Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/S0oVGHbGrLTxYHzP-c2PMYa3HbY.roa
File: S0oVGHbGrLTxYHzP-c2PMYa3HbY.roa (raw, json)
Hash identifier: K0nEWuybct3VYHu8FCO77iWUXWuoRgIXCxTLzaYQiX4=
Subject key identifier: 4B:4A:15:18:76:C6:AC:B4:F1:60:7C:CF:F9:CD:8F:31:86:B7:1D:B6
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01857139BAADBE70AE64831692B272459C7E
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/S0oVGHbGrLTxYHzP-c2PMYa3HbY.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200296
IP address blocks: 5.56.135.0/24 maxlen: 24
79.143.85.0/24 maxlen: 24
87.236.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ba:ad:be:70:ae:64:83:16:92:b2:72:45:9c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b4a151876c6acb4f1607ccff9cd8f3186b71db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:3f:30:16:2d:56:3d:e0:d5:55:08:99:40:
c4:ed:f6:6d:92:cf:b1:88:dd:42:c6:8f:ce:4b:3f:
55:22:0d:8b:92:65:c1:13:1f:12:6c:66:d5:2a:23:
64:83:a9:e0:27:48:b0:20:04:da:17:de:d8:9d:d1:
19:fa:89:77:af:5e:4e:2a:c2:84:cc:e7:32:7b:bf:
b4:fa:c4:21:66:1a:03:9e:04:ca:62:ae:4b:cd:f1:
22:c2:51:87:f4:e7:88:51:74:6d:98:c3:10:69:13:
f1:67:fa:aa:cc:ea:80:43:fd:02:e6:c1:1b:bd:99:
da:3a:21:5b:72:af:7e:0a:70:32:10:3f:a8:09:69:
0f:8c:13:17:25:1c:8e:26:0b:f2:b7:eb:da:a7:f0:
50:90:d1:6e:31:3c:78:2a:59:7a:b1:47:8e:89:e1:
99:0d:4a:b9:7a:8c:17:34:e9:53:28:23:36:ec:7d:
18:54:f4:05:1e:7c:c3:c6:98:12:8d:63:b7:df:2d:
00:69:83:de:5e:f2:43:cc:bb:9b:ef:ae:22:0a:a6:
1e:45:c0:a9:fa:22:2a:24:fc:de:d7:7b:43:a4:8e:
5f:7f:b6:1f:f3:d7:0a:08:9e:ce:ae:16:a5:ff:35:
ba:b6:ab:ba:88:5a:3a:33:80:a6:50:b5:1d:c9:6e:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4A:15:18:76:C6:AC:B4:F1:60:7C:CF:F9:CD:8F:31:86:B7:1D:B6
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/S0oVGHbGrLTxYHzP-c2PMYa3HbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.135.0/24
79.143.85.0/24
87.236.211.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d1:4f:cb:21:ec:f3:d0:f2:3e:1f:87:03:82:35:3c:62:30:
66:1a:03:3e:9f:08:36:91:82:41:98:6e:57:35:ed:3d:0c:15:
8b:65:44:56:71:b3:9a:86:a4:8d:da:7b:95:a3:98:cd:e2:3a:
65:8e:eb:e7:6d:8d:b5:8f:cc:10:3d:da:5a:46:01:7e:49:8a:
3d:6b:13:b3:af:7f:b1:f3:da:04:31:ae:35:1b:b8:28:b6:15:
c3:8d:89:c1:52:07:9a:56:e1:07:d3:d5:9d:aa:c4:be:fe:f0:
18:8c:ff:98:a2:09:b2:2a:a0:ef:64:67:65:c1:4b:13:46:81:
ac:ed:a2:82:32:cf:ac:8c:c1:bf:df:38:18:6f:51:87:fc:b0:
6a:33:e7:93:42:b7:f7:80:43:51:3b:71:f2:a7:64:bc:9e:7c:
14:0c:1b:3a:81:75:f1:61:42:34:9d:e3:c5:45:4f:d1:7f:70:
23:0a:e2:50:5e:44:8e:87:e2:4c:07:3d:d6:42:fd:4c:4e:15:
b4:27:87:95:7f:56:f5:16:68:81:d2:c4:52:19:6d:15:5c:cd:
bb:eb:2c:7e:25:0a:77:a3:96:a4:d9:82:00:41:a9:ff:c0:e6:
65:8b:03:75:5d:80:b5:57:a3:10:36:5c:c4:22:e6:ca:6d:4a:
26:99:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org