Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/l53q6OZ5y_-9jIMfmpPcL8kazRg.roa
File: l53q6OZ5y_-9jIMfmpPcL8kazRg.roa (raw, json)
Hash identifier: eAI8cjfAcE5R1laDWnfgsei74hgi/THQBWaUcIL6w48=
Subject key identifier: 97:9D:EA:E8:E6:79:CB:FF:BD:8C:83:1F:9A:93:DC:2F:C9:1A:CD:18
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F4C6FBA9587607BB427D0F2CF1FB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/l53q6OZ5y_-9jIMfmpPcL8kazRg.roa
Signing time: Sun 01 Jan 2023 19:35:28 +0000
ROA not before: Sun 01 Jan 2023 19:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198762
IP address blocks: 5.8.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f4:c6:fb:a9:58:76:07:bb:42:7d:0f:2c:f1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=979deae8e679cbffbd8c831f9a93dc2fc91acd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:25:b3:8f:b6:27:87:ec:83:93:b4:ee:16:
33:61:41:cd:22:57:3e:1e:1c:e2:72:98:e9:21:60:
27:93:53:ae:3f:d0:df:83:08:cf:44:08:c7:70:03:
96:58:31:8e:32:71:65:2e:fc:4b:4d:6b:b4:10:97:
01:2f:f9:f7:11:46:32:f0:1b:6e:08:e9:72:69:84:
57:c3:9b:80:04:62:40:2a:5c:32:79:50:9e:a7:17:
cb:ee:21:93:80:b4:3f:1b:d2:8a:f0:39:4c:c3:e6:
17:82:e8:72:d8:3d:eb:0b:d5:ff:9d:6b:2b:07:bd:
b5:62:2c:f2:f3:c3:44:5a:47:b0:c3:4f:89:97:7e:
e8:9b:0e:a3:55:84:e0:73:cc:0a:57:9e:99:fe:15:
98:97:08:c2:a3:7c:10:31:1e:60:6a:ac:36:8e:1f:
b0:0e:55:30:3d:93:82:3e:43:c5:2e:ec:21:23:cb:
fd:57:66:83:af:ad:dd:89:68:82:45:83:19:4b:25:
22:e7:26:06:4c:09:c8:36:6e:cf:f1:36:56:82:5d:
cd:1e:c7:53:f9:23:43:a3:c2:2f:f4:6c:24:01:ff:
c0:cf:08:73:f6:43:59:d3:b9:98:51:24:af:e1:6d:
79:30:89:85:8f:fd:23:84:7c:ad:b1:99:1d:fd:1d:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:EA:E8:E6:79:CB:FF:BD:8C:83:1F:9A:93:DC:2F:C9:1A:CD:18
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/l53q6OZ5y_-9jIMfmpPcL8kazRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fb:21:50:0d:85:ec:7c:fa:63:e2:54:e1:0d:ad:4c:7b:6f:
f4:86:38:69:03:e5:09:3a:d2:da:ad:7d:3c:92:f4:b6:da:c5:
fe:f8:06:d3:63:26:7e:f4:df:e2:8b:7d:82:03:ac:c2:71:e6:
1c:b3:08:5b:3e:36:e9:75:8a:19:d2:ad:59:6a:e8:f7:85:7c:
15:34:b2:cd:3b:d1:39:af:99:c9:ab:12:60:47:0b:03:39:dd:
08:c3:9d:4d:52:6b:19:19:8b:c3:af:ed:c4:0a:ed:18:0f:a3:
4a:4e:49:3c:41:36:78:0b:7f:e5:9a:20:48:29:f3:51:d2:66:
74:a4:81:78:c1:01:21:1f:f0:ec:37:40:f9:f3:b7:e1:f8:33:
bb:92:6c:13:a7:18:74:b1:8e:cb:b4:16:63:61:11:aa:44:a5:
ee:b1:36:7c:68:e3:07:c6:de:f5:1c:07:b8:20:f2:d3:e7:cf:
4d:3e:17:2c:72:6e:6e:e9:56:b7:c2:d6:72:fc:cb:80:2e:78:
7d:a1:6e:d8:c0:9c:83:c0:65:a1:9e:fd:1f:e3:90:5b:1c:67:
3b:30:d5:dc:eb:d0:11:47:93:ad:c3:cb:3f:95:53:1b:97:83:
a5:81:ec:d2:bd:0e:c4:cf:fd:1d:d2:d9:d1:cd:b0:5c:94:13:
1b:80:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org