Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/5TlyivtklHO1eSzjMfOTGZR3Hj8.roa
File: 5TlyivtklHO1eSzjMfOTGZR3Hj8.roa (raw, json)
Hash identifier: eWWTYrffJM1Iz2gbkqbYbxZ0Jd4ISBvNly/jY7ltzy0=
Subject key identifier: E5:39:72:8A:FB:64:94:73:B5:79:2C:E3:31:F3:93:19:94:77:1E:3F
Certificate issuer: /CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Certificate serial: 0185737AA3DBD7941C35CA8BA9B07641DD2D
Authority key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/5TlyivtklHO1eSzjMfOTGZR3Hj8.roa
Signing time: Mon 02 Jan 2023 17:14:55 +0000
ROA not before: Mon 02 Jan 2023 17:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207092
IP address blocks: 185.193.15.0/24 maxlen: 24
185.193.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:a3:db:d7:94:1c:35:ca:8b:a9:b0:76:41:dd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Validity
Not Before: Jan 2 17:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e539728afb649473b5792ce331f3931994771e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:17:20:06:0f:30:1b:c2:25:cd:58:f0:a2:
6f:da:53:99:dc:a1:10:e2:aa:b6:cd:58:c5:d6:e0:
8c:4d:d9:72:3c:19:ac:95:0a:08:f5:f5:c3:4a:09:
14:94:06:60:cc:d4:3a:b1:b8:b1:46:a7:3a:54:c5:
82:fb:10:cc:1f:c1:3f:ee:99:dd:59:61:9f:a9:44:
f3:9f:9a:79:36:58:f6:84:6d:e7:b9:19:af:ae:f1:
09:f5:69:8d:24:79:a8:b6:6e:0a:9e:2c:26:e0:b2:
9d:74:34:d5:87:5c:3d:95:d6:68:58:66:ed:70:f5:
90:3c:31:f8:d0:9d:b7:89:60:c1:76:e0:bf:bd:06:
c2:8f:c2:b8:b4:83:49:7a:b8:7a:08:d2:d6:d6:ef:
20:f6:59:a6:07:53:bc:b5:3d:84:3d:18:a5:18:a5:
d4:d8:5c:88:ff:5a:aa:1b:47:4f:1c:97:48:d7:ff:
f9:00:ca:b0:67:42:9c:c6:7c:3a:70:da:0c:95:c7:
b7:43:57:41:c9:fa:8a:02:05:8a:0b:b2:67:28:b2:
ed:b7:12:bc:9f:50:56:6d:da:38:d6:c5:6d:ac:42:
63:22:56:ca:bb:4a:d7:5e:cd:ce:12:a8:e9:17:db:
6a:04:59:a6:9b:1e:b5:49:6f:3a:0c:bf:da:1f:dc:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:39:72:8A:FB:64:94:73:B5:79:2C:E3:31:F3:93:19:94:77:1E:3F
X509v3 Authority Key Identifier:
keyid:58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/5TlyivtklHO1eSzjMfOTGZR3Hj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.12.0/23
185.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5f:07:54:53:22:a7:ba:fb:56:ce:41:02:37:d2:e0:64:a8:
96:c4:58:b3:69:85:39:98:48:f0:7e:e9:e9:50:e1:0a:31:11:
23:ee:ec:13:8c:fc:66:05:20:f5:7c:ec:76:f9:d2:09:35:e4:
09:f6:30:8a:84:22:7e:43:bd:ad:06:83:a3:a9:19:ef:e6:87:
82:96:dc:71:26:8c:02:e7:be:b1:f8:d0:b9:97:8d:59:30:b1:
62:f2:66:d3:fe:80:63:56:6e:8f:f8:aa:3d:73:c9:17:41:5a:
1a:cd:4b:d0:fb:41:17:d5:51:b5:a7:7a:49:6b:62:2f:9c:52:
db:56:05:a8:ef:47:1a:2d:40:7d:38:12:53:f1:b6:50:19:0b:
91:2b:2e:2f:e3:56:c0:39:70:d6:a3:47:45:aa:39:77:22:f1:
1b:e2:c3:22:13:ff:6b:0e:62:44:be:c6:f1:ee:4f:00:fe:ab:
0d:e9:fd:cb:3c:d0:ae:5f:b6:33:35:10:94:29:86:f1:97:b2:
c4:c5:fb:3b:a2:15:f5:33:2c:ff:be:4d:3f:b6:08:08:0e:d8:
cc:b8:2f:25:80:f0:b6:84:f3:e4:db:e2:23:6a:69:59:14:ef:
f0:4e:2b:0c:c3:bc:a1:39:c0:89:1a:e4:a6:b1:81:f5:29:ff:
75:58:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:03 2024 by rpki-client on console-fra.rpki-client.org