Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5_H5RIpzTX3PP5OMDVzW6bzXyVM.roa
File: 5_H5RIpzTX3PP5OMDVzW6bzXyVM.roa (raw, json)
Hash identifier: c/L+un5zzFEN+h4JJZ0j3zOjtVgbfGTapBw0YnxyVaQ=
Subject key identifier: E7:F1:F9:44:8A:73:4D:7D:CF:3F:93:8C:0D:5C:D6:E9:BC:D7:C9:53
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01879DCACE6F0BDE0A36C39932CF60BE2F01
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5_H5RIpzTX3PP5OMDVzW6bzXyVM.roa
Signing time: Thu 20 Apr 2023 08:32:06 +0000
ROA not before: Thu 20 Apr 2023 08:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 45.90.19.0/24 maxlen: 24
185.240.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 08:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:ca:ce:6f:0b:de:0a:36:c3:99:32:cf:60:be:2f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 20 08:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7f1f9448a734d7dcf3f938c0d5cd6e9bcd7c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:88:3e:83:2c:4a:bd:7f:8e:11:80:91:f3:
31:ec:cb:f6:5e:af:e0:80:86:c0:bf:57:9c:80:d1:
29:78:ae:03:bf:88:40:34:31:76:2d:d6:9d:c5:a3:
f9:05:c2:6b:13:34:5a:74:24:fc:56:be:af:7b:1e:
79:9a:bc:87:57:e0:0b:32:4e:89:68:80:2d:6b:27:
ea:92:67:37:cb:b9:3e:d4:3d:fd:d5:92:1e:03:e5:
f1:64:91:19:14:f1:83:03:f0:0d:57:0a:c9:75:50:
39:33:c2:db:e0:a2:26:38:f6:02:d0:fc:c4:49:d6:
cc:7f:b5:96:64:b9:70:f0:94:3f:f7:82:c1:ac:cb:
a5:76:fa:13:b3:a5:2e:cf:4d:c0:68:72:1b:ea:bf:
ba:9c:37:24:ec:41:f2:ff:5b:49:17:9b:88:40:39:
94:9c:c6:52:45:bc:15:30:12:15:f3:1f:a7:27:09:
14:8f:75:fa:fe:56:fe:dc:f6:c8:13:05:cd:c3:de:
f6:20:53:79:42:b7:af:f4:fa:15:3d:4d:03:f7:b3:
c2:e7:e8:1a:5a:66:83:e3:f6:1c:ae:30:84:d0:4b:
00:23:02:f5:83:22:51:cb:17:17:61:71:fc:f9:42:
e4:38:cd:40:20:7c:30:51:34:c2:66:c2:cb:6f:7b:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F1:F9:44:8A:73:4D:7D:CF:3F:93:8C:0D:5C:D6:E9:BC:D7:C9:53
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5_H5RIpzTX3PP5OMDVzW6bzXyVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.240.123.0/24
Signature Algorithm: sha256WithRSAEncryption
87:74:51:6c:77:46:fc:06:80:4f:e1:ec:6e:fe:de:c0:04:2b:
8c:fc:71:28:24:83:10:16:e5:4f:02:e7:b8:c5:f8:bb:b4:16:
15:98:11:49:38:de:8b:e1:cd:7c:11:a7:47:60:24:fb:4e:ac:
0b:28:7a:59:a7:00:8c:45:22:4c:dd:3c:b4:41:13:26:94:38:
62:fe:11:6c:6f:d8:27:04:8c:21:d6:03:0b:29:cb:1b:b8:ef:
52:08:99:81:da:ae:f7:c7:63:63:73:bd:7e:d0:1d:aa:c0:63:
fc:db:98:3d:42:9b:b8:16:68:19:c4:ab:95:d1:0a:74:36:df:
25:18:ea:cf:ff:7c:d2:09:7f:13:9e:ea:1d:a6:10:8f:10:b9:
78:2a:c0:0b:ca:f7:36:83:65:29:9a:9a:a0:74:4d:a8:42:86:
80:8b:80:5f:51:ec:0d:95:26:9d:8b:f9:af:7e:68:20:b9:eb:
6b:5c:83:cf:90:85:59:3f:12:2d:f9:8c:63:81:32:af:13:9a:
bf:d0:fc:9d:2a:a6:ea:d1:5c:d8:31:cc:68:d8:a9:a3:9b:e7:
64:a2:c0:d3:0a:9a:8d:10:15:12:b4:ab:8a:31:dc:4f:d2:3e:
0a:00:4c:dd:af:1c:50:d0:bf:4e:b8:32:f4:fd:40:88:13:97:
9e:3a:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org