Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ikUSsnrw7KtGUqj4uBBWpADs8nQ.roa
File: ikUSsnrw7KtGUqj4uBBWpADs8nQ.roa (raw, json)
Hash identifier: vnt9WcEN6f467pFeh5sYlWF2qvfe8JdyTerZGzOVeno=
Subject key identifier: 8A:45:12:B2:7A:F0:EC:AB:46:52:A8:F8:B8:10:56:A4:00:EC:F2:74
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AE5FF169BB7F7EC5A3A9E2C00FE83
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ikUSsnrw7KtGUqj4uBBWpADs8nQ.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202010
IP address blocks: 5.1.74.0/24 maxlen: 32
5.1.81.139/32 maxlen: 32
5.1.81.0/24 maxlen: 32
178.251.228.0/24 maxlen: 32
5.1.81.140/32 maxlen: 32
2a01:367:dead::/48 maxlen: 48
2a01:367:beef::/48 maxlen: 48
2a01:367:ffa1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 May 2024 14:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e5:ff:16:9b:b7:f7:ec:5a:3a:9e:2c:00:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a4512b27af0ecab4652a8f8b81056a400ecf274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:52:bd:c0:dc:26:8b:0f:96:0f:1d:1c:e2:
c8:d2:ba:ba:5d:be:6e:e3:bc:e5:47:6d:44:63:f1:
b7:fe:32:96:98:75:50:87:3e:48:f0:9d:a8:0b:40:
26:87:c5:28:55:bc:35:ed:1b:07:83:87:13:50:c8:
11:6d:5b:e6:e5:5d:39:4d:38:17:19:2a:c8:05:f0:
9b:60:89:56:80:0c:63:33:3b:1d:2d:ae:76:42:8a:
48:d3:01:d3:28:f3:6f:9e:c1:f8:ae:e7:b9:97:fc:
3a:23:81:b8:86:27:ea:f3:c5:8f:dc:ea:62:a0:85:
19:15:01:03:2a:6b:fe:27:76:b6:d0:bf:4a:f7:ae:
2b:cc:bf:cb:1e:b6:6f:a4:b1:20:a9:51:a8:27:44:
2c:52:91:c4:55:b5:e7:85:8d:02:39:7b:05:ca:8b:
61:2a:73:bb:e1:17:82:48:c3:85:a6:65:05:d6:49:
fd:9a:34:68:5a:2f:1b:d9:ca:d6:90:0d:d6:c9:77:
63:72:30:7a:c1:ac:67:1a:0a:d5:77:c0:32:b7:fd:
a4:8e:b9:2e:75:41:4e:7e:b3:66:44:e7:4a:e4:d4:
84:1f:9b:04:e1:ca:c6:cf:53:63:02:08:6a:ca:2a:
12:35:90:3d:e5:be:35:40:07:88:40:3c:5e:46:31:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:12:B2:7A:F0:EC:AB:46:52:A8:F8:B8:10:56:A4:00:EC:F2:74
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ikUSsnrw7KtGUqj4uBBWpADs8nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.74.0/24
5.1.81.0/24
178.251.228.0/24
IPv6:
2a01:367:beef::/48
2a01:367:dead::/48
2a01:367:ffa1::/48
Signature Algorithm: sha256WithRSAEncryption
39:e1:ea:77:ff:9a:5d:e5:6f:99:55:09:5a:37:f3:6b:c2:86:
83:b5:6a:1b:5b:20:a5:dd:96:75:c4:22:e9:59:c5:73:be:b7:
05:2d:d8:36:e6:a0:53:bd:5e:9d:55:db:96:d0:0f:07:87:f9:
e3:ad:79:22:97:b5:ee:8b:34:c8:16:c1:77:f5:c4:e7:18:33:
2b:af:59:87:1d:29:cf:81:74:ac:45:a0:ab:64:44:10:b0:29:
7b:f1:68:b0:20:49:aa:0e:30:64:c7:e4:5f:91:ee:87:0f:0d:
69:c0:a9:76:8c:86:7f:f6:fa:b0:ea:f2:8b:28:f9:01:4c:52:
3a:eb:6e:9e:3a:1d:30:5d:a8:57:36:de:3c:81:df:1d:ec:e3:
13:d3:a3:22:c0:06:1f:ee:de:d3:b6:0e:1d:25:8d:0c:7f:7b:
32:b3:a8:e2:88:2a:5e:72:6c:d4:ac:dd:46:52:3c:dc:f5:d2:
cc:cc:e4:36:16:a6:8b:fc:42:f7:02:15:30:67:c1:6e:5e:35:
18:37:ea:95:d0:34:12:8e:d4:9c:4f:e2:db:7a:23:ec:9f:5c:
f1:bf:70:48:9d:21:26:db:49:37:b2:33:37:f3:72:0e:8e:44:
88:67:8f:12:00:cf:e6:79:34:a0:6c:4f:73:42:fa:57:c6:81:
56:90:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org