Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/5c4xmDGsLBdLf5Z3ei-AOga0RgM.roa
File: 5c4xmDGsLBdLf5Z3ei-AOga0RgM.roa (raw, json)
Hash identifier: GEDYuDDs4/3tFtQY9Qpx/c57jwDtH0L8POf0knrPUvo=
Subject key identifier: E5:CE:31:98:31:AC:2C:17:4B:7F:96:77:7A:2F:80:3A:06:B4:46:03
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01877567D655A5178027FCC77A9950AE549C
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/5c4xmDGsLBdLf5Z3ei-AOga0RgM.roa
Signing time: Wed 12 Apr 2023 12:19:11 +0000
ROA not before: Wed 12 Apr 2023 12:19:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210107
IP address blocks: 193.36.60.97/32 maxlen: 32
193.36.60.0/24 maxlen: 24
193.36.61.0/24 maxlen: 24
193.36.60.60/32 maxlen: 32
193.36.60.80/32 maxlen: 32
2a0d:d386::/32 maxlen: 32
2a0c:4a40::/32 maxlen: 32
2a0c:586::/32 maxlen: 32
2a0d:d387::/32 maxlen: 32
2a0c:587::/32 maxlen: 32
2a0c:584::/32 maxlen: 32
2a0c:4a46::/32 maxlen: 32
2a0a:fa42::/32 maxlen: 32
2a0c:4a42::/32 maxlen: 32
2a0a:fa46::/32 maxlen: 32
2a0c:4a43::/32 maxlen: 32
2a0d:d385::/32 maxlen: 32
2a0c:585::/32 maxlen: 32
2a0c:582::/32 maxlen: 32
2a0a:fa44::/32 maxlen: 32
2a0c:4a44::/32 maxlen: 32
2a0d:d382::/32 maxlen: 32
2a0d:d383::/32 maxlen: 32
2a0a:fa43::/32 maxlen: 32
2a0c:581::/32 maxlen: 32
2a0c:4a45::/32 maxlen: 32
2a0a:fa45::/32 maxlen: 32
2a0d:d381::/32 maxlen: 32
2a0d:d384::/32 maxlen: 32
2a0c:580::/32 maxlen: 32
2a0d:d380::/32 maxlen: 32
2a0c:4a47::/32 maxlen: 32
2a0a:fa47::/32 maxlen: 32
2a0c:583::/32 maxlen: 32
2a0c:4a41::/32 maxlen: 32
2a0a:fa41::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Nov 2023 10:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:67:d6:55:a5:17:80:27:fc:c7:7a:99:50:ae:54:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Apr 12 12:19:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5ce319831ac2c174b7f96777a2f803a06b44603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:1b:1b:76:01:25:38:77:d8:3a:a6:c0:fd:
98:12:54:5e:f7:cf:38:83:06:ee:4f:5f:f2:ce:9f:
56:9e:1e:ab:03:06:ae:33:7a:20:7a:cc:ce:64:14:
a2:0c:89:15:41:2f:e4:aa:26:2b:1f:db:65:17:1a:
a0:5d:ee:ae:b0:5f:fb:ba:75:1e:16:44:f5:e6:d3:
cb:9b:ff:1a:b0:f4:f2:28:ac:95:62:48:4e:4b:da:
91:d7:dc:2a:20:1d:68:1a:e6:f2:7a:42:35:7d:cf:
ee:b5:23:99:db:12:f7:f4:8a:d4:8a:31:c7:65:06:
e2:90:d3:d9:78:41:85:bc:ad:a6:58:bd:c4:08:46:
69:af:0a:d8:5a:da:47:7a:70:d2:f8:1f:83:be:8a:
58:1d:57:66:70:85:b7:97:3a:4c:5c:8b:0e:f4:54:
4a:12:e8:84:c2:e8:c0:de:34:e4:63:e4:78:13:c7:
13:ae:0c:13:e3:07:92:b2:ca:c3:dd:08:68:23:24:
6f:a5:17:80:ba:2c:c3:3a:17:cc:00:4d:8e:f4:a4:
cd:2a:54:04:9f:a1:33:30:23:62:5f:28:c1:7c:63:
53:e1:09:11:42:f8:f5:cd:63:b8:de:16:1c:81:0e:
51:2a:c8:a3:3a:1e:8c:01:71:72:ae:79:a0:81:e8:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:31:98:31:AC:2C:17:4B:7F:96:77:7A:2F:80:3A:06:B4:46:03
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/5c4xmDGsLBdLf5Z3ei-AOga0RgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.60.0/23
IPv6:
2a0a:fa41::-2a0a:fa47:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:580::/29
2a0c:4a40::/29
2a0d:d380::/29
Signature Algorithm: sha256WithRSAEncryption
4f:95:9f:f3:43:78:d3:d8:a8:33:62:90:33:fb:c2:f5:84:87:
86:43:09:4b:cf:95:40:85:3e:49:36:ad:19:bd:8d:08:5b:c4:
b8:fd:78:de:80:c0:31:cd:36:8c:32:67:e3:6f:d9:89:14:2a:
ad:65:2d:b7:d9:80:c5:fa:9a:d3:82:d6:07:68:cd:9d:ba:63:
50:af:55:f1:41:eb:fc:d7:56:4a:49:f1:d9:8b:7b:1d:d1:28:
06:30:3f:6f:db:c2:e7:94:75:90:c1:3f:58:9b:98:b5:c0:22:
29:82:ab:1f:79:02:43:63:84:0f:d5:39:d5:9b:2a:2b:e2:67:
dc:47:10:1a:aa:1f:59:ce:a5:21:3f:91:c1:fb:54:fa:8a:86:
9c:7a:f4:b1:cd:4c:f0:fe:cb:9d:0a:b3:8c:54:b4:4b:60:b5:
db:6b:f4:5a:73:1d:f3:8a:3a:ec:43:0d:26:c8:f2:d5:50:d1:
0f:bd:32:f8:94:d6:ca:43:b9:94:1b:69:45:01:ce:bd:81:f2:
3e:94:60:d9:8f:17:16:f0:7d:7b:07:fc:0e:cb:23:d8:6c:a5:
e2:1a:eb:7f:08:ab:71:1c:ae:96:e3:dc:c9:4b:1b:65:af:a0:
c2:d2:14:22:83:c6:03:f7:50:52:ec:a1:5e:82:e7:9e:99:86:
e1:5c:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org