Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/55fEYZ6gpCUJMMpENNb3DfiM2es.roa
File: 55fEYZ6gpCUJMMpENNb3DfiM2es.roa (raw, json)
Hash identifier: 15Oiz/vUje+VTJWoToGggR5Nbv/iC49FhWDnLTLxlwg=
Subject key identifier: E7:97:C4:61:9E:A0:A4:25:09:30:CA:44:34:D6:F7:0D:F8:8C:D9:EB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187B291A44773C2B9351A6BD167CF5CE8C5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/55fEYZ6gpCUJMMpENNb3DfiM2es.roa
Signing time: Mon 24 Apr 2023 09:21:41 +0000
ROA not before: Mon 24 Apr 2023 09:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198825
IP address blocks: 194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Nov 2023 17:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:91:a4:47:73:c2:b9:35:1a:6b:d1:67:cf:5c:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 24 09:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e797c4619ea0a4250930ca4434d6f70df88cd9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9f:4e:8b:fb:24:ca:23:51:40:9e:b5:24:e3:
98:a0:16:d5:aa:1b:dd:a2:b0:d2:da:63:1e:ed:ce:
ed:b6:22:2f:64:d6:ff:c0:e2:1d:62:7a:82:b1:e1:
3e:a6:2f:4e:0e:f4:67:83:ce:fe:67:c7:94:e3:65:
3f:02:ad:45:bc:ef:4f:a3:f2:5d:e4:ae:c9:6e:71:
f1:d9:91:04:3c:53:6f:53:1c:6e:78:ee:a1:47:78:
c2:dd:da:02:c8:96:f7:0b:31:c6:00:38:98:f9:dd:
1e:12:33:ec:e1:5c:23:75:61:07:a4:36:4c:7b:2e:
98:e8:49:97:31:a4:aa:e0:e9:17:19:82:fa:7c:c2:
0a:f4:02:6c:bd:f5:77:51:52:3f:7d:af:c3:78:f8:
4f:2e:0d:0b:13:08:50:b3:69:4c:00:2d:b9:d2:70:
e6:b6:ac:0f:8d:d2:91:4e:69:71:a1:ce:ab:13:58:
cd:39:51:f4:b3:15:a1:ab:53:ad:a4:8e:02:84:52:
eb:f5:ee:ad:e7:d3:92:11:ed:c0:fe:a9:86:49:97:
05:c6:3f:c7:b7:f4:59:54:58:dc:de:02:57:e6:b0:
b5:99:56:61:0e:a9:28:99:3f:24:18:01:9d:e0:b4:
ad:43:8e:12:0e:3a:d7:0a:66:dc:fd:cf:49:9f:78:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:97:C4:61:9E:A0:A4:25:09:30:CA:44:34:D6:F7:0D:F8:8C:D9:EB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/55fEYZ6gpCUJMMpENNb3DfiM2es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:82:ab:71:1d:d4:75:09:fb:eb:ed:16:a9:e3:b6:ab:f2:aa:
7a:ae:6f:7d:a6:a9:40:c9:bf:41:4c:35:91:d0:18:87:b4:e1:
03:95:58:d0:5d:7a:34:54:83:ca:f3:aa:c0:4f:6e:f8:bc:02:
eb:49:8a:55:00:8a:64:b6:3b:b2:78:f9:6d:50:77:4f:e7:9d:
66:34:af:f3:43:b3:39:00:ce:0e:c7:53:44:4a:bc:f6:b9:b9:
1f:8a:35:66:29:b5:b4:e5:89:57:d6:dd:53:cf:30:59:b5:1c:
09:d2:97:8c:95:ea:ba:27:fb:35:ff:e8:cc:39:05:61:04:e4:
ec:3c:10:4a:4c:85:25:fa:d5:f8:c8:71:15:4e:f2:50:47:ad:
3b:91:d0:ca:46:9c:bb:dd:0e:4e:b8:91:d9:a4:bc:86:83:f1:
13:e5:f1:1d:41:bf:bd:8d:23:d0:75:8a:86:b5:1e:57:4a:63:
e8:35:2f:d9:6d:d3:b7:7e:b3:c3:83:0c:fb:0a:0e:15:46:f2:
8f:61:32:f6:0f:07:ac:33:e3:a1:36:81:b4:5a:0d:dd:99:cc:
36:55:a5:1f:2b:9c:84:46:d3:6a:6b:aa:69:d3:06:3a:b0:83:
f9:11:fd:fc:28:03:15:8f:dc:81:ac:00:70:9e:63:20:36:54:
96:8b:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org