Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/Eo3J7ib71oZDj6Ufp9EOsqV0BTY.roa
File: Eo3J7ib71oZDj6Ufp9EOsqV0BTY.roa (raw, json)
Hash identifier: L+7CokFbctIx6fQ4b449W5XWKzbNOgf3wcMJ8haGk7E=
Subject key identifier: 12:8D:C9:EE:26:FB:D6:86:43:8F:A5:1F:A7:D1:0E:B2:A5:74:05:36
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 01856E542B0D35264B00AF19AAE94AD85C1A
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/Eo3J7ib71oZDj6Ufp9EOsqV0BTY.roa
Signing time: Sun 01 Jan 2023 17:14:47 +0000
ROA not before: Sun 01 Jan 2023 17:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60256
IP address blocks: 5.145.119.0/24 maxlen: 24
185.24.254.0/24 maxlen: 24
5.145.112.0/23 maxlen: 23
5.145.112.0/24 maxlen: 24
5.145.115.0/24 maxlen: 24
5.145.114.0/24 maxlen: 24
5.145.113.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:2b:0d:35:26:4b:00:af:19:aa:e9:4a:d8:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 1 17:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=128dc9ee26fbd686438fa51fa7d10eb2a5740536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:df:a7:98:01:9c:12:f0:d3:92:05:23:ff:
09:03:3b:c4:ae:f2:b6:d4:36:9a:f4:3f:4e:0c:12:
1d:98:2e:f9:de:06:c2:5f:c7:7d:02:5b:1f:2f:89:
06:87:43:9b:25:74:2d:5c:ab:e7:90:c5:db:fe:04:
b9:32:43:96:11:a3:8f:9d:2a:db:8e:de:e8:2e:b6:
a5:ca:de:ee:01:e6:e5:69:ab:0b:13:18:0b:53:d6:
ab:d4:bb:b0:63:f2:c1:c8:98:a5:6d:0d:ee:14:fe:
e4:e2:60:0a:db:fc:01:10:3f:88:fb:b9:02:cb:b7:
67:30:d2:15:ea:b4:f0:3f:fe:7d:39:8a:cd:fa:fd:
6c:78:cb:01:69:fb:d2:9e:08:ec:0b:44:92:74:d6:
8b:33:1c:7e:ea:4c:6f:c0:56:39:2a:fb:e9:f6:c7:
85:f9:98:1d:f2:bd:af:77:f5:85:f2:a1:e1:e0:7a:
cb:6b:0e:da:a2:f7:de:af:6d:35:22:56:76:41:8e:
6b:81:48:c6:15:e1:2f:c7:d6:73:13:34:b2:ed:dd:
9f:92:12:b4:47:40:5e:26:c3:81:0f:67:5e:89:06:
ee:2a:14:d9:e3:43:a7:9c:1b:4a:6e:be:f6:05:7b:
2d:87:13:ab:1c:5c:a6:39:a3:de:78:4f:41:07:c2:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:C9:EE:26:FB:D6:86:43:8F:A5:1F:A7:D1:0E:B2:A5:74:05:36
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/Eo3J7ib71oZDj6Ufp9EOsqV0BTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.112.0/22
5.145.118.0/23
185.24.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:4c:f3:24:59:cc:40:28:6a:1b:2b:a5:8a:98:83:67:d9:6e:
7a:89:b4:9f:4d:1c:65:d4:44:19:70:a4:68:c8:61:a0:f8:49:
bc:d4:3d:a2:fb:90:94:ab:c5:dd:1e:43:d6:c1:4e:68:72:e4:
59:a8:cb:f1:c7:47:18:e4:06:c5:2c:83:30:ad:37:5b:d2:76:
1d:ac:f6:90:db:b3:e1:b8:05:1c:45:88:90:6a:39:75:e4:2d:
26:56:19:a7:0f:95:a0:8a:29:d4:28:b0:07:35:14:0e:14:f8:
95:55:d4:be:c3:8c:be:83:5d:f4:aa:80:11:43:dc:2d:50:60:
97:59:88:5b:7e:d4:ea:32:78:a5:38:5b:1c:85:99:03:64:46:
6c:cb:43:d6:23:c1:e7:8b:1e:3b:42:8e:df:f1:38:47:26:9f:
ae:b4:ce:14:2e:44:e9:e1:f9:b5:bd:47:a3:62:8a:d6:ae:0a:
18:59:c2:c8:6d:9f:28:c0:a5:2d:91:b8:79:fa:04:4f:93:c2:
cd:c0:54:54:8b:56:1f:cc:90:72:5d:26:a5:1d:e7:60:d6:58:
ac:8d:69:f7:85:5f:c5:25:e1:67:0a:4b:a8:cc:30:17:a8:c1:
86:40:01:31:3c:15:e4:49:d3:34:29:be:ff:cd:20:63:27:78:
a1:60:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:13 2023 by rpki-client on console-ams.rpki-client.org