Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/N5rO_iwnOziLOEYV_-n5O6yK2Us.roa
File: N5rO_iwnOziLOEYV_-n5O6yK2Us.roa (raw, json)
Hash identifier: ITF+vwie2u38jYCWoxV1V43++PfM1ux5MQnJz+MF9ag=
Subject key identifier: 37:9A:CE:FE:2C:27:3B:38:8B:38:46:15:FF:E9:F9:3B:AC:8A:D9:4B
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 018CC94E697DE28DD71B12C75F1882D4632B
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/N5rO_iwnOziLOEYV_-n5O6yK2Us.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56443
IP address blocks: 185.69.120.0/22 maxlen: 22
185.127.176.0/22 maxlen: 22
185.129.208.0/22 maxlen: 22
185.199.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:69:7d:e2:8d:d7:1b:12:c7:5f:18:82:d4:63:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=379acefe2c273b388b384615ffe9f93bac8ad94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:75:ad:fb:fb:6e:06:31:70:ee:2e:0d:8b:
bb:a8:4f:17:cd:82:fd:84:24:3f:52:50:f4:94:a6:
fc:03:8a:c0:5c:71:1b:b8:de:8c:dd:8e:7d:0b:91:
1e:5f:ee:bc:47:6a:fc:0d:04:88:8c:51:e3:18:90:
97:51:88:5b:13:72:ab:5b:88:6e:dc:dc:5b:bc:a9:
69:89:37:80:b2:87:66:c3:8d:19:6e:d1:f5:59:b6:
5f:64:2f:44:cc:58:62:c6:a6:6c:a7:7e:6f:c2:b1:
e6:dc:8c:c3:2f:b7:51:49:f3:4c:08:0e:46:0f:64:
45:af:22:1d:bb:82:7a:0d:5d:00:29:fd:3e:ef:34:
b2:1b:dd:8e:cf:fa:0f:59:b9:d8:13:cf:23:d0:aa:
a7:0a:60:3f:52:de:1a:d8:8e:40:49:28:71:a4:40:
94:9a:02:59:55:8f:7c:0c:58:8a:d5:a8:33:89:f1:
2d:b5:3e:35:b3:be:44:99:93:4b:c4:fe:01:37:98:
aa:77:89:bb:7e:cc:36:db:8e:1a:68:2a:e4:94:49:
a6:a2:c8:8b:02:42:88:f2:37:c2:77:69:b5:33:4d:
ca:d7:88:7c:4d:19:6c:d2:6a:48:f1:e9:58:e1:2e:
f2:e6:39:5d:30:bf:1d:ba:5f:7f:20:1a:f0:85:2f:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:CE:FE:2C:27:3B:38:8B:38:46:15:FF:E9:F9:3B:AC:8A:D9:4B
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/N5rO_iwnOziLOEYV_-n5O6yK2Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
185.127.176.0/22
185.129.208.0/22
185.199.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:eb:7d:06:ee:70:4b:92:34:40:42:93:09:23:f7:37:26:db:
45:70:0c:c1:41:4c:2f:e4:ba:2a:69:09:0f:c8:51:29:20:37:
15:57:82:30:12:60:47:aa:fc:c1:23:78:84:80:0c:09:7b:16:
79:98:65:bb:ce:22:74:73:33:5b:77:cf:55:82:51:42:72:b7:
f6:c1:f1:ad:b7:b4:d7:71:78:86:2a:62:07:2a:6c:7b:de:16:
23:c7:b5:b2:fd:ff:a5:fe:c4:da:1e:d7:7e:03:49:84:ed:25:
34:ea:43:a7:89:38:bf:44:8e:1f:2c:0b:f2:bb:8a:bf:03:c5:
21:3c:90:da:2c:6b:0f:73:bb:96:02:aa:f5:9c:f2:94:34:c2:
3c:da:92:96:9b:82:40:14:12:96:32:46:50:56:f4:25:60:87:
d8:1e:6a:a9:62:eb:af:45:92:b9:58:bb:48:75:57:39:e0:3d:
07:43:86:de:ba:54:ab:41:5c:a8:ec:7e:71:2d:96:88:41:95:
12:83:72:b8:04:ce:81:bb:81:b8:44:a6:8b:a3:ae:f3:ca:29:
e0:b3:55:bb:c2:20:af:b9:6f:12:ac:97:f0:2d:bb:f1:27:da:
27:5e:95:9a:95:1d:44:d1:45:6e:63:90:95:8d:41:5e:a7:4e:
0b:a3:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:40:50 2024 by rpki-client on console-fra.rpki-client.org