Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5SwDTPj5wlIaYPzIaBkln_3c9gA.roa
File: 5SwDTPj5wlIaYPzIaBkln_3c9gA.roa (raw, json)
Hash identifier: 6ZpJAs/l+J93YzsHfP8ylxNBhM2dDCLpwuRtEQTJLj8=
Subject key identifier: E5:2C:03:4C:F8:F9:C2:52:1A:60:FC:C8:68:19:25:9F:FD:DC:F6:00
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B2399AED1155BF3D80B54E9EC3DC7E5BD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5SwDTPj5wlIaYPzIaBkln_3c9gA.roa
Signing time: Thu 12 Oct 2023 11:15:56 +0000
ROA not before: Thu 12 Oct 2023 11:15:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199436
IP address blocks: 185.225.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 16:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:99:ae:d1:15:5b:f3:d8:0b:54:e9:ec:3d:c7:e5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 12 11:15:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e52c034cf8f9c2521a60fcc86819259ffddcf600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:5e:bb:84:1c:b2:5d:8f:40:1e:3b:2b:39:
44:10:66:51:6d:a8:d1:7d:d5:f6:4f:04:1b:34:8f:
50:5b:76:4a:eb:21:71:d2:83:3d:be:a6:86:61:98:
2f:ab:30:76:ab:54:0b:b1:79:f2:da:98:6c:75:e4:
b3:88:9b:93:c6:4a:d4:9e:5b:cb:e5:9a:96:5b:55:
99:64:11:2a:52:d7:c8:b1:30:f8:87:5a:5b:b5:7c:
54:a8:85:f9:04:fd:0f:d9:eb:69:40:4b:3a:31:22:
e7:70:5d:b9:c9:30:44:a6:de:31:1c:c4:1e:31:e9:
d3:2c:51:33:64:58:a8:a7:12:76:6b:7c:5d:cc:16:
93:54:79:b6:a3:47:53:41:5d:61:83:8a:cc:ff:64:
4c:bc:c3:ed:ea:61:e7:8a:84:dc:b8:c4:1a:09:d5:
90:2f:e6:0f:eb:0d:e1:63:91:81:88:85:7b:ee:7f:
66:28:bd:b7:bf:76:83:c7:25:c5:72:9e:05:fd:d9:
6e:9a:b7:62:3d:c7:45:a0:2a:bb:4d:2d:d3:0d:38:
91:2a:82:77:8a:05:b1:db:a7:c4:05:f3:6c:49:a2:
8f:d4:f2:ca:89:9d:46:03:f9:d4:0e:c8:5e:f4:82:
1f:20:09:4a:a1:ea:0b:99:64:e1:80:9c:8b:84:fc:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:03:4C:F8:F9:C2:52:1A:60:FC:C8:68:19:25:9F:FD:DC:F6:00
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5SwDTPj5wlIaYPzIaBkln_3c9gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3f:6a:48:0e:1e:c7:c5:2b:92:c2:b7:74:f8:a2:c0:6b:b7:
76:bd:1c:ea:82:ed:1a:17:32:e9:43:10:41:d9:4a:52:bd:a0:
f4:56:ba:7e:bc:1e:e0:ed:b9:a9:18:ac:46:a8:c4:51:de:66:
07:1d:9e:93:2b:dc:8d:38:1a:62:c7:ad:6d:1a:f4:41:ff:6d:
ba:e9:15:92:88:50:63:f5:a7:f0:7a:b1:43:5b:f7:a7:f1:11:
3a:fa:fe:c0:70:55:fe:51:b1:54:71:cc:76:fe:9a:c5:5e:65:
9d:55:84:b9:ba:b6:4a:c6:69:23:45:f1:6b:7b:62:44:b8:c8:
5d:21:85:55:03:45:ae:b5:e9:16:1b:cb:28:67:85:4f:b8:c4:
b1:81:58:cd:18:d8:c6:ad:1f:aa:db:d5:8a:84:2e:98:da:df:
db:17:5a:8d:4a:f3:0d:dd:ca:95:8a:e5:57:b3:42:29:3d:5e:
9b:a9:f3:b7:3b:ed:48:5f:8c:c4:bd:fd:1c:71:29:47:97:21:
d0:df:98:92:0a:e5:b7:11:20:22:5e:6b:11:69:99:b1:56:fc:
4d:37:22:ab:79:52:c7:c2:4b:48:13:26:ea:02:ec:20:38:dc:
4b:4d:27:c3:b7:9d:6d:1b:9c:91:03:b2:14:f1:5d:fd:fa:06:
3e:2f:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org