Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RRivvSMeWgQu_zwBy6WB6Z3KPUA.roa
File: RRivvSMeWgQu_zwBy6WB6Z3KPUA.roa (raw, json)
Hash identifier: 41BoAHSGh8fOCMKh7YjkXs0CrHZ50TVteHkBMgdzVk4=
Subject key identifier: 45:18:AF:BD:23:1E:5A:04:2E:FF:3C:01:CB:A5:81:E9:9D:CA:3D:40
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018C0A694AFEA17AEDEC7E05BFFC3888B8BF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RRivvSMeWgQu_zwBy6WB6Z3KPUA.roa
Signing time: Sun 26 Nov 2023 06:55:21 +0000
ROA not before: Sun 26 Nov 2023 06:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140096
IP address blocks: 185.188.5.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:69:4a:fe:a1:7a:ed:ec:7e:05:bf:fc:38:88:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 26 06:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4518afbd231e5a042eff3c01cba581e99dca3d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:37:b2:0a:29:ff:16:78:3f:01:a2:25:36:
86:11:c2:ed:51:ce:dd:a6:0d:34:a0:5e:9f:d1:61:
bb:03:fe:a9:b7:dc:6f:88:46:06:8a:5c:f8:3d:ee:
db:71:9e:f5:fb:90:c0:7f:23:18:69:1f:29:dc:e8:
75:bf:5e:f9:f7:e9:4c:27:14:3f:00:52:9e:26:c6:
6e:cf:49:1c:b4:98:36:a7:15:7d:ef:af:12:19:bc:
75:66:84:0d:fb:dd:97:47:24:7a:0d:ac:41:56:f6:
c6:a7:07:76:63:06:bd:2c:92:ae:b6:27:9b:0d:c2:
51:35:31:bc:6c:8d:03:9a:ba:75:45:38:2d:fd:5d:
d1:ce:10:7e:d9:26:ad:bd:6a:2c:58:91:26:89:78:
dc:d1:93:a1:8a:82:35:ab:c5:23:06:d4:77:c9:fc:
61:eb:43:47:d2:23:d7:7f:c8:ab:ef:8e:54:d8:98:
49:aa:14:45:d6:6d:6b:86:36:7d:db:29:0b:e6:18:
fd:75:c0:bb:75:8a:4f:76:5b:e3:68:d5:d9:29:28:
af:77:3d:fa:38:b9:00:3f:8d:87:91:5a:1a:78:3d:
c1:0b:84:c5:af:37:01:50:40:b7:4a:3b:73:91:b9:
bb:c3:86:e0:35:f5:99:9a:f5:8d:b0:dc:38:14:72:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:AF:BD:23:1E:5A:04:2E:FF:3C:01:CB:A5:81:E9:9D:CA:3D:40
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RRivvSMeWgQu_zwBy6WB6Z3KPUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.5.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f9:fb:1a:5a:1f:82:0b:e5:f9:00:f7:1b:43:af:ae:1c:99:
63:3f:11:0a:c4:cc:f1:fd:c1:30:01:ec:5a:62:14:2e:86:09:
d6:bb:87:98:ac:7c:42:20:44:28:77:9b:a1:5a:14:59:73:3c:
a2:e8:6d:89:df:07:12:6c:36:34:60:66:d5:49:50:31:7c:a5:
32:b9:47:0e:65:f1:52:5f:de:fb:39:9e:35:39:90:db:34:ff:
c7:d1:d4:70:ea:ba:c3:a0:ab:21:df:62:53:86:c4:90:c3:c2:
c6:c4:94:14:48:7a:f4:7d:37:0b:02:b8:f7:29:9d:3e:3f:0c:
5b:50:f3:4a:84:4e:c7:58:d4:6a:a3:c6:e2:1d:55:10:55:ce:
f9:a8:de:5a:19:72:65:37:a6:12:c3:23:7a:47:d8:ca:ee:5c:
a0:33:ab:d4:e0:5b:33:89:79:1f:71:e8:60:d1:e0:5f:03:8e:
7a:d2:ef:46:92:a0:2d:76:8a:1c:90:94:61:f3:18:9a:00:46:
65:87:b7:69:9b:08:fc:d1:a8:85:82:89:25:24:09:1f:0b:e1:
30:14:c1:50:ad:8e:b5:11:fc:9c:70:ca:7d:93:df:5f:09:6a:
58:d4:63:2e:e5:ee:97:1b:fa:08:15:07:5e:cb:6e:3c:44:16:
5e:54:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org