoE96EmwGSIpv4R6I7n2Uy4mmHjkk=
Subject key identifier: E5:14:BA:23:60:D9:A4:C8:A2:B0:84:79:E4:6E:5D:95:B4:D8:71:93
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187C6D7C4E5A1D6938947FF311E1C1C2552
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5RS6I2DZpMiisIR55G5dlbTYcZM.roa
Signing time: Fri 28 Apr 2023 07:50:41 +0000
ROA not before: Fri 28 Apr 2023 07:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 217.74.20.0/24 maxlen: 24
94.176.111.0/24 maxlen: 24
91.190.106.0/24 maxlen: 24
185.241.211.0/24 maxlen: 24
45.83.30.0/23 maxlen: 23
45.80.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:d7:c4:e5:a1:d6:93:89:47:ff:31:1e:1c:1c:25:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 28 07:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e514ba2360d9a4c8a2b08479e46e5d95b4d87193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:0e:ce:62:9b:5a:39:d8:95:e2:f0:5f:07:
79:34:0e:1d:7a:f5:8d:fa:5b:c7:4b:79:cf:d7:67:
dd:7d:8c:87:a2:e8:0a:50:6d:7b:ca:56:59:95:06:
cb:01:23:22:69:3a:da:0e:01:04:ec:af:97:98:15:
6a:04:4b:19:a8:7c:07:54:ee:f5:47:2b:ce:90:89:
82:9f:95:0d:e7:de:58:6d:53:ea:a0:5f:6f:f3:28:
55:61:f7:20:2c:f0:2c:f5:be:5a:9d:52:c9:80:ce:
a2:4b:62:39:e4:97:ab:f5:eb:69:10:eb:6d:5d:98:
9a:93:eb:c3:d8:06:04:2e:42:be:78:c1:90:9f:88:
af:12:6c:d3:4b:27:b3:11:91:e2:b4:8a:51:d6:1b:
cd:a0:85:f6:6b:7f:e9:47:05:73:b2:07:c7:38:82:
ca:cc:77:09:74:71:10:ec:65:f7:b5:d0:43:01:dc:
e9:3c:6c:1b:65:a6:57:e3:bf:ab:e1:94:15:9b:d2:
b4:6a:08:a9:f4:23:bb:7f:03:9d:15:8b:ee:02:97:
af:66:3e:1a:ee:36:8d:bf:00:19:78:c0:fe:09:b1:
2e:0e:c1:04:fd:1b:93:01:a2:b8:ac:80:bb:b6:72:
1f:55:2c:6b:5f:90:db:9a:16:45:5d:d0:bc:4e:e7:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:BA:23:60:D9:A4:C8:A2:B0:84:79:E4:6E:5D:95:B4:D8:71:93
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5RS6I2DZpMiisIR55G5dlbTYcZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.156.0/24
45.83.30.0/23
91.190.106.0/24
94.176.111.0/24
185.241.211.0/24
217.74.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:45:98:37:d1:4d:1f:42:5e:6b:81:6f:5d:ae:7c:b3:d6:21:
46:a5:e9:73:c1:45:88:9d:37:1b:5c:05:b8:34:70:2e:e7:33:
f5:f1:2a:84:c3:ec:08:bc:9d:d3:53:91:67:d2:47:01:77:08:
c5:3c:e8:e8:cb:d8:9f:8c:06:87:31:a7:67:60:a4:27:f8:41:
30:b6:8b:71:90:b7:01:1a:b2:26:ac:d6:b9:f9:28:a3:31:12:
57:74:f2:6b:07:05:6e:4d:f7:98:7f:ae:1b:0f:52:d4:98:3b:
db:db:c3:e3:4a:74:f0:a5:b4:aa:c3:d9:b6:35:8a:55:4f:fc:
8e:71:c8:a4:c9:ed:09:d2:f3:c0:27:50:f5:c4:9f:a7:e4:6c:
46:73:37:a5:a9:52:54:ba:5c:8b:5c:af:a3:28:ec:20:4f:ea:
4c:42:e4:0e:c3:a5:27:de:33:4d:a7:c0:8f:10:d8:5d:cc:7d:
7a:0b:69:7b:5c:5c:02:27:22:b2:75:39:08:00:45:b5:33:f3:
94:b7:be:93:28:e0:c7:6f:b4:ec:38:32:14:8c:94:57:fd:dc:
17:1c:12:38:9f:f6:73:5a:f8:af:33:69:f2:d0:07:ef:48:a0:
2d:c7:47:06:04:69:4b:eb:2f:3a:54:72:ee:f7:a3:ea:ed:67:
ad:69:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org