Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/5eo9eJvcMzj9xTA8sWUq8De3DxA.roa
File: 5eo9eJvcMzj9xTA8sWUq8De3DxA.roa (raw, json)
Hash identifier: nAZvmjviAlU9Kxajtd2O7zPx0VM6iuURL4nvBdPzQwc=
Subject key identifier: E5:EA:3D:78:9B:DC:33:38:FD:C5:30:3C:B1:65:2A:F0:37:B7:0F:10
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 01856BE5B1993CFBABE2FE2AF47761142A08
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/5eo9eJvcMzj9xTA8sWUq8De3DxA.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9186
IP address blocks: 213.58.0.0/16 maxlen: 24
195.245.128.0/18 maxlen: 24
2001:a40::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b1:99:3c:fb:ab:e2:fe:2a:f4:77:61:14:2a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5ea3d789bdc3338fdc5303cb1652af037b70f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:46:b1:1f:df:4b:4e:38:c8:85:93:87:7a:
51:72:82:be:c1:b7:72:4c:1a:0a:4c:f3:87:7e:31:
2b:9f:7f:94:63:f5:b2:ce:cd:84:2f:8c:97:ff:a6:
8f:ae:50:57:83:31:dd:6c:ce:a5:09:ed:13:cd:2f:
d4:3c:ef:4f:c0:08:da:5f:a9:f9:13:f0:67:54:2e:
17:13:1a:4b:20:f6:0d:88:ac:59:87:96:b1:b1:3f:
03:9b:b0:02:0c:5a:9f:aa:1d:f4:d8:59:db:eb:21:
da:f8:19:f6:5c:fb:e7:1b:09:27:fc:2b:d1:2f:03:
e5:43:c7:4e:95:ac:78:28:6b:bd:77:98:3b:08:8c:
64:65:13:4f:f0:ae:db:f3:b1:83:d9:de:ee:4f:d9:
1b:11:2f:f5:dd:e1:af:1e:7b:39:12:34:92:49:15:
3c:80:0e:2e:ca:fd:bb:ca:59:a1:e1:68:7f:a6:fc:
7b:7a:ff:b2:10:99:88:a4:da:3f:96:d4:0b:8a:df:
cf:76:19:c1:e0:40:18:7d:92:8f:bf:d5:3e:45:7a:
fe:60:ee:0f:fc:aa:03:dd:ad:54:d8:85:0c:50:1c:
b3:a1:76:a3:a9:70:a3:95:33:17:5c:53:c1:22:22:
4f:25:10:a6:f5:32:20:80:0a:e5:d3:65:a4:4b:72:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EA:3D:78:9B:DC:33:38:FD:C5:30:3C:B1:65:2A:F0:37:B7:0F:10
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/5eo9eJvcMzj9xTA8sWUq8De3DxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.128.0/18
213.58.0.0/16
IPv6:
2001:a40::/29
Signature Algorithm: sha256WithRSAEncryption
62:df:4a:79:72:ef:93:f6:fe:d5:74:0b:47:31:08:9d:97:ea:
de:e0:be:5b:af:88:ef:5c:de:8d:21:96:3f:99:8a:c1:3f:f8:
bc:86:1c:4c:d1:33:44:c4:c3:fb:0f:ac:cc:45:2e:13:98:7c:
b4:73:77:e1:fc:7e:b3:b9:ae:83:e1:94:4d:14:bf:ce:25:de:
b1:bc:57:c7:81:63:46:8c:9a:e9:53:23:2d:0a:9f:fe:a6:7e:
bd:6f:fd:d1:e3:63:bd:4b:34:a4:29:dc:41:cf:d0:1c:cd:66:
64:2a:84:64:86:96:71:ca:ec:ff:d7:74:72:7f:64:34:1b:d5:
37:1d:0e:ee:af:08:e5:65:bb:0c:9b:34:76:03:e5:63:ed:9f:
6b:9a:9b:c0:b2:b9:3e:c6:96:7b:dc:ae:52:33:62:2a:90:4e:
08:f8:18:40:dc:3a:a4:a8:4c:f2:07:32:12:76:45:09:7f:6e:
c0:a1:89:79:02:90:bf:eb:64:73:ac:f8:72:e3:04:5b:de:cd:
cb:47:17:e8:f2:5c:1c:43:15:a7:44:b4:10:21:27:b3:69:58:
a2:80:31:c6:77:a7:79:73:79:ba:9c:bb:9f:11:30:49:11:3e:
ed:da:e9:b9:20:ab:4b:14:74:9c:63:8c:ae:c9:dd:2e:d8:21:
97:00:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:57 2024 by rpki-client on console-ams.rpki-client.org