Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o68c-QXQ_PyCYJLRIbV2v0-6dsY.roa
File: o68c-QXQ_PyCYJLRIbV2v0-6dsY.roa (raw, json)
Hash identifier: rYLKdDRqAue0iuHCaHBZeImroIqplDDm2bsrezxFkHU=
Subject key identifier: A3:AF:1C:F9:05:D0:FC:FC:82:60:92:D1:21:B5:76:BF:4F:BA:76:C6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01862C701D64FDF5F151DBFDA10C1D3FA069
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o68c-QXQ_PyCYJLRIbV2v0-6dsY.roa
Signing time: Tue 07 Feb 2023 15:13:10 +0000
ROA not before: Tue 07 Feb 2023 15:13:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210702
IP address blocks: 185.180.228.0/24 maxlen: 24
5.180.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Mar 2023 11:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:70:1d:64:fd:f5:f1:51:db:fd:a1:0c:1d:3f:a0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 7 15:13:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3af1cf905d0fcfc826092d121b576bf4fba76c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c4:ab:23:70:9c:1f:b5:0a:cf:b9:4c:af:76:
91:2e:4c:3f:b4:e6:7d:e5:7d:13:59:df:7b:db:4a:
af:27:87:48:95:50:3a:4b:88:61:a5:bd:a8:9b:4d:
65:50:42:c7:5d:03:16:d2:34:6c:16:c7:1f:b2:80:
43:83:e4:5e:1e:d9:fc:58:49:c8:58:97:ab:dd:e9:
c4:66:53:d8:de:78:7a:05:89:5c:6b:6b:d6:6d:ca:
ae:7c:6c:31:2d:0f:c8:9f:8b:44:7d:23:0a:62:d4:
f1:e2:b7:c0:41:fb:5e:9b:db:bc:23:3f:4b:18:17:
28:76:42:68:fe:16:31:17:41:78:ff:0e:64:cb:96:
ab:42:4e:ec:9a:78:ee:58:4c:56:fc:d6:d3:1c:7a:
8d:1f:06:e5:e4:e1:c4:18:ac:f9:6a:0d:bf:17:e6:
00:30:d5:2f:7f:c1:86:b8:bf:3f:ad:f5:24:e3:46:
66:61:38:ad:02:25:a7:f9:45:f4:89:91:cf:db:07:
20:81:b3:31:e3:bb:d3:6d:ca:41:d3:ee:31:38:e1:
f7:51:0e:0b:15:96:b1:9b:3e:44:e8:c8:52:83:32:
8c:a9:53:a5:f7:1f:43:ab:df:5c:09:d2:82:73:22:
47:fe:b2:38:7d:b3:bb:61:e6:58:db:6c:f5:04:f3:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:1C:F9:05:D0:FC:FC:82:60:92:D1:21:B5:76:BF:4F:BA:76:C6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/o68c-QXQ_PyCYJLRIbV2v0-6dsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.139.0/24
185.180.228.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5e:cb:b6:0f:45:c0:b4:c0:0f:67:d0:e4:e7:d0:2d:2b:de:
54:b5:88:98:f1:15:c0:13:e7:25:0d:a7:c4:d9:38:65:e7:b7:
cd:69:35:ab:54:46:74:75:68:b4:00:78:ac:ee:46:b2:60:a7:
0b:d9:8b:59:84:05:d6:4c:a3:1e:9a:a0:58:ab:c9:2e:f8:2c:
b6:4c:c4:68:08:59:4b:69:96:97:1b:38:84:a4:1e:85:ed:c4:
18:6c:76:6a:0d:f0:59:62:04:7f:17:22:79:c1:39:5e:6f:aa:
c2:17:67:c5:0d:a3:2a:bf:e4:5f:a2:e8:01:3d:ad:d5:8e:c5:
a0:71:74:4d:44:96:3a:75:6b:7a:c6:e0:d7:67:48:99:52:1e:
93:bc:cd:95:a5:39:f7:e3:ec:95:ae:ad:e6:de:d9:f2:89:21:
2a:cb:55:90:6c:47:66:59:12:8f:b2:98:95:dd:b2:05:2e:d7:
f3:1f:89:cb:a5:c9:ef:66:8a:1c:41:f8:62:78:d6:be:5e:5f:
ab:72:23:ed:14:82:0a:6f:56:17:f1:04:d3:a9:8f:5e:d7:5e:
5a:2d:d7:16:8d:16:25:8b:2e:8f:3c:28:8b:3a:5c:93:38:df:
27:f9:7a:de:9b:68:fd:8c:78:92:30:e5:f9:7f:d4:13:8b:8b:
1e:45:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org