Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/5nSFgMierT-xO2qj8RfXWkdGgFM.roa
File: 5nSFgMierT-xO2qj8RfXWkdGgFM.roa (raw, json)
Hash identifier: SU6SOErNU/vYjrI0AZ/yDKeM1jfM4NvDNnXoYagmhvY=
Subject key identifier: E6:74:85:80:C8:9E:AD:3F:B1:3B:6A:A3:F1:17:D7:5A:47:46:80:53
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01907814ABDA5193844C9CE601C7B5A3DA29
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/5nSFgMierT-xO2qj8RfXWkdGgFM.roa
Signing time: Wed 03 Jul 2024 10:12:18 +0000
ROA not before: Wed 03 Jul 2024 10:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202325
IP address blocks: 83.222.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 12 Jul 2024 13:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:14:ab:da:51:93:84:4c:9c:e6:01:c7:b5:a3:da:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 3 10:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6748580c89ead3fb13b6aa3f117d75a47468053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:43:0d:56:4d:53:56:19:42:f1:f6:f7:48:
42:ee:4e:79:22:f2:de:ca:f5:a0:27:ae:66:1e:4d:
87:5e:2f:42:cd:e3:fc:4c:63:9c:3a:03:ac:e2:9c:
75:6b:23:65:a3:15:35:f2:c7:0e:f2:c6:43:55:45:
32:ad:b8:49:56:c5:ef:ec:c3:0c:36:1e:ea:d8:fd:
99:92:69:6e:da:39:11:ea:02:15:17:0c:11:2f:01:
0c:a5:13:52:d0:cd:32:81:62:7a:1e:04:0f:6a:82:
32:40:85:88:2a:71:fa:57:d3:90:78:ab:16:52:b3:
e6:e0:99:c9:c9:be:1b:7a:b0:e9:2b:a1:74:bd:6d:
73:75:42:0c:f6:3b:7f:df:66:17:f1:8a:d0:9a:41:
7f:7d:93:78:7b:14:ff:9c:34:1e:39:ae:bf:6c:33:
ae:66:bf:c5:70:fe:66:05:8f:1e:5b:62:e4:d3:f1:
4e:75:e2:50:f2:1d:f3:96:06:3e:52:3c:01:ff:a6:
aa:0b:4f:60:68:8d:b4:8c:37:04:a5:11:42:75:e0:
9f:72:a5:eb:b8:47:3b:a8:2a:8d:9b:7f:e2:ab:f2:
46:01:41:cf:9a:55:0d:64:e2:29:11:b7:c9:32:37:
81:b0:2d:78:81:38:9e:09:ae:9e:63:f9:02:0a:69:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:74:85:80:C8:9E:AD:3F:B1:3B:6A:A3:F1:17:D7:5A:47:46:80:53
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/5nSFgMierT-xO2qj8RfXWkdGgFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f0:8d:38:ca:d4:a8:6a:ec:fc:d1:92:60:58:dc:4f:25:70:
0f:aa:b2:36:97:e0:e7:40:72:3f:15:f3:d2:12:98:a8:fe:72:
7c:bc:3f:a8:d0:de:0b:bb:2a:39:6a:94:c3:78:d4:c1:b6:b6:
3d:38:08:f6:65:21:5c:15:f5:15:5f:b1:48:7d:f8:f7:60:64:
8d:14:e5:6d:59:e0:7a:cd:d4:35:e6:14:14:ca:35:8e:f6:ee:
30:60:8d:60:47:ef:e5:c4:d9:21:2c:89:2b:5c:7c:e2:f5:89:
7f:e0:3f:58:d7:ce:c0:aa:3d:40:3e:ce:bc:89:63:dd:bb:c6:
b4:8c:b2:66:66:99:7a:72:22:f2:bf:bc:35:c3:81:af:a9:15:
ca:14:c1:48:05:5f:1f:0c:ec:0f:1f:01:72:9e:83:20:17:19:
49:27:5e:4b:97:53:c9:8a:cf:a7:70:d0:e8:c9:b1:b9:a6:e4:
cf:a3:90:bd:b9:29:fd:bc:d8:7f:5c:b9:de:a1:45:37:1e:65:
28:31:cf:f7:62:d7:9e:a2:48:88:01:38:4e:8a:14:d1:77:eb:
3d:3a:31:e1:28:50:4f:2b:b1:ba:45:4d:a2:b7:6c:da:0e:97:
31:99:c5:a6:fd:35:ff:68:43:f6:1d:fd:05:df:9b:fb:cb:9f:
64:a1:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 16:43:21 2024 by rpki-client on console-fra.rpki-client.org